Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d592428-2d2e-3b83-afb9-459540fce005.roa
File: 5d592428-2d2e-3b83-afb9-459540fce005.roa (raw, json)
Hash identifier: d4uZtA0/tr8tyjskii5nrkRSYas6BvpA+OT/+pCnLIc=
Subject key identifier: E1:A3:F2:37:3D:37:B3:BD:78:06:26:6A:AD:1D:E5:1E:04:72:C1:AA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B23B09034575E393FE8C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d592428-2d2e-3b83-afb9-459540fce005.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 396615
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:23:b0:90:34:57:5e:39:3f:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=aaf89fab-1936-4938-a024-9f1b6a4ae13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:8f:42:5e:62:cc:07:3b:2b:73:6b:6e:ba:
a2:c2:d9:8a:f8:7a:fa:69:c2:71:22:d8:34:dd:d9:
5c:f0:61:e9:0f:db:fa:00:c6:a5:53:15:70:3a:4e:
a6:f6:e4:77:c6:04:9a:eb:ad:92:02:aa:67:0a:b8:
1b:e9:67:28:19:7b:4c:52:e5:03:2e:87:a0:03:dd:
8e:63:e9:8d:04:a4:d2:86:96:1e:5f:3d:fa:48:79:
3a:50:36:7d:e7:91:29:0c:17:74:04:38:c0:87:9d:
62:fb:0f:0e:49:32:84:77:f1:70:52:dd:59:38:76:
f2:82:d6:ab:bf:77:0e:d8:ae:06:24:73:fe:41:70:
9d:54:bb:ef:02:bd:b8:e6:2f:9f:21:85:fb:27:92:
d3:13:65:e8:64:ae:72:c3:31:d7:3d:ce:c7:d7:ba:
2b:2d:15:5a:28:cc:d7:ac:fc:fc:b2:c2:32:6b:31:
21:57:9e:40:4c:17:9f:77:bb:e1:42:85:2d:73:07:
37:73:f7:f1:6a:56:8c:0c:6d:f3:99:89:45:88:50:
5c:57:5a:8e:0e:57:54:96:76:b1:ff:5a:0d:8c:37:
e4:8f:89:76:28:f8:0d:34:c4:b0:c1:dd:14:a0:34:
48:11:21:40:e9:c0:24:9d:27:7e:be:37:aa:9c:cc:
6a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A3:F2:37:3D:37:B3:BD:78:06:26:6A:AD:1D:E5:1E:04:72:C1:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5d592428-2d2e-3b83-afb9-459540fce005.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:bc:d3:a2:84:da:06:42:92:9e:ef:5d:4a:53:06:c3:59:3e:
92:fd:9d:31:bc:f1:ca:21:9a:db:ab:02:42:a8:69:74:2a:6d:
fb:60:c0:91:a7:5e:6a:51:c9:aa:37:d4:94:cd:43:f3:d6:92:
ad:9e:44:ae:b6:e9:21:91:4c:83:a7:aa:ff:58:77:f5:ac:06:
a5:35:bb:f3:08:d6:50:53:18:15:43:51:34:29:6b:af:a5:98:
3e:38:e2:23:70:b8:20:4d:6e:43:bd:13:dd:f3:78:39:77:df:
ee:f9:39:06:8a:ba:4e:4f:cc:e8:38:ee:8b:c5:ec:ef:c0:4d:
7b:6c:93:8b:33:47:19:d0:9b:a1:c2:42:00:0a:91:6b:19:24:
ce:f5:a1:e0:7b:c8:0b:cf:e8:38:a4:f2:08:e5:f9:cf:53:17:
a0:05:e7:dc:7f:2e:88:e6:56:89:44:b5:5f:f8:48:15:36:4c:
26:8f:85:8f:5b:2d:01:d2:51:e3:64:fe:01:2c:61:b3:5c:fc:
a5:bf:a2:77:d0:57:c4:86:a3:b3:4e:24:02:57:70:d8:ee:8c:
02:5f:59:77:90:2d:8e:1c:8c:c7:b9:26:2d:b6:c9:30:1e:44:
36:b9:e0:d9:28:88:3e:7b:3c:83:db:27:ca:a0:d5:e7:5c:34:
e5:df:7f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:02:45 2025 by rpki-client