Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0ddbd76-e6aa-396b-8b56-f3ac0883a722.roa
File: d0ddbd76-e6aa-396b-8b56-f3ac0883a722.roa (raw, json)
Hash identifier: MXBQElI0PBYNRzNTf9AkwRM2ez3phWv+sVsXw+J8xfY=
Subject key identifier: 89:7F:B3:18:48:F5:59:31:F1:68:43:B0:1A:6D:3C:8D:43:5A:74:E7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B2516E3843EFA3988E100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0ddbd76-e6aa-396b-8b56-f3ac0883a722.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 396589
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:25:16:e3:84:3e:fa:39:88:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=15262fa8-9c29-4622-a205-757f844b0b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0b:ab:d9:17:30:0e:c3:70:ce:77:e4:c8:8c:
3b:e8:c5:e3:5f:de:1b:52:f2:b0:9a:ca:39:a3:1d:
4e:0e:58:00:86:6c:2e:4d:f1:f6:54:93:7d:c8:d1:
fc:84:45:77:fc:b2:1f:8a:37:7d:5e:71:9b:eb:86:
8e:d1:97:d9:30:4d:97:f8:7a:63:c9:b7:ae:ad:16:
48:22:fd:e5:f2:57:a4:c7:cc:c8:6a:a2:d5:d3:91:
b7:ed:ad:b8:f0:2d:d2:b9:f7:6b:2b:05:0f:8a:fa:
9a:7a:a5:62:7c:25:8c:ea:39:12:9c:df:c4:7b:d7:
74:d4:dd:61:6e:2f:d0:c7:58:2a:e8:0e:43:6c:d4:
8c:65:56:43:dc:06:eb:d4:29:73:51:9b:f5:03:84:
f8:c6:6d:ba:4a:1e:17:cf:29:5a:72:0d:6c:19:fd:
e9:e9:75:84:26:e7:37:54:0f:27:ef:33:fa:5e:7f:
94:f2:0d:7d:4d:d1:e3:55:e6:5d:ff:70:05:c2:c3:
f3:28:4f:da:65:49:42:83:17:3b:be:93:f4:87:f6:
73:f7:f4:0c:1a:0e:fe:d2:43:f0:22:16:f9:d7:5d:
52:c7:c8:20:fc:9c:b6:72:6b:84:e7:8d:83:2d:03:
1a:f4:48:61:5a:c5:60:2a:15:e2:be:ab:3d:54:a5:
3d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7F:B3:18:48:F5:59:31:F1:68:43:B0:1A:6D:3C:8D:43:5A:74:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0ddbd76-e6aa-396b-8b56-f3ac0883a722.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:42:77:f5:1d:cb:ae:0f:d0:29:33:4b:22:64:64:5d:c5:84:
b4:e1:82:8f:ec:2d:18:86:c4:14:76:52:56:b5:b5:86:19:60:
5f:fe:e5:50:ff:31:ae:9d:22:ba:ed:6d:77:ef:d1:b8:aa:36:
31:32:3e:0f:55:63:97:0b:65:13:7e:90:15:74:c0:97:8f:c7:
41:7f:32:ff:fd:b1:20:69:66:ab:71:04:0c:ec:08:a1:7e:f6:
ba:b0:9a:10:b7:41:61:50:6a:d8:ab:39:8b:a2:35:67:68:15:
e4:fb:d1:db:d0:e2:98:97:15:fa:7a:e5:bb:c9:fa:7e:d2:48:
18:ab:a4:b2:9a:14:cd:11:36:19:b3:74:3e:c9:2e:ff:ba:d4:
ba:a9:07:1a:d9:e8:30:c9:a6:de:91:0c:a7:2c:78:ef:28:70:
37:b6:8b:78:29:e4:81:0b:51:1b:9f:72:ad:9d:be:e2:8e:99:
4f:9d:13:a8:c2:bc:ff:28:e2:d4:45:a4:89:70:31:7f:98:88:
9a:b5:01:29:9b:aa:69:a8:c1:19:05:17:bd:6a:18:24:0e:ec:
d4:70:46:e9:27:a2:0f:29:4e:94:38:b6:21:cc:f2:21:44:0b:
3f:f9:a5:74:34:4f:ca:e8:25:f5:7b:aa:e7:db:70:4b:41:00:
43:1a:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:31 2025 by rpki-client