Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/643a4af7-8193-3d49-8def-edc6e4fef032.roa
File: 643a4af7-8193-3d49-8def-edc6e4fef032.roa (raw, json)
Hash identifier: Ej4cTjiUBbqzyuWIvgcH38tZGxbmRUGCtfmokq9SO2w=
Subject key identifier: C2:9E:61:D2:E6:3A:92:11:2D:C4:1B:E9:D0:05:5C:4E:19:16:27:CB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B2A28299F8B46464AFB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/643a4af7-8193-3d49-8def-edc6e4fef032.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 36621
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:2a:28:29:9f:8b:46:46:4a:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=8226cfad-0521-476d-ba2d-b90a2206da38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e5:8b:c8:12:72:88:d2:61:dc:ad:58:3b:64:
cc:c8:43:f2:11:a1:6a:ce:66:14:3c:54:1b:97:c2:
69:2c:93:42:ae:47:76:36:80:6a:0d:14:b0:b9:77:
b7:af:d2:5c:d4:82:c9:9e:71:c9:d4:99:7f:e7:1e:
37:05:cb:25:af:49:68:bc:44:b8:b5:59:89:28:4b:
b7:18:36:b5:09:d3:63:06:64:3f:ac:e4:93:ab:21:
47:b2:7c:42:3a:e5:ba:86:88:4b:81:1e:e7:06:f5:
77:68:48:5b:5f:c2:af:0b:48:d9:1f:55:4e:b4:0a:
20:ac:81:08:9b:b7:89:fd:a4:3e:f4:10:d3:7c:60:
5b:77:47:a9:a8:d1:c4:b0:b1:da:62:5a:09:06:47:
b3:42:4e:55:dc:c9:cf:aa:c4:55:a6:ed:1e:d4:ad:
e7:d9:de:e7:ab:f7:ed:92:38:9c:2e:51:37:66:d6:
07:f8:6c:2b:4e:a8:f2:f1:0b:68:81:bc:4b:2d:9f:
c0:e3:05:96:6a:52:b9:a6:3e:c8:6d:e0:33:a8:5f:
ab:46:80:5b:e1:38:6f:81:93:80:32:be:a4:64:a5:
a8:06:35:b3:94:e8:aa:7b:a4:87:5b:4c:5d:8c:90:
ee:9b:a7:c2:c2:30:2a:a5:7a:27:fa:0e:0f:4f:75:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:61:D2:E6:3A:92:11:2D:C4:1B:E9:D0:05:5C:4E:19:16:27:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/643a4af7-8193-3d49-8def-edc6e4fef032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:12:55:f1:3c:92:26:ad:78:70:05:f6:2c:f2:66:a7:d6:ab:
db:f4:b4:0d:7a:f2:8d:1e:c0:38:8a:70:7f:c2:53:a4:23:bb:
e7:c2:9f:7e:b3:74:49:91:d7:25:a3:97:62:4d:8b:c5:a2:00:
29:54:51:82:12:1e:8e:97:1b:0a:24:c4:da:c7:dc:2c:14:56:
d9:83:12:30:95:c0:34:09:4d:ef:c7:9d:65:bd:f1:38:3c:75:
1f:e6:b4:57:00:f4:b7:f7:5b:8b:46:38:9e:93:ad:e2:90:b1:
6b:02:a2:5b:92:d0:c8:8d:da:10:b8:52:50:9a:fa:e3:16:af:
b2:a5:08:52:18:72:86:9f:79:14:21:79:7e:e8:5e:ed:1c:f3:
88:b5:61:ce:8d:6a:8f:f1:01:dd:f4:78:a2:c9:2c:c8:12:b4:
96:d2:9f:42:8d:a8:a3:dc:94:36:52:50:71:a8:e3:67:f4:66:
44:b8:16:b2:69:54:79:cf:a0:1b:54:73:bd:69:b6:b1:6f:44:
f6:96:8c:0c:b8:0a:74:29:cf:f2:a0:80:00:97:f5:86:63:bc:
05:11:9b:d3:6f:40:74:d5:e1:1b:dc:22:87:c3:23:a7:46:0c:
7d:ea:9c:d3:fd:df:90:ed:be:3a:62:75:4e:17:60:62:78:d9:
02:2e:a7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:32:49 2025 by rpki-client