Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fa2ba3c-4aff-367b-8ee1-6efccbf5f35c.roa
File: 4fa2ba3c-4aff-367b-8ee1-6efccbf5f35c.roa (raw, json)
Hash identifier: JdoS4hzn85l/FeCAwxQ3BE27yxhHeu+blSDlsGJhKzw=
Subject key identifier: 13:0D:35:4C:3A:AA:9D:95:0F:BC:F6:EE:C4:D3:CF:04:D2:E6:92:B5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848AF2BB0776283AE867DAAF220
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fa2ba3c-4aff-367b-8ee1-6efccbf5f35c.roa
Signing time: Mon 27 Jan 2025 14:00:52 +0000
ROA not before: Mon 27 Jan 2025 14:00:52 +0000
ROA not after: Sun 27 Apr 2025 13:00:52 +0000
asID: 396594
IP address blocks: 192.81.185.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:af:2b:b0:77:62:83:ae:86:7d:aa:f2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 27 14:00:52 2025 GMT
Not After : Apr 27 13:00:52 2025 GMT
Subject: CN=276578f6-4cd5-466b-bb0f-4675e89e4dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c3:70:14:63:af:91:e5:1b:68:5c:2e:0b:bd:
3a:22:fb:e7:b5:b9:c4:c5:e0:f7:df:6d:93:58:b4:
59:54:48:80:1f:84:e6:9a:21:d7:b3:04:8b:bd:bb:
15:52:48:8d:26:a0:e5:73:38:bb:f0:c3:8b:9e:59:
f4:6c:c3:13:3c:5d:34:7c:3f:d1:b8:bc:ea:51:4f:
ea:2b:54:21:d7:36:51:83:ec:b4:c7:68:ce:d7:5a:
f1:b1:ab:89:05:ca:e7:37:7f:f0:5c:82:ad:da:5d:
de:c9:c5:c5:01:53:0c:f9:96:e6:41:99:20:b5:54:
f1:a7:71:49:cd:33:98:ec:67:03:95:9a:4e:20:36:
cb:fa:24:2d:00:20:1a:6b:a2:51:af:85:be:e6:f4:
9e:9b:a0:6a:ca:1a:cd:2d:de:1b:76:75:ea:a1:4e:
1c:58:22:f0:c7:6e:d4:20:d0:1c:0b:f1:1c:14:92:
fc:89:5f:74:9a:54:46:49:13:81:b3:4e:b2:f7:87:
e7:87:32:e5:b5:4e:ca:ae:89:57:5c:ab:d3:ed:b8:
a9:ee:cd:8a:14:ba:fa:ce:e2:64:d8:50:62:c0:7c:
c2:62:98:2a:55:28:53:62:c6:e7:27:bb:3c:37:08:
be:87:01:aa:a3:e9:fb:6d:5f:75:90:2e:8b:d2:3f:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0D:35:4C:3A:AA:9D:95:0F:BC:F6:EE:C4:D3:CF:04:D2:E6:92:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fa2ba3c-4aff-367b-8ee1-6efccbf5f35c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.81.185.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:fc:31:bc:ac:68:be:c4:0f:0e:55:a0:43:42:02:82:1d:90:
7e:e6:d1:f7:93:71:be:d3:53:f0:17:f0:f8:e7:c1:8f:92:d6:
86:e9:81:a7:5f:6b:aa:a8:eb:dc:a4:52:0e:1e:62:de:49:af:
9f:86:66:51:44:52:eb:48:b5:9b:38:19:49:94:95:09:8b:f4:
87:4d:3d:80:95:b7:03:42:ac:4a:60:70:78:b8:6e:03:5d:56:
22:40:53:6e:ab:1a:fd:ba:b9:c3:41:09:63:89:ac:0f:82:23:
28:56:40:64:ee:c3:00:d0:5d:ed:c9:e1:0d:9a:08:b1:fc:84:
92:49:49:6f:8b:e0:d6:41:78:d6:7e:03:92:52:2e:46:71:81:
d7:a4:69:89:8b:3b:12:40:53:c5:7e:4f:7f:fa:87:46:85:07:
8d:8b:ad:f8:fc:ff:8b:22:66:98:3b:df:92:f2:71:5b:4b:1e:
36:da:6d:ce:6f:86:06:b3:0b:20:bf:84:ad:4a:b8:72:da:fe:
32:bb:4f:7a:eb:69:b1:35:c6:7b:ec:eb:47:5e:de:67:03:1d:
11:40:03:b8:5a:ee:90:58:c3:9a:32:c1:05:8f:f1:fc:ec:05:
31:bc:5b:08:83:7b:74:f4:05:97:22:18:3c:97:1d:1f:27:17:
d0:f3:33:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:28:11 2025 by rpki-client