Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86f23a8d-cd2f-32af-a3f6-37b7f4db8897.roa
File: 86f23a8d-cd2f-32af-a3f6-37b7f4db8897.roa (raw, json)
Hash identifier: TuB+B/VaH8fhhlYobCvncM3FWB175qepLeMLD0Zho9w=
Subject key identifier: 14:9F:10:7F:EB:E5:82:08:81:27:56:F6:9C:FE:E6:7D:C9:06:95:1D
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830C5C57776F4C16488E040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86f23a8d-cd2f-32af-a3f6-37b7f4db8897.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396562
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:c5:c5:77:76:f4:c1:64:88:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=9a7f6e20-5828-4f91-ba07-d63c3d360dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:d4:36:68:89:ce:74:5c:96:65:ff:1b:45:
96:92:71:0b:3a:5f:bc:f7:bc:39:24:31:92:42:34:
28:57:99:6b:56:d8:c2:21:86:02:cf:ec:38:60:bc:
2d:8e:80:af:8a:4a:74:5e:8c:bd:b5:c4:c5:d6:a3:
33:ff:01:17:7a:bf:c2:a8:f7:21:87:32:14:c9:40:
46:f4:f5:08:e8:b1:1e:d2:d8:c0:7b:95:ab:8e:71:
05:eb:b0:7f:92:9c:11:bc:d6:63:4b:bd:a4:88:0f:
ed:40:a4:8c:24:f3:b6:56:a6:13:64:97:1a:6c:49:
b7:74:38:69:ef:08:90:0d:e8:32:05:ec:34:19:39:
97:94:c4:bd:01:45:0a:f0:23:04:14:df:fa:31:10:
a3:51:36:cc:41:11:54:5c:70:40:64:74:a8:a9:eb:
dc:53:3a:f4:16:36:8f:64:e8:a2:1c:83:f8:61:25:
90:18:17:2f:85:c2:b7:dc:96:97:cf:17:8c:db:17:
ae:3a:83:bb:ab:e0:9e:10:d4:3e:a1:0c:1d:31:cc:
fc:7a:e8:cf:63:f8:09:36:8f:40:e3:cf:fc:d6:35:
a3:c2:ae:51:15:43:0e:d3:01:d3:8b:a6:67:90:5b:
5a:03:1f:d6:38:d0:15:ac:54:6e:aa:97:ba:f4:c2:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9F:10:7F:EB:E5:82:08:81:27:56:F6:9C:FE:E6:7D:C9:06:95:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86f23a8d-cd2f-32af-a3f6-37b7f4db8897.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:e8:21:45:9c:fa:a7:c5:dc:03:52:49:47:fe:fa:b2:a5:2c:
f0:90:5b:e1:69:f0:9b:54:eb:a3:57:d1:92:23:ff:e7:48:4e:
03:a2:58:58:c1:1a:30:7a:87:60:d4:40:49:66:dd:1c:e2:1c:
b4:d5:43:b4:12:23:21:c9:ef:a1:d2:1f:77:6e:66:f6:97:f6:
f2:57:c7:44:db:1a:e5:a8:4a:eb:62:df:fb:01:e8:78:0b:54:
34:4b:b6:d3:b9:bb:87:05:b2:23:3e:66:41:b3:ac:51:65:ac:
a1:92:b7:6b:30:b1:c7:1d:00:f5:a0:8a:55:3c:df:d0:b6:d9:
f3:05:f7:ec:c7:15:5b:60:54:96:18:db:6d:d2:2c:eb:4d:c6:
74:03:81:dd:60:ff:d1:a8:15:b9:a8:18:e9:0e:34:f1:68:e1:
fd:c0:cf:b9:dc:ea:14:63:8b:f1:63:5d:9c:41:90:d3:05:5f:
05:70:ab:f9:61:3a:22:09:e7:14:77:c8:f6:85:39:ba:9f:d4:
8f:a9:68:c8:bd:4e:59:0a:b5:5b:96:4e:df:d0:5d:eb:df:67:
fe:13:d2:d0:6f:30:8a:0f:bf:16:f6:e2:7f:db:a7:99:db:2e:
0b:b9:2e:f6:30:62:3c:30:d7:62:b3:d1:e2:86:f3:7c:37:da:
e8:5b:dd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:12:52 2025 by rpki-client