Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9524857f-8331-3f47-83f9-be33c61b1f2b.roa
File: 9524857f-8331-3f47-83f9-be33c61b1f2b.roa (raw, json)
Hash identifier: X2GXiToTKqvcvT0tQdS4j4sjL1rKD9HHotCDVq/vN2Q=
Subject key identifier: 2A:86:CB:99:E7:69:87:12:AF:8E:65:B6:25:C6:61:21:47:9F:C2:1F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848A830BCAC9EDF3A2ECE217F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9524857f-8331-3f47-83f9-be33c61b1f2b.roa
Signing time: Sat 25 Jan 2025 02:00:39 +0000
ROA not before: Sat 25 Jan 2025 02:00:39 +0000
ROA not after: Fri 25 Apr 2025 01:00:39 +0000
asID: 397209
IP address blocks: 192.68.126.31/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a8:30:bc:ac:9e:df:3a:2e:ce:21:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 25 02:00:39 2025 GMT
Not After : Apr 25 01:00:39 2025 GMT
Subject: CN=f2d44dcf-fbea-4988-a5be-dde92f59a03e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:40:ab:07:2b:48:11:0a:9a:22:cd:4f:95:dc:
a7:ee:d8:89:30:3d:0d:a7:94:93:8f:cd:f5:ed:c6:
49:5f:15:3a:57:d0:8d:90:00:ae:d4:e8:83:b0:19:
15:7f:ec:19:fe:58:71:20:86:c2:b3:97:ed:eb:c7:
45:12:72:f4:a5:c3:4e:a1:04:6c:f5:77:e2:a5:0c:
75:ff:fd:dd:bc:cb:ae:71:26:bc:8f:1b:83:f5:48:
92:cf:9c:d6:b2:c8:54:83:45:6c:ea:93:78:a4:ae:
78:6c:8a:f4:9e:9f:9c:f6:11:29:4f:6f:e3:1c:cd:
f7:ab:a1:10:e7:59:0b:d7:12:17:6b:3f:07:f9:59:
a1:53:99:26:f6:62:1a:5f:46:fd:dd:fa:7b:6b:37:
25:0e:fd:91:a7:3f:b4:aa:1b:6b:22:20:0a:32:57:
5a:97:0c:ac:92:ed:ae:f5:85:c6:bb:a9:83:9c:8d:
90:6f:80:de:7c:65:0f:24:83:a2:dc:b1:4a:95:c7:
88:d4:da:0a:4f:65:85:91:5a:b5:77:bb:33:00:f0:
b9:4d:2b:0c:e4:80:6e:c0:ec:09:48:d1:14:e6:04:
4b:3d:6b:cf:f6:1a:50:b0:f1:dc:05:f9:08:f7:d0:
45:38:ae:07:5b:56:05:5f:f7:2b:0f:1b:58:ad:cb:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:86:CB:99:E7:69:87:12:AF:8E:65:B6:25:C6:61:21:47:9F:C2:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9524857f-8331-3f47-83f9-be33c61b1f2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.68.126.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:6f:34:3f:7e:b0:71:7d:72:92:89:03:76:68:ce:69:93:2f:
10:cc:d4:79:60:1c:a7:dc:2b:12:16:c3:00:e9:48:d2:39:69:
14:f9:2e:dc:47:61:9c:fd:c3:76:e0:cd:53:4c:ce:ca:e4:f8:
ff:83:54:0f:d9:5e:f9:21:50:7b:cf:a4:05:06:88:fd:d7:bf:
d8:f7:d1:74:38:85:75:11:b2:49:24:d7:9e:29:15:be:72:d1:
fc:94:d6:2f:81:dd:e4:4a:6e:74:4e:05:9f:d1:e4:8a:d5:bc:
f7:cd:e3:62:60:05:84:ea:a6:40:39:a2:bb:e9:98:b5:67:a3:
a9:72:5a:09:e5:1b:6a:66:b2:d0:57:af:cd:44:e3:e1:a4:c5:
c1:2e:c9:87:9a:48:59:e4:cb:13:be:7c:46:46:86:3d:97:41:
f3:21:db:54:58:64:db:9d:29:46:02:de:1a:71:fd:ad:af:b2:
88:39:f6:e8:da:2b:20:a0:f6:41:78:33:56:15:21:e8:98:52:
2e:1e:27:db:89:8e:ec:5c:6f:a8:bc:87:41:40:62:bc:94:75:
a9:fc:7d:3e:6c:eb:b8:d3:2a:4d:d6:b2:c2:f2:98:86:aa:35:
38:ef:2d:95:47:27:34:4a:45:a0:fe:85:06:5c:3b:7b:4c:25:
19:68:54:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:52 2025 by rpki-client on console.sobornost.net