Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d98d9921-668d-3061-901a-43845f0264e8.roa
File: d98d9921-668d-3061-901a-43845f0264e8.roa (raw, json)
Hash identifier: LNcs3bLKVr23+GdzFfRbV6BWfsc4dRJNru0YB+N7Om8=
Subject key identifier: E3:9F:49:A1:19:6B:E2:B0:6F:EC:C5:93:2F:63:AF:B6:89:30:87:6C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B23830537DF36EC244380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d98d9921-668d-3061-901a-43845f0264e8.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 36627
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:23:83:05:37:df:36:ec:24:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=9fa395de-4e81-4e74-a226-b46bb8132bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:99:75:ea:bb:1b:bb:65:be:5a:ce:1d:98:
ea:cf:d2:06:85:e0:ed:7a:d9:77:fb:cc:a0:37:4c:
71:bd:08:b8:ae:06:b3:33:ca:f5:e5:9a:a9:29:2c:
eb:12:fe:28:8b:cf:69:20:45:f0:bf:90:ab:ba:b3:
cb:4e:6b:e4:96:28:23:28:9b:ed:dd:65:7d:47:8f:
42:54:fe:47:68:de:2d:ad:d3:2d:5f:98:c0:8d:9b:
94:f0:dc:69:2b:35:c3:49:8b:28:a0:23:8c:2a:a2:
3e:84:b5:0f:a6:f4:3e:b9:29:ef:ae:12:84:94:13:
b0:c4:0c:3a:a5:17:fb:ba:bc:b7:3e:6e:b6:97:db:
dc:18:4b:ac:35:d7:12:19:7c:ac:36:e7:49:f2:e8:
97:c5:35:e1:a0:82:e0:87:72:03:7d:fd:41:bc:77:
06:ad:43:f3:9f:f4:03:17:d4:62:5c:e2:3b:d2:c3:
f5:2b:29:a4:c1:62:39:a5:37:67:7b:7e:91:d3:f2:
9b:91:80:0b:f5:f1:15:70:f5:b4:09:35:fe:70:5e:
65:1d:cc:53:2d:44:d9:29:89:51:3e:63:b7:25:de:
89:af:f1:c6:ac:bd:15:6c:70:ec:e3:e8:e6:4f:bb:
64:74:92:48:e5:3b:ad:8c:ef:71:9a:67:b1:39:14:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9F:49:A1:19:6B:E2:B0:6F:EC:C5:93:2F:63:AF:B6:89:30:87:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d98d9921-668d-3061-901a-43845f0264e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:a9:50:d0:cb:2c:14:f9:db:30:22:87:dc:b3:50:6f:04:63:
05:50:63:41:df:d3:6d:4b:fb:e3:63:48:84:39:45:72:e1:cf:
b7:29:5a:88:63:51:d6:86:0c:56:b6:da:3a:e6:9d:64:2d:99:
fa:ab:a3:77:47:2e:dc:82:c4:25:65:55:bf:6a:13:a6:3c:11:
d4:5d:98:ad:b4:5c:ca:2d:45:c8:59:0b:57:f7:8f:eb:a7:12:
32:3a:05:5d:5b:1c:8f:14:1a:17:08:46:71:70:40:43:94:1a:
81:61:24:bc:b0:db:bb:17:b0:b6:9f:06:d9:9c:31:90:cf:6e:
b2:f6:f4:18:d1:c9:5e:a9:6a:42:a4:f3:ed:2c:34:4a:78:60:
4c:4e:08:27:35:81:3e:1d:27:17:31:7d:c1:1f:13:85:1e:37:
f2:d9:c6:ac:d5:f3:d5:50:b8:11:9d:a1:c0:18:26:27:dd:be:
dd:7c:b5:f6:21:17:57:f6:1b:24:47:72:b9:33:77:c7:10:2f:
80:7e:49:05:1d:17:de:f6:68:80:bb:a8:86:78:93:51:97:b0:
e1:3f:ca:63:14:bc:36:04:b0:09:43:2c:9b:ae:4e:64:bd:94:
bc:47:32:8b:07:4e:32:9f:36:b9:8a:82:32:c1:b5:36:81:44:
ce:e8:d6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:28:49 2025 by rpki-client