Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/934cf549-851b-32de-a903-69a46baf5efd.roa
File: 934cf549-851b-32de-a903-69a46baf5efd.roa (raw, json)
Hash identifier: HRRkjKZyJsIXw/AXSQpDUAeNxkzKcLZftvWaQCDiDLg=
Subject key identifier: FA:CC:A3:03:6F:EF:90:59:5D:82:82:9D:39:42:03:4E:E8:AE:16:D5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B28B07171DA8EB6985630
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/934cf549-851b-32de-a903-69a46baf5efd.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 397195
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:28:b0:71:71:da:8e:b6:98:56:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=55c9c635-9107-4acc-a1bf-7d2e5f1f2e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:f9:ba:3d:42:b4:34:10:b5:09:4a:9b:44:
ca:b9:3d:ae:da:81:f8:5e:aa:bb:19:92:ff:6e:c1:
ef:fb:e4:db:0b:e7:10:ac:28:d4:43:67:86:06:46:
f4:9c:99:b2:d1:db:bb:29:d4:2e:87:f7:b2:9a:12:
8c:a1:a7:f0:b4:f0:a4:f8:4d:37:dc:55:cf:91:3e:
13:74:ca:a5:5c:f6:51:f2:1a:9f:a5:2b:67:40:b8:
5b:5d:99:7e:6d:79:fa:a4:ab:1d:59:59:da:cf:e1:
4c:2b:66:3a:9f:98:cc:e2:c9:ea:3b:5c:d4:80:94:
00:01:e3:88:c9:53:6a:b3:0f:28:45:6d:39:0f:10:
7a:62:64:ce:3f:bd:34:76:4c:db:bd:a4:7f:1f:84:
26:21:a0:54:87:e3:98:6f:7c:04:5c:65:33:42:6d:
59:51:af:ec:0b:1f:18:8b:65:d9:00:d6:1a:d2:71:
ff:72:17:e3:9b:d0:4b:76:bd:46:19:69:94:50:88:
f0:47:5d:f2:53:0a:73:6a:59:0a:ff:7d:75:a4:23:
31:59:28:89:59:89:28:fb:f4:4e:71:dc:f4:e6:1c:
ed:f4:e0:38:3c:cb:1a:c5:90:2e:fd:4b:59:7d:87:
de:02:41:f2:7c:8f:5a:73:19:e0:b8:d9:20:6c:16:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CC:A3:03:6F:EF:90:59:5D:82:82:9D:39:42:03:4E:E8:AE:16:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/934cf549-851b-32de-a903-69a46baf5efd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:82:ec:ce:c2:c3:3d:96:3a:ac:40:b6:e6:c3:a6:4e:9d:b5:
28:ff:03:d1:62:a3:03:7d:b9:19:dc:dd:f5:11:e2:c8:cd:6b:
09:ad:02:38:7c:a7:54:9f:32:f1:eb:fa:75:69:5f:54:18:4d:
58:9a:04:06:4c:1c:a0:35:80:a6:1b:cd:19:d9:5d:a0:ed:68:
9d:83:1c:f8:e8:47:af:eb:82:eb:43:d4:0e:9e:14:9d:7c:1a:
64:26:f1:94:26:a6:c9:e3:8b:90:4c:ee:73:b4:43:74:dc:5e:
0f:af:04:00:e7:85:28:e3:13:cc:69:10:9a:10:ce:f6:89:bd:
ac:ea:be:86:cc:79:3c:6c:59:13:91:80:39:b8:06:57:10:e8:
62:99:90:08:fb:2b:6e:e6:5d:01:97:85:e0:e7:42:5b:84:6a:
ce:dc:8d:42:71:f7:d0:b7:0d:c9:55:3e:96:ed:12:ea:43:eb:
19:c7:2f:70:18:8b:49:63:07:b4:61:18:50:14:13:e9:f4:dc:
bf:3e:e2:56:d5:a4:48:e5:90:34:99:60:38:09:30:2b:3a:9e:
05:25:c7:52:fb:dc:78:57:d7:67:92:12:48:69:16:ac:76:fc:
2b:39:50:39:ca:92:b3:c1:93:83:06:33:83:0b:ca:68:a7:7b:
95:e3:ab:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:22:35 2025 by rpki-client