Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41b10453-e774-3bcc-be3b-a0053be1e72e.roa
File: 41b10453-e774-3bcc-be3b-a0053be1e72e.roa (raw, json)
Hash identifier: pnj/e471aHJ7XNLo7KJ4XDyKY1bMKZIBIB608fZGxx8=
Subject key identifier: 19:53:EE:4B:38:9B:EE:12:EA:B6:0E:43:44:56:2F:F1:49:47:29:BF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848B4C0EE5DC258270BE0778240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41b10453-e774-3bcc-be3b-a0053be1e72e.roa
Signing time: Wed 29 Jan 2025 14:00:51 +0000
ROA not before: Wed 29 Jan 2025 14:00:51 +0000
ROA not after: Tue 29 Apr 2025 13:00:51 +0000
asID: 396560
IP address blocks: 192.68.130.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b4:c0:ee:5d:c2:58:27:0b:e0:77:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 29 14:00:51 2025 GMT
Not After : Apr 29 13:00:51 2025 GMT
Subject: CN=16193cfd-432d-4aa3-bcbe-fcae9b3c0f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c8:67:15:a2:77:1f:f4:5f:34:ac:d4:5f:c6:
24:08:ea:97:1a:06:3b:8b:88:1d:2d:0d:d3:7f:8a:
7e:45:ab:57:7c:d9:8c:65:4f:1d:55:6b:b4:76:99:
81:3d:76:d7:24:99:71:ba:0b:11:9c:f5:5a:c2:e6:
a5:fd:25:02:f9:af:7e:c7:a3:eb:9b:34:e9:15:8b:
ed:37:04:48:b8:72:82:07:92:05:4f:3e:29:b5:3d:
66:5b:00:34:7b:d0:8e:5e:ad:50:0e:45:ed:34:bf:
21:83:76:f9:7c:ff:29:d5:71:bd:b0:e9:cb:f2:03:
c9:80:be:f6:88:8a:f4:e9:bf:1d:5d:c7:c9:c4:8e:
70:c7:8b:18:c1:c8:dc:23:99:7f:4c:be:81:94:7d:
a8:de:5b:88:a9:44:d6:17:74:e2:30:ff:b7:a2:22:
39:7b:18:2e:35:e7:a9:b5:ad:24:c6:f0:82:6f:42:
7c:52:da:61:ec:27:d6:ad:80:8d:8f:88:49:0d:39:
8e:22:bd:ea:61:c2:12:23:bc:f2:38:2f:27:55:11:
7a:9a:81:3e:1b:b5:8b:7c:60:9b:6a:3b:84:b5:8b:
82:7b:78:93:09:bb:fe:c8:8a:8a:4f:d7:35:e2:9b:
0f:73:95:0b:58:a6:50:45:f6:a7:a8:77:d3:fb:d5:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:53:EE:4B:38:9B:EE:12:EA:B6:0E:43:44:56:2F:F1:49:47:29:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41b10453-e774-3bcc-be3b-a0053be1e72e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.130.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:c3:df:b8:be:2e:ad:6a:88:66:30:00:cf:72:d3:ca:15:65:
0c:08:ad:59:d8:56:f4:4e:a0:dd:05:be:ff:41:6a:33:3e:9b:
bf:79:7d:08:e0:be:32:fd:60:a5:b7:5f:5e:2d:d8:3b:b8:f8:
1a:15:f2:5b:b2:a0:e4:90:77:bd:70:ec:d6:f8:53:17:f2:82:
32:1e:4d:5c:c0:e5:2f:73:48:cf:59:1c:be:35:50:4f:df:b2:
e2:e8:68:3c:f0:0e:57:fb:02:97:84:89:b1:df:5e:ff:49:3f:
80:49:ff:cf:89:c8:be:1b:65:b9:64:b9:cf:d7:01:f5:34:40:
e6:ad:c6:21:a3:e2:01:ff:5d:ad:65:81:30:f0:2a:4a:71:87:
0d:e5:fe:d9:86:a2:7c:bc:e5:72:1b:46:89:4d:f2:4b:5e:9f:
9b:05:af:a3:f8:d7:45:b3:a7:12:1f:00:04:10:9a:80:b9:9b:
d7:17:7a:77:1f:ac:8a:1e:3f:27:44:7a:e5:e2:62:ba:38:aa:
df:be:1c:f1:1a:06:56:4a:03:7a:a5:19:00:d2:20:98:b7:21:
e2:50:89:75:bd:95:00:df:5f:ef:40:4d:ad:c9:6a:a0:22:e0:
47:dd:f6:bb:cb:05:e6:e7:85:26:92:13:13:b5:00:ca:d2:93:
fb:9d:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:57:52 2025 by rpki-client