Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b802cab-2cd5-32fb-8980-044b10833b40.roa
File: 2b802cab-2cd5-32fb-8980-044b10833b40.roa (raw, json)
Hash identifier: ktqx+eW/eMPNU3plhYHryGtJnxc3idVavIdjJ2A0oNg=
Subject key identifier: D5:42:F0:BA:E0:72:F3:2C:6D:66:96:0D:72:25:18:9B:35:B9:03:09
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B268334198A7A5D8AC500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b802cab-2cd5-32fb-8980-044b10833b40.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 36618
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:26:83:34:19:8a:7a:5d:8a:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=5ec07754-a812-4a01-8235-acdf526eeca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:8f:8e:1d:03:43:4b:79:ed:72:74:95:d8:
0b:8e:e6:3f:2d:80:09:b0:d7:92:39:ed:c9:c8:da:
6c:d0:83:91:94:59:51:c5:a0:4d:8b:95:5f:96:50:
ff:cc:a7:36:03:69:7f:f0:f3:a2:eb:c8:8b:2d:e5:
d6:0c:4e:21:e7:b3:5f:fe:6b:e1:72:41:d8:e4:00:
6b:b1:76:e8:2a:bb:d8:fa:1b:82:24:22:77:29:fd:
53:38:dd:9b:96:f1:93:06:0f:ba:f8:dd:2e:ec:fe:
67:17:3e:a0:cc:87:3f:0f:37:2e:27:39:04:83:a5:
19:16:6f:50:9d:a4:e9:cd:8b:10:a4:98:18:cc:85:
b9:60:f5:25:5d:e6:3a:76:01:6c:cb:57:bc:0a:1d:
ca:ab:49:06:2c:6a:18:a7:40:af:6b:be:95:48:b6:
89:db:aa:fd:2d:77:29:e4:c2:ea:c2:07:af:52:65:
24:40:16:40:87:21:b5:8c:e3:6e:8e:fe:9d:5e:9f:
e0:be:53:33:f5:26:b1:b1:93:e5:99:ae:25:28:f2:
a8:ab:95:11:c1:08:39:fb:43:bd:83:26:d7:d2:c3:
a3:0c:fe:d8:d3:1e:73:6f:b5:15:61:57:bb:49:a4:
79:64:61:a6:e5:b6:0b:45:73:45:94:c6:e6:8d:55:
50:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:42:F0:BA:E0:72:F3:2C:6D:66:96:0D:72:25:18:9B:35:B9:03:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b802cab-2cd5-32fb-8980-044b10833b40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:20:c0:b0:2c:d2:3a:a7:a7:e2:c0:8f:a2:af:3c:a4:1c:90:
a8:6c:6a:2d:61:a7:3d:36:79:8a:64:99:a3:03:63:79:6d:ea:
17:1a:77:0c:d1:f4:3e:4b:8a:07:2b:31:1f:bd:28:02:71:c4:
59:64:77:58:de:c9:91:59:d9:b1:00:5c:21:f8:18:ef:4c:e1:
f5:a8:42:ce:d4:42:42:ed:6b:65:0d:93:0e:d3:f9:25:84:b7:
66:cf:de:6e:e8:70:03:f1:fe:45:33:5f:e0:39:58:70:65:97:
99:9d:81:9d:78:98:54:d4:e2:5c:39:46:41:94:d6:2e:67:9d:
96:7a:ba:cf:4a:ea:27:03:71:da:a6:0d:13:4e:b3:8d:5c:7f:
b8:ac:ac:2b:17:db:0f:7a:0f:02:0c:ef:07:e5:8f:da:1d:51:
fc:0a:0a:21:69:10:65:8a:e9:54:61:e4:a3:a5:c3:47:7b:f1:
bd:63:ed:2c:50:c7:c5:a7:00:f5:97:b9:22:3a:d5:5b:24:5c:
ac:08:4f:48:d8:89:a5:1e:b3:97:4d:32:a4:67:eb:df:2a:66:
38:41:ec:16:dc:4e:dd:8e:5c:d9:ea:24:70:ee:cb:74:80:8c:
8b:4c:f0:02:96:d1:36:e4:94:85:71:73:9e:77:aa:1c:87:df:
0a:5a:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:20:42 2025 by rpki-client