Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76c513a-972c-3b78-a614-c5388698643d.roa
File: d76c513a-972c-3b78-a614-c5388698643d.roa (raw, json)
Hash identifier: ASengKj18T7VOHis8Q+1UYotlxQCli0RWbXUY3gJ3MY=
Subject key identifier: 06:9A:FA:B0:81:9B:79:C8:24:92:28:FB:DE:49:70:E8:1E:BF:04:DA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A3F58108FEEF2A1E3E05DA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76c513a-972c-3b78-a614-c5388698643d.roa
Signing time: Thu 23 Jan 2025 13:38:19 +0000
ROA not before: Thu 23 Jan 2025 13:38:19 +0000
ROA not after: Wed 23 Apr 2025 12:38:19 +0000
asID: 396562
IP address blocks: 192.12.94.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a3:f5:81:08:fe:ef:2a:1e:3e:05:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 23 13:38:19 2025 GMT
Not After : Apr 23 12:38:19 2025 GMT
Subject: CN=9a840650-c244-4dde-8cbb-a586dc7c8068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b1:6e:78:62:78:91:dc:f5:69:64:6f:76:b5:
80:23:84:63:c0:58:6b:5f:c3:93:a7:34:ba:af:e0:
76:b2:8d:6a:d7:17:90:20:e2:3c:d7:4a:78:04:46:
20:31:c9:69:15:08:d0:50:7c:71:1d:99:27:3c:a4:
b7:f8:6b:98:ad:8b:db:95:67:25:02:10:fc:c2:51:
93:df:33:ae:8f:44:ea:4d:d4:59:c3:4d:db:51:09:
4a:6a:f8:97:ad:ff:3b:d1:e7:fa:5f:f4:c5:3a:4f:
4d:d9:ab:ca:0b:04:1a:e4:a3:b6:4c:6a:fb:ba:cb:
71:12:2a:09:5c:27:60:ed:a0:69:16:a1:39:fd:10:
d6:d5:bd:1d:2c:fb:3b:12:4d:ed:86:b6:c8:1d:14:
d3:20:ee:e0:0e:b5:6a:67:83:28:0e:b3:cc:3b:87:
21:68:68:ad:55:00:1c:a1:d2:ea:33:fe:a9:1c:fe:
57:af:6d:72:9f:a6:b0:dc:05:d5:f7:65:fa:50:fe:
98:ed:a5:85:3e:55:0b:95:df:00:72:5d:d7:ad:ad:
fe:53:b8:0e:49:d4:76:16:15:7e:48:66:01:9f:ee:
ee:cf:5d:6f:00:3b:46:1a:d9:cd:29:46:4c:e9:c1:
9b:8f:99:13:c3:21:57:19:30:c7:7f:b3:91:77:c2:
d8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9A:FA:B0:81:9B:79:C8:24:92:28:FB:DE:49:70:E8:1E:BF:04:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76c513a-972c-3b78-a614-c5388698643d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.12.94.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:c9:4d:b9:9c:44:13:e2:60:56:38:99:eb:bc:b5:06:d0:1c:
bd:2c:ef:62:72:c3:e7:07:2e:c8:75:5c:c5:59:ce:ed:0d:c7:
20:58:51:09:56:d0:48:e0:1f:5a:a8:f2:19:86:b5:88:4c:d8:
b8:64:b3:93:ed:6b:be:df:7b:da:af:37:83:fa:e9:69:65:08:
4a:61:25:f9:78:46:cf:d0:6c:23:c7:22:23:78:ce:0b:3f:35:
db:61:c2:58:23:c8:aa:55:0f:aa:02:01:a5:56:87:36:25:57:
e4:aa:c1:69:fb:59:81:ea:bc:85:2c:2d:20:93:03:ae:76:56:
43:86:aa:08:e6:69:e8:58:ed:63:76:be:56:56:d3:97:59:55:
30:7c:eb:fc:32:7a:4c:ca:93:08:fa:17:1a:18:9d:4a:65:13:
3e:d1:6e:06:eb:64:52:88:f7:da:30:ba:d2:83:07:30:eb:9b:
57:47:7c:19:f1:3e:c0:78:bf:33:48:d5:16:b3:f3:31:81:ed:
1b:3b:ea:28:d3:07:af:97:cc:d8:31:87:2a:20:33:59:4e:6e:
43:b3:80:61:9a:84:b3:6b:62:47:7b:44:b2:72:8b:b2:1e:db:
40:7c:df:3e:04:b9:e8:1f:4b:c4:9e:84:d2:22:64:99:ae:7c:
4b:01:32:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:14 2025 by rpki-client