Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5caa665b-0a02-3be2-9c93-83e8e68a2108.roa
File: 5caa665b-0a02-3be2-9c93-83e8e68a2108.roa (raw, json)
Hash identifier: AEkMsDkoUunUAu64Y7SiINqoHscqoan2U//U0dhco5o=
Subject key identifier: 8D:B5:D6:5E:38:A2:27:B3:63:D8:6C:FD:DA:FF:AE:33:71:3D:73:55
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B28F0F4CD33306A1EAC20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5caa665b-0a02-3be2-9c93-83e8e68a2108.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 397207
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:28:f0:f4:cd:33:30:6a:1e:ac:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=c7390eb2-cc22-4bde-8d79-247dbc0e4846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:57:5e:79:d0:af:29:b0:4f:19:7c:d7:d9:cc:
4e:33:75:5d:ed:57:5d:c3:ee:a0:e0:1f:95:a9:73:
ce:c6:27:d6:fc:2f:79:84:26:e9:8c:3b:eb:53:c4:
f8:04:95:53:6c:e2:5b:b8:f3:16:78:75:ed:15:23:
51:e9:22:66:4b:50:52:f9:7a:7a:45:e1:94:24:50:
10:15:d4:ad:15:70:98:62:49:ad:66:a0:1b:72:6f:
d6:96:4a:1e:54:e7:d5:7b:26:52:eb:bd:b2:df:72:
6e:01:8e:43:8c:b8:3b:05:05:a5:22:9a:cf:da:cf:
d5:f8:5e:ee:ea:b1:3c:b4:37:80:59:7d:ad:e0:a2:
be:72:83:cf:7e:63:45:90:10:61:be:fc:8d:81:ee:
e5:66:65:ca:fc:01:13:31:c9:bb:0f:08:c4:b4:89:
ab:24:0d:0a:f1:5f:41:a2:c0:4b:a5:91:21:71:2c:
c9:8d:1a:47:64:ab:ca:c4:e5:38:a0:10:a2:fb:47:
6a:93:9d:4a:ca:3a:4c:f4:5b:80:e9:61:a7:a6:c6:
4c:74:00:af:e9:a4:ef:a5:8e:0e:bc:15:79:83:85:
f5:7b:15:29:be:ed:0c:bd:94:a4:57:b5:6f:32:e7:
06:1c:a3:73:f0:8a:de:af:d5:c9:dc:ad:5e:0f:d0:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B5:D6:5E:38:A2:27:B3:63:D8:6C:FD:DA:FF:AE:33:71:3D:73:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5caa665b-0a02-3be2-9c93-83e8e68a2108.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:76:c0:15:fa:70:f8:4e:7d:0d:3c:ee:42:76:31:b9:88:db:
b9:73:63:bb:47:d3:39:6b:11:7b:6d:88:b0:77:6e:bb:25:7a:
8b:bb:8a:f1:5f:f3:96:03:76:3c:c0:51:08:1e:d6:08:af:6f:
91:2d:42:91:da:a2:2a:93:23:c4:0b:70:b3:13:e5:dc:bc:5d:
4e:17:7d:85:88:51:e5:54:d5:51:25:b4:94:6d:7c:c9:5a:8f:
7d:e0:bd:2f:2d:41:bf:70:b5:d6:89:f9:57:c6:4e:46:5e:37:
dd:63:7c:e9:97:51:b9:ed:16:f2:65:de:10:27:49:f4:93:50:
de:61:dd:84:e1:87:4e:9f:03:35:27:61:69:1e:8a:9a:e8:01:
42:19:f7:b6:a3:4d:96:82:85:f2:36:be:b2:c0:b6:a2:3e:32:
3e:00:89:9c:40:03:c7:f5:ad:a6:1e:36:fe:dd:ec:34:07:d3:
c9:78:e1:1e:76:67:be:35:4d:b3:6f:43:b7:50:cc:a0:41:70:
4c:50:10:90:1d:e2:dc:d3:64:28:c8:dd:bd:5a:fc:79:84:b6:
eb:65:73:98:e7:01:7a:82:a0:48:c9:e6:e1:8c:d5:50:ca:6e:
29:3f:30:fa:ab:63:c9:fd:51:52:42:35:74:f3:cc:d5:81:77:
9b:00:0f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:12 2025 by rpki-client