Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eceab0a5-eff8-3424-9dbb-ca9d8e2ca88e.roa
File: eceab0a5-eff8-3424-9dbb-ca9d8e2ca88e.roa (raw, json)
Hash identifier: mC2Sreh44FsLjzqssrBwiamHLkQvoM52CoDkgb9WNJ4=
Subject key identifier: 69:8C:5D:F5:78:D5:62:1C:F6:50:22:6F:28:38:1E:37:7D:BE:52:52
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BCBB3C93E446CCB72300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eceab0a5-eff8-3424-9dbb-ca9d8e2ca88e.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 36628
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bc:bb:3c:93:e4:46:cc:b7:23:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=39739c7b-09b6-4089-aa56-e56e4fefab4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e7:2d:e1:27:91:9e:73:2f:fd:f4:e8:2f:d1:
04:7a:41:33:7f:0f:e3:d1:05:35:b3:06:b0:0d:23:
2f:60:ef:96:cd:40:bd:b7:a3:ea:03:e2:a5:4b:1c:
b0:af:39:2c:f4:d9:96:83:65:4c:73:4d:bc:ba:ea:
00:22:e1:6c:94:30:58:53:3f:b1:f0:83:8e:5b:87:
ca:a2:83:62:cd:2c:c1:e9:c7:41:5a:48:80:10:9d:
92:d5:8f:e5:31:10:cb:59:08:05:90:79:19:0a:cd:
62:88:58:c6:83:ad:9a:87:7a:8b:ef:09:69:81:29:
9b:0e:48:72:70:b9:ac:df:fc:11:4a:80:d8:57:b6:
1b:b7:97:23:47:4e:e1:03:f6:de:3c:50:ec:ca:87:
36:ea:89:34:02:13:80:19:9a:85:de:13:ed:5e:93:
dd:5d:5a:06:56:1c:ad:53:84:c8:81:40:22:bf:c1:
c1:e7:cb:5c:aa:41:e6:36:69:fc:62:38:7d:34:4c:
7e:ce:8d:06:1c:d1:74:b2:e9:b6:85:09:8f:55:2a:
f3:b5:cc:a6:48:30:cf:80:54:fe:46:cb:d0:1b:51:
1b:9b:d8:3f:c5:08:79:30:c0:8f:cd:e0:35:ab:ad:
64:0b:f7:7a:78:94:aa:4c:7f:2c:2b:51:c5:5a:08:
03:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8C:5D:F5:78:D5:62:1C:F6:50:22:6F:28:38:1E:37:7D:BE:52:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eceab0a5-eff8-3424-9dbb-ca9d8e2ca88e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:94:2b:b6:d6:f2:3b:c1:22:7f:ca:48:6d:3f:48:0b:b2:ae:
ba:77:6d:a7:49:a8:5b:7e:6e:c7:c2:cb:3d:d8:a0:32:48:0f:
0b:40:ac:ff:b1:ff:76:93:e2:18:56:ca:36:a0:0a:20:e2:e6:
98:73:13:d6:3d:6f:48:77:9a:13:05:7b:35:e2:99:49:e1:ab:
86:27:f6:aa:89:5a:f8:bf:1c:72:13:db:f1:12:67:ad:e0:f2:
c5:1a:fa:42:98:d2:5f:d1:92:86:59:ce:74:26:5e:14:05:bd:
ec:df:26:ae:9c:0c:db:41:e4:b6:9d:b9:b6:4f:94:04:2d:08:
00:67:0f:d3:ff:81:0b:6b:21:de:50:f0:7d:e0:59:ae:aa:98:
e7:7b:1f:31:bc:5c:fe:ff:fc:1d:7a:5e:3d:01:ad:b2:54:9e:
b4:49:08:be:d8:df:bd:7c:25:bc:b5:bb:45:44:06:73:7a:f0:
2c:24:48:48:67:2a:a2:75:ad:01:13:e6:40:97:f2:64:9b:62:
9e:aa:fb:c7:79:cf:2f:b4:37:48:7f:17:32:7e:51:df:fe:6d:
e7:c5:16:c0:96:55:73:d9:03:4d:22:cb:1c:e3:31:ce:b2:66:
fb:f2:72:82:d7:00:96:7f:4b:5a:0c:0d:79:8d:23:b8:e5:f9:
78:8b:73:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:09 2025 by rpki-client