Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c927712c-b22e-3c00-9fc6-ac572a3cd9e6.roa
File: c927712c-b22e-3c00-9fc6-ac572a3cd9e6.roa (raw, json)
Hash identifier: 3o+aR3LdX5w5HopV7ny1S3/wouaENunqH+p5XTiSYDQ=
Subject key identifier: ED:23:C9:06:FE:B1:EE:24:D0:C0:53:26:58:93:F1:BD:57:5D:81:6B
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B27F56A4DF0D856FECBE4
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c927712c-b22e-3c00-9fc6-ac572a3cd9e6.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 396575
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:27:f5:6a:4d:f0:d8:56:fe:cb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=21622f13-5180-467f-882f-cca6e2dc6da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:7d:c1:e5:f0:df:c2:36:6f:ff:73:09:22:
d6:ef:d2:24:ba:23:3c:73:98:75:5a:a9:25:bd:a7:
a6:71:3c:f4:91:fe:03:65:2c:fe:30:25:42:b7:ab:
89:e1:71:11:38:e1:8f:06:3a:e6:95:f8:3c:5d:d7:
51:2a:7e:39:79:f0:2d:63:a1:1f:17:f7:11:87:86:
34:cd:01:65:ff:6d:cb:0a:14:d8:3c:d1:dc:1a:c2:
51:70:de:08:54:49:ec:4f:53:a6:60:ac:4e:be:5b:
67:b5:af:92:8c:08:9f:d9:c8:1c:0b:57:14:ce:2c:
ba:84:fa:7f:35:97:29:d7:3f:73:a0:82:fa:8d:13:
0a:27:bc:73:e4:1a:4c:e9:7f:7f:a6:75:a5:d7:26:
cc:b7:0a:6a:a2:d0:71:f2:23:ea:a1:61:12:d4:78:
26:a3:b7:63:0b:a3:7e:98:f9:2b:87:0e:a4:92:67:
51:33:fe:f2:d9:24:20:b0:71:3c:a9:ec:e4:80:b8:
1f:18:0f:c6:cc:88:27:aa:42:ed:0e:53:4a:f8:8a:
89:43:49:c1:a5:a7:b5:d1:88:fd:fe:47:c8:0f:64:
3c:d5:0b:8d:13:fb:ac:33:0b:0a:99:d1:88:43:5a:
ce:6a:53:84:de:5a:0a:68:f8:41:20:d2:68:f2:ff:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:23:C9:06:FE:B1:EE:24:D0:C0:53:26:58:93:F1:BD:57:5D:81:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c927712c-b22e-3c00-9fc6-ac572a3cd9e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:ee:6f:92:43:3b:5f:de:b1:b5:cf:59:25:7d:05:86:6d:bb:
27:a4:dc:4c:b5:2b:ed:88:fc:a8:0e:4d:e7:69:9b:23:63:8a:
94:ed:8c:43:71:9e:37:da:28:0a:68:cf:27:dc:70:64:ac:de:
c5:c5:69:39:f0:9e:06:4a:a9:59:30:e3:9d:36:38:7f:26:fd:
43:ea:38:b8:72:6d:61:7d:15:a3:aa:78:20:d1:cc:46:c3:cb:
52:fe:68:f0:67:be:47:ac:5e:45:2b:c5:de:d5:c3:ce:6c:8c:
6f:f3:ab:fd:3c:f7:37:1f:1f:20:6e:c3:35:4b:43:3d:ee:42:
c6:eb:17:48:7e:bb:00:f4:0d:8c:7f:1c:9f:c1:42:39:5d:ba:
84:48:2a:83:5e:97:f7:8f:0a:49:9e:c4:a0:1e:60:a1:db:cd:
7f:c2:35:a5:82:0a:4f:18:c2:81:25:9f:bf:38:4c:2b:bd:38:
dd:b7:84:a8:5a:0c:e9:6f:d2:a7:9d:d9:f8:e3:cc:bb:de:ec:
da:5a:d9:ae:f7:b1:05:2c:54:59:30:0c:d2:89:c8:ae:03:6d:
a5:ba:d8:2b:79:d3:96:bb:50:f1:a8:d6:fe:9e:a0:b2:41:2a:
5d:55:37:1e:d6:95:8a:46:0d:e1:7f:35:9f:7a:f0:b3:ed:54:
32:d2:9a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:53:27 2025 by rpki-client