Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3328cac1-ee96-3bd4-b0ab-f8d5ffec55c1.roa
File: 3328cac1-ee96-3bd4-b0ab-f8d5ffec55c1.roa (raw, json)
Hash identifier: sgC/aRvzxvmLHMhBwx1TWvgFZmqQdM41cprI4U7iJrk=
Subject key identifier: 83:9D:01:49:53:3D:1D:A0:8E:DF:82:9A:AF:71:8E:4A:28:4B:6F:FB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B28308D0782451D33B100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3328cac1-ee96-3bd4-b0ab-f8d5ffec55c1.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 396826
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:28:30:8d:07:82:45:1d:33:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=a1dc7a89-95af-44f4-907f-c20cc20c5e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:60:31:f5:41:aa:cf:46:68:55:22:5c:d9:
99:14:f6:8f:5d:20:70:21:59:a3:06:b3:87:08:f9:
2b:29:90:cf:3a:9b:01:73:7b:b7:14:b8:7d:d6:69:
79:ca:ca:e6:a7:0c:cd:1e:d3:b9:89:58:f2:58:fd:
28:5b:8a:c6:b8:39:32:ed:a5:08:66:33:3d:55:0a:
e7:f9:1c:35:bd:6c:c6:9d:ef:38:73:34:8c:0d:ae:
31:7b:e3:cb:7d:1d:4a:56:5a:f3:a6:d1:10:4d:32:
8a:dd:7a:e1:57:b9:23:ef:de:1e:53:8b:de:4f:20:
d8:a9:be:7c:b8:d4:b9:45:10:2e:3c:6a:8e:4a:d4:
18:5d:66:cf:83:e0:78:a0:f1:c6:fc:90:6a:11:03:
5f:79:ad:f8:6a:6f:f2:9e:41:9a:66:5f:f2:67:3d:
f8:cc:92:4d:5f:34:87:b1:e0:76:78:34:65:61:ad:
d6:3b:8a:64:e2:88:2f:9f:1c:ce:78:5b:f6:8c:f4:
94:fe:1c:1a:99:a7:3e:a1:c8:53:e6:70:ce:fb:b9:
7f:3a:74:46:62:15:15:9b:5e:d3:1e:0f:e3:a2:82:
12:34:29:f3:0b:f0:62:0a:bc:7c:31:81:9e:a2:e9:
e3:8c:b3:c7:ca:25:e4:6d:59:e1:19:2d:fc:b2:80:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9D:01:49:53:3D:1D:A0:8E:DF:82:9A:AF:71:8E:4A:28:4B:6F:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3328cac1-ee96-3bd4-b0ab-f8d5ffec55c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:7e:7b:3d:e1:eb:a3:58:37:57:de:df:41:f4:1d:a4:25:50:
18:ac:cc:0a:6d:54:db:00:b1:11:8d:a9:21:80:0c:1f:85:d9:
99:60:4a:bd:f7:7b:88:54:47:c5:09:85:ee:9f:c5:27:82:26:
73:5f:b2:ee:30:25:93:52:95:05:09:b6:01:34:3f:cf:43:cf:
8a:e2:a4:95:fc:14:4e:1f:b0:92:4b:9a:de:bf:1a:8c:22:8f:
88:68:05:87:77:c2:5d:7e:23:09:52:cd:03:fe:a1:fb:00:71:
c4:4f:f2:f1:ee:0b:1b:8c:af:f5:21:4e:58:fd:54:89:f0:cc:
20:8f:fc:df:ea:90:39:e1:39:69:42:b2:04:af:ba:18:62:9d:
8b:45:47:2b:cc:35:c8:8e:f1:34:aa:c2:24:9c:e7:c0:d8:01:
62:db:52:e6:29:30:c4:78:6a:33:de:64:69:1b:1b:77:a1:97:
8c:9a:58:5f:0c:09:5e:75:da:df:d9:11:da:4a:3d:d9:6d:fd:
ab:55:b2:b7:bb:09:f2:bf:a4:6a:5e:9f:9c:06:f6:4f:f8:7e:
4c:a3:61:22:a3:5e:34:f1:0c:25:5a:72:ba:88:cb:33:de:4f:
03:77:bf:f5:56:d2:22:9a:32:fa:18:c1:a4:1a:19:9d:ca:f6:
2e:ee:37:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:24:34 2025 by rpki-client