Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f8915c-07b5-326b-96d6-556ac5ea5929.roa
File: 21f8915c-07b5-326b-96d6-556ac5ea5929.roa (raw, json)
Hash identifier: 8nLey8+BkYDjy65Uj2OYOnzJeExnoi+5PFii5LO0HoU=
Subject key identifier: E6:65:E8:26:A6:E8:74:4C:60:0B:3E:EB:3F:4D:89:91:90:11:D4:D4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B259E6AD48042F0ACBD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f8915c-07b5-326b-96d6-556ac5ea5929.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 396573
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:25:9e:6a:d4:80:42:f0:ac:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=281cf935-4d91-4ed8-909f-b8cb47feaaf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:a0:d5:6e:46:5d:9f:d2:06:e6:87:db:29:
90:69:77:ea:aa:1f:b8:aa:da:37:14:37:ec:92:00:
19:cc:0b:8c:37:1c:be:40:93:37:c1:06:6e:bb:10:
40:5c:b4:d7:45:02:e2:a1:0c:52:0c:d5:47:7c:a4:
5a:45:85:f3:7c:8c:e8:98:4a:c4:56:17:3b:9b:fd:
7a:94:37:53:7e:76:be:ce:5c:90:84:72:0c:3a:ec:
57:e4:9d:0b:99:11:97:75:ee:00:37:23:60:64:2a:
de:05:85:48:47:cc:58:47:04:8f:45:bd:57:63:ec:
d5:21:77:40:51:03:d0:50:fb:15:a5:09:ce:46:91:
63:a9:63:b5:15:1e:77:6b:be:6a:1b:4b:5f:9c:8d:
6a:f4:7d:f6:09:5e:91:60:d8:81:27:01:b9:9e:18:
3e:dc:06:fd:1f:d1:60:95:c3:c7:62:1f:d0:30:e1:
a0:94:4a:ea:83:81:88:4a:67:e2:cd:29:5c:ab:66:
bb:91:e8:b4:58:a7:c5:95:0d:dc:7f:fb:83:67:7a:
b1:b1:67:72:54:18:86:bf:43:e1:dc:af:b5:f9:ea:
91:37:69:6d:4b:10:d2:ea:9a:02:2d:8c:e3:d5:0d:
fb:a8:5d:c2:a8:8d:59:18:d7:47:a5:14:aa:a9:01:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:65:E8:26:A6:E8:74:4C:60:0B:3E:EB:3F:4D:89:91:90:11:D4:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21f8915c-07b5-326b-96d6-556ac5ea5929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:ab:67:91:06:a4:8c:f5:99:42:a0:3a:e9:23:d0:bf:b8:c7:
ff:fb:b9:45:4a:33:b6:a9:86:bb:2f:9e:3b:3a:43:c5:53:c1:
82:32:08:38:a4:73:89:bd:68:db:71:4f:36:29:a6:e1:e0:86:
4e:38:ad:ae:07:6b:95:c1:21:b0:6e:fe:c4:04:d1:79:aa:3c:
f1:20:f4:a7:4d:8e:59:61:1a:4c:f6:bf:d8:94:9e:12:1c:fb:
d2:22:ea:9b:b9:66:fd:92:ac:9b:05:e5:08:9f:a0:93:11:d6:
76:c8:c3:b1:30:88:fc:69:b6:e8:03:25:32:d1:00:ca:6a:53:
1d:85:ef:9f:4f:13:ad:21:37:4a:53:b8:f9:d7:dd:63:60:1d:
2d:ec:65:09:a5:ed:ee:b1:be:06:9f:5e:22:99:35:dd:e9:1e:
4e:5c:91:a2:d3:69:77:fa:72:71:e8:26:bf:19:fa:5b:f0:f7:
b1:69:20:a0:c1:65:5c:27:76:d5:b3:ab:5f:e6:b0:bc:6b:b9:
9e:26:ac:3f:c7:9f:6b:94:a0:d3:75:23:0f:8f:86:eb:be:fa:
f2:12:be:5a:d8:92:9d:b1:38:ca:28:3d:d8:90:d4:01:2f:b9:
8b:3f:6b:7b:3a:1f:6f:2d:5f:a7:c6:63:b5:24:8d:93:48:b4:
7a:5a:55:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:33 2025 by rpki-client