Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa
File: 2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa (raw, json)
Hash identifier: SB3wwC9EnHlVvPam9vaSZh/wfUXY0+kGmVJTBtZmlk8=
Subject key identifier: 5C:4B:20:DC:0F:D3:74:6E:53:40:66:95:1B:28:FD:F8:61:1A:2A:B0
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848345588CE9BB62865412A8000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa
Signing time: Sat 14 Dec 2024 14:00:52 +0000
ROA not before: Sat 14 Dec 2024 14:00:52 +0000
ROA not after: Fri 14 Mar 2025 13:00:52 +0000
asID: 7342
IP address blocks: 192.68.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:34:55:88:ce:9b:b6:28:65:41:2a:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Dec 14 14:00:52 2024 GMT
Not After : Mar 14 13:00:52 2025 GMT
Subject: CN=8743f99a-ed6e-45b1-9fe8-120bddbb65af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:9c:93:72:c2:3f:d8:81:08:8b:61:cf:60:
85:3c:6e:04:49:70:2a:e5:47:10:b9:21:c3:f8:0e:
77:e6:46:4e:1a:78:fe:13:57:ad:f2:0e:fa:e6:4c:
15:b3:19:99:c7:e5:0c:fa:40:4a:70:da:ac:69:3a:
f8:09:d6:fa:4f:f0:04:80:52:22:bb:10:48:36:ba:
4a:fa:aa:5c:5b:5f:e6:ff:6f:e4:36:69:23:07:97:
30:fc:55:5d:a3:a3:e7:6f:0e:a9:2b:1a:43:76:fd:
9b:6d:e0:b3:3a:ae:5a:f5:03:6d:c1:21:db:53:cf:
bd:8d:d8:90:02:27:f4:cc:90:ff:7f:0c:5e:cb:27:
52:71:f6:42:ae:3d:3a:b3:46:2a:37:14:f5:73:e9:
83:5d:60:72:61:6a:cb:24:3b:e4:e1:ce:84:88:c3:
c8:04:a8:ce:8d:77:81:fe:aa:4a:6e:84:3b:59:c6:
2b:97:60:e1:0b:dc:71:34:d5:2e:fd:f0:df:80:77:
63:1f:de:2d:98:3d:bb:53:87:59:dc:c3:0b:fa:9e:
69:4e:a3:59:46:98:dc:a1:01:66:ad:85:8c:e7:4f:
85:b8:12:c9:7c:ff:e1:e7:3b:93:a3:1b:ed:f0:24:
75:18:4e:5e:7b:d1:de:d2:53:0f:1a:18:f3:54:e8:
81:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4B:20:DC:0F:D3:74:6E:53:40:66:95:1B:28:FD:F8:61:1A:2A:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:77:cc:b6:4a:8f:b5:25:b4:bf:24:0e:66:1c:df:a9:68:40:
d0:77:7e:8f:5a:a5:21:96:fb:a6:7d:60:91:79:68:b2:42:80:
eb:c8:ec:c7:d5:2b:21:b9:be:47:ee:04:22:ad:2c:f1:99:20:
de:ef:af:b6:84:06:23:a8:ee:87:f1:7d:60:d7:a7:df:87:73:
dc:82:f9:a8:00:56:af:2b:da:04:4b:99:db:d9:e0:b4:68:80:
cd:57:11:da:94:b3:d9:6b:b6:b6:80:68:b3:2f:2f:3c:1c:c7:
2a:6d:d9:6d:1d:9e:a5:f5:83:9f:fe:98:ee:a5:4b:64:47:ad:
f1:b6:45:bf:17:4f:20:c7:df:86:da:2d:84:cd:30:b3:22:dd:
81:7e:9a:bf:eb:38:bf:51:12:44:ab:7e:a0:5e:0b:40:de:62:
e1:57:d7:bc:9a:71:7b:b6:9f:3e:92:79:fe:0c:4a:75:c8:30:
7c:ce:af:c7:ed:33:d8:5b:bd:56:8c:6c:9c:ce:73:90:c4:54:
a9:fc:6a:88:25:4a:a4:ce:fd:3a:c1:66:92:77:6c:2e:12:64:
b8:33:72:25:df:bc:ee:10:0b:28:9d:bc:bf:f3:28:22:ed:1d:
c2:85:b2:88:2a:7c:07:48:36:89:7d:f1:02:1e:d6:8c:8a:48:
b4:9e:b8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:41:20 2025 by rpki-client