Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5345345-1f1d-31bf-ac2f-34e26af34e00.roa
File: e5345345-1f1d-31bf-ac2f-34e26af34e00.roa (raw, json)
Hash identifier: KhC3Kjgi0CqoBbU4rNymZyXMEkkCoF02katrr2+Lo/g=
Subject key identifier: F4:4E:FC:A6:B8:43:1B:37:52:B0:18:2B:83:0C:A7:76:50:6F:47:04
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BDBCBC26232738D05340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5345345-1f1d-31bf-ac2f-34e26af34e00.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 36631
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bd:bc:bc:26:23:27:38:d0:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=e0aea081-c22e-45ff-a567-cedeff526d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f2:69:78:99:8d:a5:9b:9d:bb:b0:21:b2:84:
7f:66:e7:e6:47:cb:e2:4f:b6:72:b3:fa:1a:d9:6a:
22:87:8f:7d:4e:66:9e:0c:1f:c2:12:b9:39:7a:88:
93:3d:7d:24:57:1e:bf:15:d5:4e:42:ed:95:15:70:
6a:37:a2:9c:d4:ea:3b:d9:92:08:a3:07:c5:d9:02:
1d:77:05:31:94:8a:f9:1b:2c:3e:a4:fa:08:54:eb:
b0:c1:22:00:34:a5:bf:0b:e0:3e:d4:30:66:51:d4:
8e:a9:3c:81:ee:80:5f:53:80:56:09:2d:b0:6a:4f:
c6:3b:27:01:a6:ee:b7:07:c0:5c:2a:4e:3b:d3:6c:
8e:9f:19:47:4e:dc:9f:51:60:f1:a6:c3:c7:56:d4:
4e:a3:cf:d1:bd:da:37:f0:a4:d8:47:e4:5c:2c:13:
0f:01:c9:36:7c:f1:60:83:09:a8:d9:93:8e:86:7e:
e1:91:28:3c:fc:ed:5f:d2:68:37:c3:0b:4e:98:c5:
28:a1:45:ef:76:00:e3:43:b9:17:df:83:7a:b5:22:
a5:d4:af:71:d1:06:f4:ae:54:db:65:44:3c:cf:19:
36:03:c9:98:ad:04:2a:16:7c:a0:d9:79:4f:57:f2:
de:9f:55:6a:d1:79:df:17:02:ac:30:e0:67:d8:ae:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4E:FC:A6:B8:43:1B:37:52:B0:18:2B:83:0C:A7:76:50:6F:47:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5345345-1f1d-31bf-ac2f-34e26af34e00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:a8:72:7f:fd:d1:98:f8:9a:5a:9a:f9:19:7b:98:ab:c8:8c:
4f:59:7a:1f:f8:ba:86:56:39:c6:a0:5d:36:15:5b:f7:3e:dc:
41:4f:4b:ac:0a:59:cf:90:c7:7c:f3:7f:fc:22:1f:88:3d:70:
a6:27:a5:50:85:97:e6:70:47:2b:cd:47:f0:30:20:3c:90:6f:
dc:53:ec:1e:a7:fe:77:87:d0:f1:1d:b2:8f:d0:6e:fc:b0:b4:
bd:f6:6a:6e:bd:4a:f1:c2:23:5c:dd:ff:00:d3:be:c4:8c:40:
2e:46:a2:b5:d4:3c:8f:57:39:6c:70:98:b9:f9:31:cc:8a:f9:
2e:fa:fe:e9:bd:e9:ff:28:17:63:17:b3:f8:d5:4b:cd:a8:dd:
d6:c8:ed:d3:cf:d9:d7:fe:09:65:ef:b6:e6:e5:c6:d6:dd:a9:
1d:d0:fe:cb:74:7a:f7:eb:8b:1a:e6:29:a9:3f:36:5c:00:7e:
52:92:16:72:dc:13:8f:c6:38:c8:b3:3f:b2:a2:40:66:47:ab:
21:f3:df:5e:bd:49:cc:a1:a0:62:77:5a:49:a6:b9:10:5c:1a:
17:d0:f5:27:88:cd:54:47:3c:b9:02:ef:dc:a3:bb:89:5c:9c:
7e:e5:46:e3:55:94:84:a0:d7:bd:e8:71:3f:57:f8:b4:14:f6:
ba:81:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:34 2025 by rpki-client