Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139b212b-4391-3447-a68e-f4fa684c76b1.roa
File: 139b212b-4391-3447-a68e-f4fa684c76b1.roa (raw, json)
Hash identifier: kbEBkhOAzKAhY6kK30LNSYzP/d4pVhE6dEuvcE2XhVE=
Subject key identifier: 8A:AB:CB:B6:71:EB:90:A1:5D:E8:66:6E:B8:5F:BC:CD:03:B4:E8:59
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0F05193E08DB282D7BD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139b212b-4391-3447-a68e-f4fa684c76b1.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 40647
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:f0:51:93:e0:8d:b2:82:d7:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=a6d41a4a-9de1-455c-a91f-f74ce6112431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:45:a3:5b:f9:12:0d:3e:0b:60:8c:d2:4f:
17:4c:67:16:94:4f:3e:d1:5f:95:ce:56:f9:aa:03:
5c:97:47:28:59:c5:4e:31:d8:61:16:55:30:c8:55:
79:a6:9b:82:57:8d:2b:54:25:3d:0c:07:9d:2f:6a:
9a:20:3a:7a:1d:f8:b9:1f:9d:6b:8c:00:6d:b1:9f:
d7:f6:9a:78:bc:ea:43:20:02:ea:1c:a8:bf:82:4d:
cb:1d:8a:fc:2d:58:f6:01:19:eb:32:10:11:10:fc:
52:80:8f:24:4f:ee:d3:63:ba:f8:32:14:16:f2:29:
8a:dd:e6:14:66:ed:fd:79:9d:42:91:19:b3:db:a6:
39:bb:b8:1b:25:a0:89:9f:93:f8:d6:22:77:80:49:
84:b2:11:b4:76:a3:0a:d2:2d:d9:6a:84:0f:d9:1e:
35:b8:c5:a3:06:c2:c6:23:25:64:19:61:31:0d:86:
0f:47:55:14:e0:76:d2:24:82:d3:c5:65:5b:a4:07:
d6:52:41:ea:ac:da:c8:28:8b:01:d8:19:e0:16:c7:
f6:23:7f:18:70:f0:b1:0f:0a:1b:2a:6b:f1:97:8f:
9c:8d:12:01:69:98:bd:71:48:9a:1c:13:14:89:71:
0a:a4:5f:77:0b:20:a3:8f:05:6f:d5:a1:c7:f5:bb:
18:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AB:CB:B6:71:EB:90:A1:5D:E8:66:6E:B8:5F:BC:CD:03:B4:E8:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139b212b-4391-3447-a68e-f4fa684c76b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:1a:e8:97:8f:8b:6f:70:20:62:87:a6:94:4e:56:15:6f:23:
13:e1:78:1f:a2:80:11:8f:46:37:e8:a7:ef:5d:51:bf:27:cd:
cc:33:6b:c6:08:b0:59:17:6a:ba:31:4f:07:b6:0b:a3:40:41:
c7:11:64:de:4f:90:93:a8:c8:7f:50:f4:8d:84:e3:3a:eb:06:
f8:12:4f:1e:6d:d0:f0:e9:17:17:f8:2f:65:1e:09:4c:d0:24:
9a:50:c3:9c:64:4c:50:cb:21:a4:53:8a:e5:78:5a:3a:b0:c2:
39:cc:90:e9:e1:05:63:35:b9:1f:76:a2:99:1f:5c:df:72:44:
82:18:f1:8f:65:26:6c:83:88:24:95:6b:5a:c6:c1:b3:42:ab:
cb:92:9a:c8:85:80:40:50:01:4c:d9:1a:ba:9b:31:4e:35:08:
52:61:c9:88:69:88:8b:81:92:0a:ef:b1:e1:da:18:6c:8a:0f:
4e:a3:44:e2:f4:5f:dc:f4:b5:af:de:0d:e4:bb:45:cf:27:da:
d5:68:27:76:9a:19:97:28:a2:4d:5d:1d:3a:c4:9d:89:95:d9:
92:ee:46:b3:c2:12:9a:37:6a:12:13:ea:17:15:1f:3a:f7:ca:
5b:d1:e4:19:9b:3d:5c:17:78:4f:0e:1b:1f:83:39:0a:0f:87:
29:75:16:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:46:11 2025 by rpki-client