Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0f2ec55-6e21-309e-b2e9-9ec460b7e263.roa
File: d0f2ec55-6e21-309e-b2e9-9ec460b7e263.roa (raw, json)
Hash identifier: COUnVnAqqyMRce/O3suZiOD+4mWkh/UjuzkdtgwD4Ts=
Subject key identifier: 43:8B:30:AD:45:6D:06:9B:10:2B:C4:1A:D4:0D:F9:75:56:B0:8E:E4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830B9EE029D79619AFD8098
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0f2ec55-6e21-309e-b2e9-9ec460b7e263.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 396571
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:b9:ee:02:9d:79:61:9a:fd:80:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=8e3b54f5-54f8-478e-b937-f325bc4dcd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:bf:1c:1d:6c:fb:f2:95:d2:26:7c:96:ad:
da:87:b7:72:7d:79:89:0c:88:a8:47:42:47:0f:cd:
3c:e2:e8:3f:50:95:8d:1a:66:38:99:53:47:4b:01:
a9:a9:d2:1f:e1:d1:8d:11:86:de:99:1a:2d:e7:ea:
4e:c0:e3:e1:65:4e:23:7b:a0:a6:fe:8b:1d:18:08:
35:cc:11:ec:71:57:b7:9f:d8:6d:dd:3e:3a:57:f4:
90:a0:95:d5:d4:f3:f2:55:36:01:4a:04:9f:50:0d:
7e:34:37:7c:d6:56:f4:31:94:e6:06:f6:36:cb:1b:
b5:50:29:62:b3:6d:df:07:cf:88:29:3b:08:c6:9e:
0c:54:d6:06:b7:e5:ff:23:37:12:c7:07:07:ad:ca:
a6:2b:f5:88:f6:af:da:bd:c0:c8:2e:5d:b3:9e:8c:
75:11:62:54:fb:72:de:f2:23:e0:e0:3d:6e:23:6a:
79:45:39:f6:09:2a:f6:92:4d:8c:cc:36:1d:43:22:
a5:76:a4:57:14:93:e7:c3:91:5e:12:0e:91:5e:c7:
6e:48:d9:df:f2:64:16:c9:eb:b8:b5:59:e4:95:93:
57:6a:16:1d:73:db:5f:53:3e:6e:b2:8d:5d:8b:fa:
42:86:28:54:c6:9b:f0:61:ae:84:a8:51:4b:6f:ce:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8B:30:AD:45:6D:06:9B:10:2B:C4:1A:D4:0D:F9:75:56:B0:8E:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0f2ec55-6e21-309e-b2e9-9ec460b7e263.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:18:ad:6c:0d:f8:81:f1:f6:9a:9b:5b:db:5d:f7:0f:06:35:
f3:48:40:6f:15:15:17:ca:7b:a9:f9:1e:40:0b:ed:89:12:8e:
aa:a2:eb:66:bf:1e:4f:99:d0:53:8d:11:dd:18:c3:7b:4a:c2:
ca:6d:0a:8a:08:48:c6:73:5b:2a:20:a9:b3:a3:a3:23:60:ce:
0f:f8:30:d9:2e:11:a5:3b:51:73:1b:5b:e7:8d:c8:ef:d1:77:
ed:f1:32:76:7a:69:20:e3:5d:b2:4a:ac:cb:fb:66:4f:62:10:
73:75:26:3d:9a:04:2f:af:0d:40:bd:10:2d:27:74:4d:5e:cf:
cd:53:fd:56:e7:32:06:24:7f:c1:96:64:6a:69:4d:cc:60:56:
c2:7a:6d:72:95:88:8f:b4:a3:eb:a6:4c:20:a4:c4:80:25:20:
2c:7a:5a:dd:b9:62:01:07:b0:b5:e9:a1:ed:e7:df:a4:d7:20:
08:f4:79:76:b6:57:92:a9:00:f0:4a:03:29:ca:f0:3a:86:00:
9f:29:d7:7e:9f:4f:85:78:5f:f5:2f:c8:84:f1:10:71:fd:6a:
36:93:17:87:48:a6:69:50:e6:c2:54:f2:55:af:f1:54:13:87:
35:33:24:cf:50:3c:21:30:2d:0a:fb:26:1d:52:5d:8b:dc:53:
d1:aa:46:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:52 2025 by rpki-client