Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e67fb429-9bcc-315f-90d5-151ecdb30bc1.roa
File: e67fb429-9bcc-315f-90d5-151ecdb30bc1.roa (raw, json)
Hash identifier: ss7O/woO9nqUPNv40rZYfEGbqsxyQKnpJTKW0hiQyYo=
Subject key identifier: AC:B8:A4:9D:4A:16:1E:E1:4A:5E:57:5D:28:A3:AE:50:47:FE:9A:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BC28505120A5D57CA7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e67fb429-9bcc-315f-90d5-151ecdb30bc1.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 36626
IP address blocks: 192.68.126.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bc:28:50:51:20:a5:d5:7c:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=a197810a-ba61-4ab5-a8e7-b17cd9a40d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:eb:1b:fe:bc:5b:6c:19:6a:51:32:e6:9b:a4:
b8:75:f1:86:a1:e9:7a:51:34:71:8d:c1:56:0e:a9:
e4:73:82:47:98:2d:c3:91:ec:0d:a8:89:be:d4:49:
ae:ad:4f:42:83:e6:d0:81:47:32:54:32:ba:f7:fc:
8c:e4:9d:b4:c1:f9:9a:fe:b4:0a:34:20:91:5f:e0:
3b:8f:67:f9:ff:20:0f:67:d4:e2:d6:c8:74:32:ff:
2e:f7:62:26:15:b5:ab:ef:d0:a8:ab:c6:30:84:4b:
7b:c2:f3:93:f1:76:68:27:73:4b:3c:56:f1:8b:95:
c4:ba:3f:7b:fc:c5:04:1f:1a:9f:cc:e8:88:0e:47:
fc:e3:30:19:a6:f1:6f:04:79:cf:19:a4:f0:04:68:
ea:37:04:8f:26:ce:e8:60:7e:72:98:a4:e5:45:15:
d6:c5:f4:92:af:8e:56:7f:84:08:5b:27:3b:61:98:
93:d9:31:30:20:d3:53:d2:56:ff:10:a5:48:63:13:
c3:ad:4a:40:06:1d:c1:ce:52:51:2a:62:aa:33:b2:
79:60:b0:17:a7:ef:83:ec:e4:a4:66:3b:04:e8:fd:
7e:b5:5a:60:01:cf:42:7d:5b:0e:66:82:85:2b:ae:
d7:33:0f:8a:5e:de:04:07:3b:73:a7:3c:5a:f5:84:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B8:A4:9D:4A:16:1E:E1:4A:5E:57:5D:28:A3:AE:50:47:FE:9A:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e67fb429-9bcc-315f-90d5-151ecdb30bc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:51:08:87:60:c8:4c:a3:b1:cd:9e:6e:d1:e1:2b:6b:5c:03:
ec:da:af:6f:84:09:22:41:8b:8a:bc:c9:01:59:39:c0:5c:d0:
de:e1:47:56:37:65:e9:f4:60:6c:ab:a4:e0:b1:0c:8b:c0:00:
35:96:14:ff:1d:e4:0a:30:9e:70:36:10:50:7c:f0:2c:e9:e1:
2c:da:41:d5:e6:55:fe:59:b7:7f:15:f0:75:47:01:ae:bd:72:
c5:87:39:7e:90:65:58:24:e4:36:4e:dc:0a:15:b3:2f:ee:40:
0f:87:63:87:a6:31:7d:5a:27:a6:df:fa:df:4b:09:1f:06:dc:
fd:27:ed:d9:26:ce:7b:a5:22:9f:b5:cc:e5:19:9a:29:45:e9:
56:b5:69:5d:6f:28:9b:59:9e:aa:e6:b9:1e:b1:1a:d1:7c:ec:
15:bc:c8:ed:6e:b0:0f:54:82:0f:6c:90:52:44:f9:0b:43:f1:
20:90:4c:99:63:4d:98:34:7f:20:50:83:96:a1:fe:66:6d:a2:
e2:62:25:88:92:ea:97:f2:bd:45:a1:80:94:fd:d5:a2:ea:44:
04:b6:ba:b2:5a:20:92:e6:fd:d4:d7:78:be:59:87:f3:7a:77:
fc:e1:4a:ff:73:56:a2:48:72:32:12:5f:ec:6f:c8:d8:0b:ae:
b9:98:c5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:37:21 2025 by rpki-client