Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be1a1e28-b0b1-30c1-83ff-951208707188.roa
File: be1a1e28-b0b1-30c1-83ff-951208707188.roa (raw, json)
Hash identifier: UAJG31/NPDlLhWgXjEivvJDYXZAIt4JRyyNP7tdZgdg=
Subject key identifier: C2:F7:BC:D1:F9:F5:81:AE:23:28:89:59:D0:F9:B1:68:E0:69:FC:93
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B29DEF3C7DB6A61E4C180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be1a1e28-b0b1-30c1-83ff-951208707188.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 396541
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:29:de:f3:c7:db:6a:61:e4:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=e2e37c73-bb2e-4189-80a7-c8f735269911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:2b:5c:27:d4:b1:fa:b5:30:54:02:14:48:
2d:59:9c:2c:3a:f8:46:64:e3:22:9e:e6:fd:65:c6:
d1:68:b2:3c:51:18:bf:58:ab:b5:45:82:62:66:7e:
a9:6f:67:10:2d:f2:47:06:8e:54:92:8e:61:50:d7:
cf:73:51:10:01:e0:98:54:14:d1:db:7e:fc:2e:4b:
df:c8:a6:a7:68:c1:67:b2:52:c0:b3:a1:96:08:ee:
35:db:46:91:94:b9:c8:3c:36:64:95:10:42:04:09:
83:37:27:21:3e:7b:10:e9:ec:a7:5c:8e:2f:f7:51:
c6:f4:76:04:24:16:b9:c9:3e:6c:68:fd:49:60:24:
a9:0f:da:52:98:56:34:bb:4e:1d:18:79:8f:bc:8f:
1c:e9:65:64:14:a6:02:40:8e:ab:61:47:95:e8:fb:
ac:0e:ae:71:bd:a9:ff:0f:02:a8:97:5f:3b:3b:7a:
b2:4f:c3:53:2c:2f:39:21:86:74:ac:26:14:40:d8:
e3:b1:86:0d:9a:5b:63:1f:01:f1:c6:71:19:aa:8a:
cd:dc:36:fa:d3:1a:a8:88:98:dc:fb:4d:d1:31:cd:
f0:bf:45:ef:81:88:83:54:64:29:5c:c3:ee:83:97:
27:e6:d8:f0:e7:70:55:e8:75:b3:82:dc:00:45:a3:
0f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F7:BC:D1:F9:F5:81:AE:23:28:89:59:D0:F9:B1:68:E0:69:FC:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be1a1e28-b0b1-30c1-83ff-951208707188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:46:f0:8a:8b:f9:79:7a:45:a5:2c:56:9f:e9:53:51:f9:64:
b9:81:b9:38:8e:2c:de:2c:20:54:55:61:28:15:12:03:0a:1b:
68:af:05:40:96:e0:c8:24:37:7a:2b:ce:69:d1:a1:2c:4d:de:
a5:ed:4a:54:0d:59:f4:46:84:2b:bb:77:6e:f7:4e:5f:aa:c8:
1e:2b:3a:b7:c6:68:90:be:a4:51:16:bb:16:20:51:5f:68:5f:
6c:24:94:89:24:6e:cc:8f:f8:b9:df:99:ca:d9:db:8f:3b:c1:
93:55:06:ef:64:9c:39:93:56:d9:41:4b:c1:4a:71:19:6c:45:
cd:19:18:55:14:b6:be:db:0e:d2:d9:85:a1:8a:49:34:c7:9b:
45:44:51:09:62:3c:e8:1c:e1:67:0e:da:27:c5:b6:46:c5:42:
c1:ec:bf:ae:c3:a2:ba:e7:c6:a3:80:72:f0:ff:9a:a0:43:71:
96:2f:3e:25:77:98:72:17:a6:b6:a2:ef:42:e2:d0:70:9d:84:
75:1d:e8:60:39:a8:f5:ca:92:60:e7:29:77:9f:8a:d0:31:75:
f4:96:6e:4c:f0:f5:c1:3d:58:de:c4:49:df:d6:ca:be:bd:4a:
7a:41:b5:b0:b3:4c:f3:68:f7:7b:2c:3e:71:1b:46:d4:fc:0b:
48:da:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:18:54 2025 by rpki-client