Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5f846ea-a2f8-3a4c-a485-07e4bf723d12.roa
File: f5f846ea-a2f8-3a4c-a485-07e4bf723d12.roa (raw, json)
Hash identifier: m+gWwpx5AYpr7IUH7cAJpe+0gronRywcfOAu1C+yH5w=
Subject key identifier: 65:B4:F7:92:1F:69:CE:7D:FD:B4:B8:FA:E4:27:95:6D:5F:BB:03:0D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F587257B6E5F9D2C352C58
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5f846ea-a2f8-3a4c-a485-07e4bf723d12.roa
Signing time: Thu 23 Jan 2025 13:38:21 +0000
ROA not before: Thu 23 Jan 2025 13:38:21 +0000
ROA not after: Wed 23 Apr 2025 12:38:21 +0000
asID: 396564
IP address blocks: 192.12.94.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:87:25:7b:6e:5f:9d:2c:35:2c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:21 2025 GMT
Not After : Apr 23 12:38:21 2025 GMT
Subject: CN=ed120145-4269-4f8d-a6fd-dce34685a7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:03:2a:b7:eb:20:05:13:e9:a3:7e:70:14:f9:
22:4d:0e:51:c5:7e:bd:f9:9d:a6:e8:82:3f:25:3f:
f7:9b:3b:c3:47:80:81:32:47:f1:29:14:90:82:41:
c8:d0:fc:d6:68:52:f8:92:29:66:3a:de:29:05:6f:
c7:2f:03:49:5e:71:fe:91:ea:a6:a2:bd:26:3d:e8:
90:eb:91:e6:66:66:08:3e:d4:27:c6:7e:20:72:4b:
b6:00:db:35:71:28:66:2a:d9:34:07:ce:b1:84:bb:
af:f5:bc:3d:f1:b0:dd:ef:c2:4a:09:b9:9d:0a:52:
94:49:5d:4a:16:63:93:2f:d9:69:01:22:ba:0f:c7:
0b:2c:a8:99:f9:26:c0:2d:8f:dd:3d:6c:67:d6:fc:
bf:12:85:99:69:39:2f:6f:42:bd:a1:5d:ac:2f:3b:
54:6f:f6:e8:24:cc:3d:d2:ff:8c:1d:71:45:11:7d:
a3:61:9a:2b:f7:67:b5:3b:19:d6:57:74:8d:90:ff:
11:8f:26:d7:79:d1:79:a9:fb:13:5c:4e:c7:f1:78:
da:ed:2e:3c:69:ba:5c:43:9e:51:0e:bc:3a:82:0a:
d4:8a:91:0b:97:ed:76:e0:51:81:81:af:1d:66:9b:
8e:72:7b:6e:4e:62:67:43:15:4e:d9:fa:bf:64:7a:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B4:F7:92:1F:69:CE:7D:FD:B4:B8:FA:E4:27:95:6D:5F:BB:03:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5f846ea-a2f8-3a4c-a485-07e4bf723d12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.94.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:d7:ad:b7:bc:e6:bd:99:20:90:40:e6:28:85:c3:0e:69:6e:
24:d2:ee:56:6b:c0:85:ac:48:1f:a4:f9:9e:40:a6:cf:f4:33:
da:19:5b:08:b3:d1:c6:ad:68:61:a7:76:2c:55:e6:72:5b:c4:
fe:f0:00:c9:a8:9d:63:4f:45:ff:5e:c9:be:6a:0b:f4:78:06:
7b:80:85:b0:20:a2:5e:8f:13:d5:e1:62:95:66:38:d5:19:13:
f2:ce:bf:03:a1:79:af:65:0e:67:a3:54:bc:ff:9e:5b:bf:3c:
83:11:41:3f:8e:a8:70:15:a9:70:2e:19:c7:4c:b1:9c:b4:20:
1a:6f:5d:cb:cd:53:d2:7a:5a:89:67:c0:ad:a0:42:77:b5:75:
72:24:52:6c:3c:2b:ba:e4:3a:db:5a:00:4e:c7:08:9b:3c:b9:
59:ef:5c:2f:de:96:46:9e:fa:46:7f:2a:ef:db:bc:7d:5d:0e:
75:3e:c2:5c:b7:f8:fa:61:44:b7:5b:71:4f:bb:a3:df:b4:6a:
dd:ef:00:46:0a:7c:54:40:e1:9b:0c:04:30:24:79:4a:57:50:
21:a3:5f:c0:3f:f3:8f:62:20:a2:07:c5:aa:50:d6:e0:91:09:
65:3d:f8:fd:c2:b5:2c:47:32:61:ce:df:8a:9d:10:1e:b9:65:
22:fb:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:01:51 2025 by rpki-client