Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fddfb3ec-3a4e-3bd6-af56-f6a88e2ad383.roa
File: fddfb3ec-3a4e-3bd6-af56-f6a88e2ad383.roa (raw, json)
Hash identifier: K6l3VM9KD6c/gvSocDEqFBcmRNhgqMOqvPx8zTYxYKc=
Subject key identifier: 6C:B7:09:2D:67:91:7C:7B:6A:C7:32:93:5F:C2:C3:CE:33:D8:C9:C3
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F586FF03F286E848A99640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fddfb3ec-3a4e-3bd6-af56-f6a88e2ad383.roa
Signing time: Thu 23 Jan 2025 13:38:21 +0000
ROA not before: Thu 23 Jan 2025 13:38:21 +0000
ROA not after: Wed 23 Apr 2025 12:38:21 +0000
asID: 396614
IP address blocks: 192.12.94.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:86:ff:03:f2:86:e8:48:a9:96:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:21 2025 GMT
Not After : Apr 23 12:38:21 2025 GMT
Subject: CN=fdaf6a66-0169-4b9a-8ac1-3993bdea43d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5b:8d:3f:1c:78:12:51:04:f4:fa:88:16:6e:
58:95:81:f1:90:44:30:e0:9b:29:06:ff:ed:71:0b:
9b:0c:c8:1c:b9:ee:ee:00:44:b3:91:b5:5a:0b:3b:
4c:d3:82:c2:00:32:93:12:54:17:d1:45:44:54:0c:
e9:c2:b9:1c:5c:5f:3f:7a:9b:99:9c:cf:a2:ce:1e:
25:49:80:aa:01:e5:31:37:f6:dc:48:5c:0c:83:86:
ab:7c:a8:b2:db:fc:9f:29:76:c3:f1:a3:ca:e2:84:
99:3c:e2:1c:19:04:31:6f:41:9c:89:00:16:53:d8:
8e:a7:d1:03:b6:59:dc:57:a1:a5:ef:13:79:12:9d:
07:4c:0b:5e:6a:49:7b:43:37:55:b2:5e:2d:ef:18:
10:02:e7:bf:54:94:95:51:1c:80:2c:2a:43:b8:b2:
48:c2:81:95:7e:65:f1:04:c5:79:68:96:df:30:b9:
4c:cf:bb:66:50:fb:bf:d7:45:4d:36:e7:05:97:0a:
38:d5:b8:8f:02:25:25:9f:06:e3:8b:b9:c7:4a:4e:
40:ee:1a:54:a5:b7:55:fb:d4:e5:60:ac:cc:49:f7:
82:56:7d:8e:c9:44:21:52:35:fd:ad:3a:9c:61:c0:
ee:d4:69:19:1e:83:50:de:5f:b9:cc:77:ef:e6:17:
fe:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B7:09:2D:67:91:7C:7B:6A:C7:32:93:5F:C2:C3:CE:33:D8:C9:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fddfb3ec-3a4e-3bd6-af56-f6a88e2ad383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.94.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:3f:d2:fd:05:dc:43:8d:b9:bf:2f:d2:ee:41:ba:dc:b3:4d:
a6:a8:5a:db:28:2d:31:bf:04:4a:ff:6b:83:7e:92:9f:79:1c:
45:f4:35:8f:e1:eb:71:bc:36:f5:8c:02:85:a3:02:d2:e7:bb:
3a:a2:78:63:3f:96:95:32:44:a9:89:4c:fb:9f:bf:33:df:4a:
f3:88:24:10:95:38:7f:ce:8c:c2:7d:10:5b:35:89:a3:be:ef:
71:27:d0:18:74:5a:1a:19:1a:e6:a2:90:1c:e8:cb:a8:d1:9f:
67:40:fa:c2:08:da:55:7d:8f:fc:2d:48:b2:e5:40:d1:c9:a8:
14:79:bd:99:92:f8:a4:0f:f4:1e:06:13:ba:6c:04:80:7d:c0:
8c:80:30:dc:64:c5:3f:89:b8:8c:4a:d6:59:8a:11:03:7f:1c:
8b:92:91:08:a9:07:9f:51:37:b9:c1:d9:55:a4:d1:ad:c8:bb:
99:c6:3c:fe:28:da:1a:a9:e7:6a:41:61:4e:9e:db:b7:41:2c:
de:1c:bc:a9:38:7e:e2:68:83:09:e6:90:55:eb:6e:7f:ce:8d:
17:b7:00:ae:f5:0d:6d:9f:75:77:a3:09:0e:ad:42:2b:f9:85:
d5:83:d2:1f:33:6e:1a:95:de:4b:16:d5:60:81:ba:45:ae:de:
fa:89:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:24:15 2025 by rpki-client