Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d88a1ff-70d9-3c16-ae70-b10eded56d53.roa
File: 7d88a1ff-70d9-3c16-ae70-b10eded56d53.roa (raw, json)
Hash identifier: XUyHNfbxyqkH/fpLkzOq1c4e0H6g3AAulzbvomodAVE=
Subject key identifier: C2:58:0F:81:7E:8E:F9:82:A5:5E:F6:89:88:B8:37:7C:D1:80:19:76
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B26DC13CD56BF2CD41140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d88a1ff-70d9-3c16-ae70-b10eded56d53.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 25485
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:26:dc:13:cd:56:bf:2c:d4:11:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=0ddb8d00-2dbb-4754-900f-4a4eeaff848f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:f3:57:80:19:b0:53:1c:1a:78:dd:cb:63:
63:b7:62:cc:d9:55:a3:f2:22:d7:c0:37:dd:3b:1e:
bf:24:78:d9:7a:79:d9:f6:d5:e9:4e:cc:8c:e0:67:
3e:5c:ff:30:18:f8:95:95:4f:42:90:78:1c:30:6a:
8c:5d:7d:2a:31:35:98:44:37:29:73:69:5b:78:a2:
3a:96:cf:8e:eb:60:98:a6:43:63:95:8a:c8:2a:02:
e2:94:a2:6d:a8:20:c7:a2:16:0b:5a:06:6a:3d:86:
8b:30:60:7c:f4:17:8c:e8:9d:a7:1d:83:03:a5:0f:
7c:04:99:50:41:45:47:a2:28:e8:cf:11:eb:a9:28:
0e:99:e0:52:fa:fe:e3:a9:fc:d1:ee:55:66:18:ee:
ed:f1:ae:70:a4:5b:23:d4:86:b3:16:9d:17:41:7f:
53:1b:c4:02:2b:f9:f4:a8:9f:cf:50:48:41:6f:5d:
90:cc:9b:32:6b:1a:3e:28:3e:bd:f5:bd:21:89:25:
cd:ba:79:4a:6f:de:0c:20:4d:07:d0:c5:4d:c9:53:
64:55:7e:9b:94:57:89:ef:92:18:20:71:cb:5b:e6:
10:7d:5f:33:0b:27:77:61:bc:1e:14:df:c2:40:9f:
5d:65:c9:33:89:d7:3c:c9:c7:ee:5e:dd:6d:13:7e:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:58:0F:81:7E:8E:F9:82:A5:5E:F6:89:88:B8:37:7C:D1:80:19:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7d88a1ff-70d9-3c16-ae70-b10eded56d53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:9d:7f:86:0e:29:21:ea:55:2c:05:26:8f:52:06:30:e0:62:
4c:7d:d5:2a:51:19:ed:03:e5:85:e7:ef:0f:6e:b6:a2:c4:c3:
b6:69:46:04:2c:3b:4f:ad:b4:74:43:74:7c:04:0a:e5:73:40:
a7:fb:b9:60:52:bb:4f:57:97:a8:7c:3c:33:ca:ce:c1:12:06:
99:99:80:ec:5e:0f:23:e0:eb:99:62:53:a5:23:c8:0a:11:81:
b9:41:a8:a6:ea:b2:e4:5e:62:19:1f:b7:07:04:d3:fb:c3:d0:
fd:c6:30:5b:09:d1:88:34:b3:2c:4d:fd:c1:b7:c0:8f:dc:b4:
e5:61:6f:0b:ef:a6:99:8f:b4:09:b7:81:8e:bf:85:4f:29:9c:
10:ed:ae:e1:d9:fd:e3:b0:2e:f2:73:f5:46:e7:91:15:8a:3a:
b9:0e:94:07:61:8b:ea:b3:4a:a4:64:ab:21:f8:f8:2d:9a:64:
e1:0d:57:02:7e:5c:03:05:18:e1:fe:5a:4a:d0:21:d2:64:26:
4a:90:8d:d8:c7:7a:2b:9e:40:86:35:2f:79:19:72:c7:9e:8e:
ed:d2:79:71:38:fd:bf:ee:eb:3b:1a:6e:cf:a3:c8:38:f0:bc:
2f:24:8b:06:fe:68:a9:58:21:69:d5:82:7e:dc:95:56:be:52:
b8:20:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:20:08 2025 by rpki-client