Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89f4704-3804-3d4c-ab7e-73dacece75fe.roa
File: f89f4704-3804-3d4c-ab7e-73dacece75fe.roa (raw, json)
Hash identifier: D5L3hZz3RARzq/Qf2HGjau0BAYFS3r7dYl4otq/L728=
Subject key identifier: B1:63:A1:0A:14:F1:2F:D2:E1:AF:4B:5B:0D:B5:F9:F0:F1:74:C8:E6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C1F03C59B529BD23F320
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89f4704-3804-3d4c-ab7e-73dacece75fe.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396550
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c1:f0:3c:59:b5:29:bd:23:f3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=a2538ef0-f474-4c50-ad9a-e8bd7eb96270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:85:76:b7:b4:cd:42:c2:bf:83:10:59:a7:2d:
c3:e2:10:c3:75:16:a1:01:ab:d4:89:e6:72:e9:ab:
19:24:df:96:d9:8f:48:e8:27:39:ed:69:ae:1a:04:
4c:5f:0f:c5:a4:b4:d8:a5:71:1d:ae:64:19:5a:c8:
31:15:98:9c:45:f7:fa:d9:ee:61:34:e5:9a:ac:4e:
b5:c0:07:a0:a8:40:27:ab:c2:cf:3a:bc:e2:d1:9b:
c1:2a:60:34:8d:1f:f1:d9:78:80:92:94:75:bb:f7:
c7:4e:eb:a2:0a:d1:45:53:79:d4:75:0e:c2:04:09:
b5:72:7c:2a:84:68:cf:8b:68:73:e9:b6:1f:44:06:
c4:98:9e:ed:45:a3:52:53:0d:55:4b:51:6e:77:b1:
f1:bc:d9:f1:10:a1:20:86:8b:6f:5d:31:21:45:08:
1d:4e:b0:db:cf:c8:f5:0a:cb:a3:50:1e:69:e3:4c:
07:00:8d:59:b8:55:f6:5c:33:e4:58:47:21:83:3d:
c5:08:d4:99:e7:34:97:0b:8d:8c:4d:8c:b4:dc:15:
d3:b2:9f:14:73:d7:bb:44:d4:00:51:9b:ed:60:1d:
02:7f:0d:3f:36:11:a4:61:f7:11:1b:39:e5:b2:2d:
93:12:ba:a6:0a:86:6c:b5:04:ac:c0:60:bb:b6:de:
6d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:A1:0A:14:F1:2F:D2:E1:AF:4B:5B:0D:B5:F9:F0:F1:74:C8:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f89f4704-3804-3d4c-ab7e-73dacece75fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:cb:de:96:61:3c:59:bc:5c:ed:9a:25:39:80:f1:e6:3d:9d:
14:92:95:77:fb:58:c8:9a:3c:7e:c4:28:0a:61:8f:b9:28:d8:
fe:e2:dc:3d:ae:c2:54:db:1c:1e:12:fb:76:8d:84:91:05:bd:
b1:ad:f4:17:65:2d:c0:94:d9:a8:0b:d3:c4:00:0c:94:40:6e:
6a:9d:28:19:04:30:89:08:38:a2:6f:f0:f8:6e:97:6b:29:45:
c1:fc:25:77:dc:6a:c4:7d:ea:0a:5d:24:39:eb:fb:64:03:d9:
c9:aa:74:16:a6:26:e4:10:ea:eb:19:26:bb:a8:4b:4f:90:2c:
cb:e4:74:92:74:ca:96:4d:57:ae:78:9f:99:34:e9:3c:96:d0:
08:a3:b9:86:5b:84:cd:94:37:e8:cc:df:30:30:b4:c6:c5:8b:
76:20:f6:33:bc:63:77:93:7a:dc:dc:3b:31:89:c3:d9:a5:a4:
77:e6:6b:ff:3a:0b:58:8e:06:38:1a:61:50:bd:cc:1a:cc:8a:
2c:5d:9b:42:e3:eb:7e:ce:e6:15:5a:99:57:c6:b1:ba:1b:eb:
46:b5:e0:16:79:f2:74:d9:1d:46:0c:a0:eb:37:5f:3f:2d:2e:
b9:bb:ac:85:df:75:67:d8:30:06:13:e1:7c:d7:71:88:8d:86:
7c:d7:90:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:17 2025 by rpki-client