Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47da8695-9585-3b73-b7d0-607a5f056aa5.roa
File: 47da8695-9585-3b73-b7d0-607a5f056aa5.roa (raw, json)
Hash identifier: DKwb09kO0GdJJWyYUCx8jfsogR7JZcglmulR7z+rYbg=
Subject key identifier: 9F:E8:5E:03:0F:5C:D8:8C:D2:F2:91:C4:C6:61:45:51:3D:41:A7:D6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B24C36D74A14181715B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47da8695-9585-3b73-b7d0-607a5f056aa5.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 10515
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:24:c3:6d:74:a1:41:81:71:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=6525be3d-2546-407d-bec9-d5bb3a71c396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:76:2b:c3:26:05:97:18:b0:db:2a:95:6d:
25:1f:36:6c:46:fb:75:ec:02:9c:82:82:0f:db:99:
e6:85:cf:36:c6:a4:28:62:04:ab:24:e6:7d:0d:40:
aa:0b:4b:e0:37:48:88:1f:66:81:ed:9b:df:f5:da:
ba:dc:69:31:76:91:96:a7:0a:53:d0:d8:01:3f:61:
e5:82:1a:b4:4d:d7:f1:c1:94:23:5c:c7:53:77:be:
25:0e:91:76:dd:1d:01:dd:a9:66:09:c9:02:ba:36:
32:1c:1d:49:89:f5:7b:ac:b9:e7:df:0b:a1:dd:bf:
3d:1b:7a:ed:66:54:9a:3a:6b:c2:09:17:62:c4:7b:
67:bf:7d:23:64:c5:80:3a:15:5f:b6:8b:a4:08:e8:
fd:b8:12:f7:3b:1a:ca:1b:97:25:4d:6d:a6:54:85:
d7:63:0c:5a:f4:50:6b:8f:d6:89:21:da:b8:1d:1e:
eb:75:d5:ce:92:69:c7:61:d7:bc:3a:8f:87:05:d3:
ea:3f:a7:ba:c0:18:1a:3a:86:47:cd:22:c2:2f:38:
00:21:56:b3:e6:8d:c3:1a:ef:27:0a:4d:eb:1c:92:
7a:f7:0b:ec:4d:7f:1f:fd:cb:7b:7d:28:eb:b1:07:
c5:b2:d9:4e:64:50:71:dd:05:e8:6e:f0:7b:6e:9c:
cd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E8:5E:03:0F:5C:D8:8C:D2:F2:91:C4:C6:61:45:51:3D:41:A7:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47da8695-9585-3b73-b7d0-607a5f056aa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:d1:0f:ab:c5:dc:7e:0b:39:4a:79:61:cf:72:d3:a9:c8:f8:
21:18:f1:ea:6a:77:a9:2b:34:98:12:14:35:0c:9a:e3:fa:99:
bc:d9:62:07:30:9f:b5:76:1c:87:00:82:36:fd:85:39:de:90:
a3:e6:b7:d0:74:be:5a:0e:2c:39:9c:e9:3c:0e:bb:87:41:e1:
7f:af:bd:7b:1c:de:16:b2:70:0a:0c:64:a7:5c:9c:20:e2:81:
6c:6c:6b:f3:fd:fc:93:fd:f1:5e:e3:bc:b0:09:e3:da:1f:e9:
53:a2:8f:06:9f:1b:08:8a:df:2b:eb:3c:1a:f9:c4:cd:a5:e5:
26:86:68:06:e5:88:52:e8:2b:18:dc:a5:81:46:f9:f0:e3:86:
9f:62:be:2c:ae:2e:99:e2:5d:25:3a:58:95:56:de:97:9d:4a:
e4:59:e2:7f:34:ba:06:c7:97:d1:0e:8d:12:7c:22:ca:28:00:
9b:57:12:5c:bd:48:c4:4f:a1:7b:89:c5:a9:8f:e5:5f:4e:88:
72:08:2a:cf:64:0e:9c:c9:7b:4d:6c:d9:ac:98:e4:fe:20:f6:
e4:90:ae:cb:02:ec:3d:31:78:db:82:21:c5:7d:e1:8c:73:f4:
e0:0f:23:f6:c4:e7:15:a3:04:b1:06:02:85:85:70:ab:b6:1f:
69:db:1f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:45:50 2025 by rpki-client