Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00dfe665-9192-3c6f-89df-2ef3a62c96c0.roa
File: 00dfe665-9192-3c6f-89df-2ef3a62c96c0.roa (raw, json)
Hash identifier: 8vmf0loB8Wv4zyPjVMA77n+s16+zEAuv4tyWuDYPEmQ=
Subject key identifier: 10:9B:C7:17:80:F4:63:42:57:DF:01:4B:19:04:AA:70:26:AF:2B:18
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B286A8F48E65728E6FE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00dfe665-9192-3c6f-89df-2ef3a62c96c0.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 396552
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:28:6a:8f:48:e6:57:28:e6:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=aca0b7f8-a3fe-4819-ad01-7d1afa035f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:fe:78:1f:21:cc:07:cc:7d:36:78:bf:c8:
fe:25:0f:fc:ff:66:9b:f5:4a:cb:2e:21:91:97:c7:
40:f5:eb:ac:f8:9b:4b:4a:5b:23:86:cd:18:c0:a5:
5c:7a:bc:78:a6:9a:57:11:ab:71:d5:35:30:e4:ca:
40:4d:f3:da:92:33:d9:b8:bd:46:67:d4:e3:f0:97:
c2:d8:0b:bd:7a:76:f9:21:5f:65:60:9c:92:e9:0b:
0b:69:e3:da:ad:34:ab:e0:0a:16:c5:69:5a:00:e7:
5e:97:2d:12:ef:bb:5c:88:d3:60:9b:59:0d:c8:bd:
c3:cc:24:d5:a5:2f:dc:9e:19:b9:d8:31:56:3d:e2:
cb:c4:96:b3:1d:1c:24:a6:e6:9a:dc:ce:f0:2d:c0:
18:7f:a0:f8:89:5c:54:49:9b:4d:e6:7d:88:a0:75:
f6:14:bf:77:ef:24:07:07:30:a1:0c:fd:67:e1:c9:
e4:cf:e2:d9:e6:2e:9d:8f:af:cf:34:18:af:45:4d:
39:94:22:f3:7e:12:95:7c:82:aa:e5:9c:a0:13:d0:
a6:11:de:63:ba:ec:43:62:3a:49:c1:7c:a3:b0:6f:
fc:65:8d:c0:e2:65:14:06:99:af:a1:c2:bc:86:51:
40:b9:bd:b2:69:84:ce:14:cc:d2:3f:fc:c5:d5:69:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9B:C7:17:80:F4:63:42:57:DF:01:4B:19:04:AA:70:26:AF:2B:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00dfe665-9192-3c6f-89df-2ef3a62c96c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:01:ee:08:6e:1a:4e:1b:bb:58:29:4d:c7:f0:14:f0:72:20:
39:ac:5d:97:81:f2:5c:f7:8a:65:00:99:14:d9:32:e6:4e:a7:
39:01:4a:09:81:d2:32:b6:eb:ff:e9:86:6d:35:8a:0c:e1:19:
cf:9a:83:57:bc:07:48:8b:7c:b4:d2:43:d8:f6:78:6e:c4:d1:
d1:6f:92:28:61:97:db:e7:2a:61:c0:f9:c5:0c:00:01:89:34:
a4:12:7a:4b:51:96:8d:1f:6a:80:dc:f3:9b:81:77:be:f5:d3:
a4:26:02:db:20:bd:8e:3c:56:99:4d:9d:62:c3:ae:fa:24:9b:
ba:74:4e:62:79:a3:a9:79:45:3d:fa:f8:1d:ca:ed:7e:b4:80:
2b:27:85:6f:40:4b:90:83:8d:f3:7a:10:cc:4c:4e:bf:25:b1:
2a:f7:be:0a:a8:86:5e:07:cd:4f:ba:5a:d0:59:91:7b:79:70:
cd:17:67:5e:93:a6:c2:b0:9c:31:99:ad:c5:33:df:23:fe:67:
43:3f:3c:0b:37:30:b2:5e:f5:81:f1:25:e1:91:09:a7:22:85:
7e:42:cd:af:05:6b:0b:9d:34:7b:44:cf:cb:5a:cb:41:b9:9a:
be:45:63:00:a2:6b:cf:43:c2:27:32:09:a5:d1:1f:79:41:72:
d3:53:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:41 2025 by rpki-client