Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd918ad9-4ad4-3f25-a512-caf380d82e34.roa
File: fd918ad9-4ad4-3f25-a512-caf380d82e34.roa (raw, json)
Hash identifier: JhWE3FxvwH7snbgBxz7/rt2KmxNorZ+WzGZQNwl2zKc=
Subject key identifier: C1:3E:3A:6E:15:6C:D5:BA:3B:84:D7:20:F8:77:40:F2:5A:68:85:33
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F43285848748B28DE03F2448E8EC8BB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd918ad9-4ad4-3f25-a512-caf380d82e34.roa
Signing time: Mon 06 Jan 2025 14:00:52 +0000
ROA not before: Mon 06 Jan 2025 14:00:52 +0000
ROA not after: Sun 06 Apr 2025 13:00:52 +0000
asID: 40647
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:74:8b:28:de:03:f2:44:8e:8e:c8:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 6 14:00:52 2025 GMT
Not After : Apr 6 13:00:52 2025 GMT
Subject: CN=1e9555cb-cb38-4a20-8dfd-08e4ff615cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:a1:ee:92:db:ca:8f:24:21:f7:35:26:87:
d7:26:c5:db:3b:6f:cf:82:84:9c:a4:cd:96:a8:40:
20:50:12:59:12:3a:d8:64:62:62:a5:71:81:50:a6:
27:a5:6b:ea:6c:34:69:60:69:bf:24:3a:db:1e:7a:
d6:54:bf:b2:be:08:04:be:59:d9:6a:0b:5f:3b:de:
8a:fd:df:82:d7:51:e6:f5:eb:0c:ba:6b:4b:39:2e:
ba:ac:3f:c4:ec:66:27:73:c4:9f:17:56:32:14:f7:
89:8d:79:9e:39:7a:62:5b:1e:9d:e1:71:09:1d:fd:
85:e9:24:a3:aa:8d:d7:4d:06:88:0d:f6:7b:50:a9:
c7:1e:a5:68:7c:8a:d8:f0:cf:8d:df:2f:26:9d:e5:
f3:41:b6:62:e4:9b:6a:35:dc:6c:03:43:fa:79:ea:
a6:00:40:42:a4:39:2f:74:f0:db:28:37:6a:81:70:
ef:95:ec:37:66:73:76:3c:e6:12:53:e8:dc:14:d5:
09:d6:3f:1b:fc:ca:0c:b2:5f:04:fe:79:78:d0:f4:
97:1f:0c:27:e0:85:f1:df:11:5c:38:ae:c4:91:f2:
bc:13:e0:80:e5:bd:97:75:be:06:13:5e:89:be:48:
c4:e3:a6:bd:3d:b7:3f:21:45:ef:50:cd:30:c2:b8:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3E:3A:6E:15:6C:D5:BA:3B:84:D7:20:F8:77:40:F2:5A:68:85:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd918ad9-4ad4-3f25-a512-caf380d82e34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:f7:be:a6:fd:c5:d3:f4:b6:e9:6d:7c:01:0b:a9:7f:c9:c8:
4d:d2:ab:47:cf:24:c8:4a:b7:27:ce:9e:31:06:6d:ed:31:4c:
ee:01:d4:87:fd:f9:f3:d9:ea:cf:c0:99:eb:81:31:df:4d:74:
9d:bc:f8:73:c7:65:c0:02:73:9a:d4:85:af:1e:a6:35:db:34:
66:b6:8b:01:3f:1c:7f:a8:7b:ca:fb:90:cc:b3:43:cb:2f:7c:
b7:56:01:43:35:8c:10:18:15:d9:c2:b6:59:0e:56:15:68:fa:
86:59:bd:c7:a1:ba:61:d0:68:95:2c:e0:e2:d0:1f:a4:2a:65:
a3:ea:a2:14:a4:44:a5:1b:20:7f:eb:c1:0a:01:e0:53:38:b1:
8c:82:58:dc:5c:e7:88:f9:5f:54:00:cc:c1:52:a2:08:b6:4a:
14:3e:a3:ed:c0:69:c8:e2:a6:ec:60:3d:c1:1d:4d:52:bf:01:
fd:ba:ee:5a:10:eb:0d:3d:2f:14:6d:e9:90:93:42:20:77:bb:
aa:b3:dd:fd:e0:71:bc:a5:fc:96:1c:ce:91:04:cd:ce:77:05:
81:60:ee:3e:5d:5c:88:94:09:94:1e:9e:f2:c5:56:e9:aa:d1:
99:22:07:11:64:ce:b7:a4:77:83:23:a2:04:f6:3f:0c:21:06:
4c:09:de:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:46:14 2025 by rpki-client