Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d9658ca-41a7-3b9f-ab97-790bc7e2698c.roa
File: 2d9658ca-41a7-3b9f-ab97-790bc7e2698c.roa (raw, json)
Hash identifier: WZ+LRZBvTLQIBvnKQVexCVo1Bu1cS8xi/9/GeDCvlg8=
Subject key identifier: 35:05:F6:14:AC:91:26:D8:10:B6:40:96:AE:30:3B:70:D1:09:C4:70
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C78A183316538D57D350
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d9658ca-41a7-3b9f-ab97-790bc7e2698c.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 20431
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c7:8a:18:33:16:53:8d:57:d3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=024ade3f-10cd-49b3-a1a9-564c11b55327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:50:23:be:f3:39:b9:1f:f2:b6:90:a5:8c:
de:a6:d8:bf:e0:01:9f:b0:d6:55:29:67:4d:60:f2:
94:3e:fd:a0:68:c6:19:f2:02:d1:6a:39:73:bf:50:
5d:70:62:e6:01:39:41:08:f5:bb:7f:4b:82:cc:61:
d0:ee:da:d4:95:02:4d:87:7d:82:a6:10:8d:81:64:
16:2d:14:04:46:c8:2a:11:55:99:39:64:e4:49:70:
77:9d:47:de:36:cb:2d:de:c2:10:4f:ee:e6:72:b8:
24:92:03:d0:0d:55:f7:35:bd:6a:96:80:13:6c:bc:
09:a0:55:ec:c3:0a:cd:9b:f1:14:65:bb:29:54:39:
1c:2e:c4:98:e6:13:0f:0d:31:fe:db:01:ef:48:e0:
a2:0a:3c:1d:16:a4:ba:a8:16:71:7c:18:c0:0f:71:
e5:87:f4:f6:d3:9f:f8:fc:59:98:af:3b:3c:6d:4e:
f9:17:b6:58:8a:bc:1d:07:c2:4b:e7:7a:74:7a:83:
b7:6c:dc:3d:81:80:79:ea:d0:b1:b7:47:74:51:31:
be:ec:17:94:09:9e:68:97:b2:33:52:67:6d:cb:68:
60:88:de:52:ed:43:d2:26:25:d6:86:d8:3f:fa:8b:
41:39:47:33:b8:46:89:f3:08:93:24:11:3b:fa:46:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:05:F6:14:AC:91:26:D8:10:B6:40:96:AE:30:3B:70:D1:09:C4:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d9658ca-41a7-3b9f-ab97-790bc7e2698c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:42:8e:ef:d6:39:21:81:bf:0d:11:72:49:ef:26:bf:19:83:
93:55:ce:98:34:f8:c2:4f:f1:38:80:f5:95:56:a5:3d:88:d1:
73:79:01:fb:50:27:5e:8d:87:85:0d:4d:fe:a0:e9:a2:98:c1:
da:58:a3:b5:60:8c:e2:7b:69:5d:05:a4:4d:3f:0d:5a:5f:68:
4a:9b:18:57:83:76:3e:3e:c1:17:46:3a:de:29:0d:ec:d7:ec:
fe:0d:bf:01:78:1a:9b:51:d5:23:ee:03:67:a0:ed:b4:31:1c:
93:e5:c0:63:dd:73:1d:d8:6e:14:51:41:58:50:64:5b:47:1c:
23:8d:59:a3:1b:6b:e2:f3:ef:f7:f9:ea:96:68:94:80:b6:76:
92:21:23:d3:62:7b:02:1d:a8:ad:e7:f7:9c:a4:ed:66:2d:cd:
3a:84:ee:78:75:a9:05:1e:a3:32:68:9a:b4:d7:ad:29:74:19:
30:50:26:a3:55:c6:c9:39:a7:94:fd:21:c2:8f:ef:be:58:ad:
17:e0:0f:02:64:d4:9a:f1:be:ac:0d:0c:1c:dd:b1:28:ec:c0:
be:df:ec:4e:01:9e:9a:57:a1:f7:66:69:20:e1:a1:5e:af:03:
ba:fd:6e:ec:04:5b:c8:f2:05:c3:4a:33:a6:e0:b0:d3:ca:f0:
ba:7b:ee:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:37 2025 by rpki-client