Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f5aa59-9ec3-3952-931e-514ed46ca37b.roa
File: f2f5aa59-9ec3-3952-931e-514ed46ca37b.roa (raw, json)
Hash identifier: /nh4Odv6Ju7U4rwaTwelmD4xBs6IKDoJM/EBbcByrmM=
Subject key identifier: 67:CD:D8:30:0F:52:36:03:36:F5:1F:17:20:76:04:D9:27:56:3B:FD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0ED354100F335D403BA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f5aa59-9ec3-3952-931e-514ed46ca37b.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 396579
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ed:35:41:00:f3:35:d4:03:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=e1c74799-f024-4937-abe4-a6cd865d16a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2c:43:58:99:2b:91:d0:d9:54:01:99:d2:de:
48:9f:5b:29:7d:61:aa:85:ab:5d:93:44:c4:c0:1a:
9d:b3:2d:3b:f2:4f:7e:31:76:b8:28:0a:bf:18:2b:
4f:6f:21:70:fe:6d:70:37:d6:5a:6c:f8:9a:50:a5:
b8:a4:12:00:61:44:55:92:ce:a8:01:bc:94:fe:e2:
96:4f:cc:8e:37:7f:02:7a:57:9c:76:d6:99:97:96:
a5:be:fa:4e:74:43:80:a1:0c:3b:03:0a:03:7e:a6:
89:02:40:ee:ae:fd:4f:84:0d:e0:b8:23:36:8d:07:
0b:b2:09:9b:5a:5a:80:01:0d:d8:b5:e6:e9:56:9f:
59:0a:f0:50:85:9b:ff:b6:d1:82:62:1c:25:71:75:
51:ef:45:62:e7:18:49:d8:07:fe:ba:8a:61:31:04:
da:de:76:2b:20:2c:31:db:7f:90:02:4c:05:de:a5:
57:e9:c8:7e:5b:bb:5b:c2:1e:95:97:8f:7e:a9:5c:
01:48:b8:18:10:29:b5:c8:0e:b1:aa:12:ca:58:20:
8f:0d:01:fe:96:d5:81:0b:70:4d:b5:ee:3e:13:1a:
cf:0e:e1:25:af:e9:fa:30:ba:7c:e6:f2:0e:39:ff:
ae:12:50:ad:5c:29:98:8c:83:07:90:21:b3:b6:11:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:D8:30:0F:52:36:03:36:F5:1F:17:20:76:04:D9:27:56:3B:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2f5aa59-9ec3-3952-931e-514ed46ca37b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:4b:5e:68:1f:28:9e:8c:b7:53:05:70:6f:3a:8e:9a:19:6a:
9d:07:9d:ef:a9:f2:d8:58:e6:94:1f:a9:4c:d5:d0:51:51:c8:
97:0a:7f:da:a4:f9:e0:78:7c:e9:22:6e:1d:e0:d5:fa:42:92:
08:cf:d6:18:94:f2:de:28:24:94:f5:52:69:31:c3:02:9e:a3:
7b:ca:bc:68:c5:25:58:1e:be:d6:40:9d:6d:a2:be:2b:5d:1f:
0d:03:f7:08:1b:69:31:f8:85:c7:de:45:00:d5:f7:47:25:c9:
3c:27:78:67:9c:3f:45:d1:ca:a4:a7:c1:01:b8:30:b1:78:6e:
0c:5a:46:97:1d:d3:c5:64:20:48:90:c4:e0:fa:94:b2:93:8c:
68:ed:d7:b4:71:0d:64:e2:0c:92:ad:f8:47:90:6a:1b:7c:e1:
0c:b9:2f:2d:1e:bc:2e:ca:11:31:60:15:37:81:1a:a6:b3:cf:
e8:88:ec:de:01:bc:99:fb:0a:09:e7:7d:e9:5c:ad:37:47:25:
18:af:07:d9:10:6e:b8:f9:56:b9:73:a4:0e:f9:69:ab:df:3e:
6d:55:05:39:69:17:61:d7:80:4d:dc:07:7d:2b:fb:7c:c2:fc:
cd:74:12:77:6b:06:dc:3d:32:3c:dc:13:0b:85:ac:dd:3a:e6:
52:0f:4d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:58 2025 by rpki-client