Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7e0c1ef-b358-3716-abb6-8954f364ed2b.roa
File: d7e0c1ef-b358-3716-abb6-8954f364ed2b.roa (raw, json)
Hash identifier: qQokWIuZh1CVEkVEsTTffOFwfbA1L7sJZWEsthY3oR0=
Subject key identifier: B9:A2:F6:87:F8:75:DC:21:35:DF:88:7F:24:95:CC:36:7B:5E:3B:E9
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0F2ABE1D0B5A9490F8B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7e0c1ef-b358-3716-abb6-8954f364ed2b.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 396616
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f2:ab:e1:d0:b5:a9:49:0f:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=8b1f33ab-e311-4ba0-997f-df8d61e17fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:b0:21:5b:a8:b3:f4:c7:db:69:3b:44:e6:
c4:95:fc:c6:e5:fe:7b:14:39:2b:bd:ae:4f:c1:2f:
64:24:0d:11:97:8c:91:4b:a5:0b:86:e7:79:ea:9e:
a7:d4:0c:b3:3c:7d:a2:e5:dd:5b:5c:26:c9:1d:3e:
26:9b:e4:e1:95:a3:90:02:a6:1e:64:0c:56:72:50:
5a:1e:8f:2d:69:33:ed:94:ee:bc:dd:e7:d1:c9:c7:
fb:47:9d:c7:44:74:9b:82:c9:af:10:12:b8:aa:36:
b5:f8:8c:d7:02:d9:9e:02:06:6d:ba:0a:96:4d:23:
be:e1:25:3a:66:c1:45:f1:5a:ab:da:e5:c1:4c:fa:
89:17:0f:9e:0a:e2:85:74:dd:63:21:56:1b:5a:c9:
65:7c:70:1b:83:6a:dd:f1:4b:c3:7b:0a:82:00:4a:
e5:96:f4:81:f4:bc:35:a3:e0:e6:39:25:25:df:90:
33:89:bf:8b:79:9a:d1:5a:77:d7:7b:fb:29:9b:e0:
c0:29:47:c8:bb:ce:12:77:3e:a6:67:45:92:ab:56:
49:a8:d7:0b:63:40:35:36:35:0b:3c:1d:38:32:7d:
0f:45:14:8e:0a:fc:f9:a9:2b:37:29:cc:8c:1e:6c:
be:d8:0f:02:0e:3e:e6:ee:e6:6c:31:a1:ea:a5:84:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A2:F6:87:F8:75:DC:21:35:DF:88:7F:24:95:CC:36:7B:5E:3B:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7e0c1ef-b358-3716-abb6-8954f364ed2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:a2:3a:c0:55:16:8b:9f:ed:4d:ad:24:c3:3d:1e:91:51:6c:
ea:87:77:9b:73:e5:d9:9a:84:0f:f5:d2:63:2c:3b:ca:1e:2f:
3d:1c:a8:2c:06:f3:04:99:11:15:78:95:05:77:5b:23:79:11:
ed:d4:d5:ed:14:cc:a5:85:43:ae:7d:b4:46:da:62:da:ed:b9:
6e:57:f2:3b:3a:90:b5:e3:8e:ec:82:4f:cc:87:7c:0e:02:da:
aa:1b:9c:d2:54:c0:31:72:72:82:a4:60:dc:c8:de:d0:58:2f:
eb:a0:7d:82:01:58:15:63:12:92:42:70:27:3a:c1:3d:1b:41:
95:10:9e:aa:e4:a8:60:30:ce:66:2c:bf:24:d7:b3:8b:38:e1:
5f:ce:5f:8d:24:15:00:e9:f6:16:33:1c:64:41:2b:ec:8a:c7:
92:82:ab:e6:c8:6a:8a:6e:81:20:be:6d:d5:66:5f:b3:8b:17:
1e:eb:1c:fb:c4:bd:f5:0e:4a:f8:66:17:6a:d0:d2:75:b9:bd:
b4:a0:54:39:23:f9:a9:bf:1f:0f:aa:be:63:47:76:d6:eb:0d:
64:0d:46:af:80:f6:c0:99:07:42:35:12:f3:ac:7e:ad:41:d3:
00:5f:3c:48:2d:17:d3:ea:7d:d8:91:0c:9b:ab:10:26:cc:f7:
42:d4:94:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:52 2025 by rpki-client