Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d2d44e1-2ab8-3764-a478-9ecd5b149d1b.roa
File: 3d2d44e1-2ab8-3764-a478-9ecd5b149d1b.roa (raw, json)
Hash identifier: iD9ZMQIjnwP98KJetBbIJ5Wh80zbG+JfABIOqaW5dt0=
Subject key identifier: 0D:A1:1C:97:29:02:6B:1B:6D:5C:95:59:05:4F:53:06:8F:1B:24:C4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B24836AFAD2229D321BC8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d2d44e1-2ab8-3764-a478-9ecd5b149d1b.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 397204
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:24:83:6a:fa:d2:22:9d:32:1b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=85c59670-afa4-41e2-97df-4879decc025a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:9e:6c:4e:40:b7:86:fe:57:f1:32:84:e7:
57:fb:cd:df:08:ef:e0:47:c0:e6:da:5b:93:76:80:
ca:fd:81:34:25:04:e4:36:24:95:0d:c6:11:7e:fe:
ed:a0:d7:54:b4:56:4b:ae:20:38:29:2f:9d:fa:55:
5d:bd:2c:49:4d:f6:11:b6:74:99:ec:1b:f3:73:bf:
37:6a:05:d6:0c:c3:54:b0:2a:d7:2c:7a:69:ac:84:
16:19:16:e9:59:c2:2c:a0:52:15:0f:ac:19:4f:5f:
39:33:98:1b:52:b2:ae:d7:12:73:1b:94:d4:50:7a:
6e:49:42:f6:d3:92:d3:78:da:1f:0c:97:52:ee:d7:
68:4b:98:db:9f:86:34:9c:27:89:84:00:2f:fe:93:
1d:44:a0:35:a8:44:33:e1:ba:27:c7:00:27:1b:42:
2b:c0:27:45:db:16:c6:b9:99:2e:8b:43:fc:cf:a3:
ac:0d:10:fd:4d:df:08:38:f9:0e:62:99:0b:92:c8:
3e:fb:fb:86:74:2a:61:71:16:5d:5f:37:0b:3e:df:
92:5f:d8:c3:44:cb:e2:0a:ea:50:f0:8e:4c:23:b8:
22:96:5b:f7:cd:48:fd:7c:60:9a:69:f4:55:81:42:
75:10:ab:2e:28:f1:f0:4d:56:48:75:c6:98:55:00:
47:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A1:1C:97:29:02:6B:1B:6D:5C:95:59:05:4F:53:06:8F:1B:24:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d2d44e1-2ab8-3764-a478-9ecd5b149d1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:c6:1b:51:db:df:1c:16:f3:6c:de:2c:7a:27:0a:cb:f2:f5:
bd:9e:6a:4f:67:d3:03:4b:dc:9a:67:ea:0e:bc:cd:60:58:a9:
c9:b4:10:1e:98:cf:4a:b7:f7:4e:ec:9d:ce:02:47:87:06:01:
2a:12:d5:4c:de:ad:75:b6:a4:10:59:e3:82:d2:6b:58:f2:12:
e4:23:42:8b:a9:69:fd:df:3d:2c:c1:fc:6c:95:4e:fa:3e:b0:
32:58:d3:c5:6a:fb:f4:5a:df:c8:99:ee:d1:ab:d5:f9:81:aa:
55:36:db:e7:11:9d:90:95:41:6d:ef:93:f2:67:52:6b:0c:db:
29:67:0c:23:0e:86:35:e4:db:f3:e6:63:ed:85:1b:ce:c9:bf:
96:fb:45:a7:ee:39:34:1e:c9:8d:20:fb:56:a1:5d:90:7f:0c:
9e:9f:09:c1:fb:ca:8e:36:ce:ff:43:f3:26:a6:b7:e5:22:44:
db:30:d6:af:8e:bc:a5:c9:31:81:d8:87:2c:67:eb:6e:95:53:
20:72:9f:49:b9:0f:33:5b:8a:69:a9:10:a2:52:85:e2:86:8f:
4f:1c:ae:30:67:96:13:99:7a:2b:d1:5d:5a:d9:6d:7f:87:0d:
98:bb:48:3c:5f:2c:dd:3e:68:c5:4b:d2:87:0b:06:c1:0d:b0:
bd:87:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:05 2025 by rpki-client