Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12c84c9b-40dc-3b0b-8307-50a9d3555aa5.roa
File: 12c84c9b-40dc-3b0b-8307-50a9d3555aa5.roa (raw, json)
Hash identifier: KkH0zfaMAEjxBf8DQ0Hyj0THnGlr67e9hXskmB6I0F8=
Subject key identifier: AB:2E:0E:EA:E7:59:5E:87:30:57:FF:74:D0:CB:8C:55:8C:CA:B7:26
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584953C451C6C6A38C6555B8A300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12c84c9b-40dc-3b0b-8307-50a9d3555aa5.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 396596
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:51:c6:c6:a3:8c:65:55:b8:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=8d3c17b0-4963-46a5-8452-b7ba365941ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:f6:c4:3f:ad:4e:f9:54:1f:9f:ed:f1:c3:
67:11:e0:83:ba:d5:97:89:a4:ba:43:64:bc:35:eb:
83:df:0c:e5:0d:24:bc:94:8a:79:04:93:f2:08:62:
4b:6e:fa:66:4e:16:ac:bd:97:77:d4:89:1a:8d:00:
31:b1:31:60:ef:ac:81:c4:20:ce:2c:6d:9f:e1:f8:
7b:cb:d1:c9:72:b5:c6:29:31:db:d5:21:77:f5:f3:
fa:d9:4f:d0:12:00:0b:9e:15:c6:2e:a0:84:67:52:
2f:74:a4:e7:f8:e2:6d:09:38:19:08:62:1e:1b:ec:
4e:4e:69:dc:48:37:91:b0:31:b9:d9:b9:10:34:0b:
ab:06:08:ee:c6:04:89:f3:8b:0d:0c:c9:be:ba:55:
43:c4:a8:f1:f1:db:31:d0:a9:56:79:0b:c0:25:ea:
02:c0:22:bf:a3:ba:ca:02:a6:6b:3f:1a:07:3c:d4:
df:f8:be:8e:d3:3f:27:c3:e0:31:7d:93:c3:5b:f6:
d9:6d:42:e3:5e:c7:f4:a0:be:bc:f1:63:91:a4:eb:
5f:8d:9b:b9:c4:c5:fe:df:b5:58:7d:c7:f7:06:0b:
37:0f:80:7b:c3:73:65:ae:dd:8e:3d:ec:c1:8f:63:
22:4f:ff:53:f8:cd:2b:20:65:8e:8e:f8:41:cb:33:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2E:0E:EA:E7:59:5E:87:30:57:FF:74:D0:CB:8C:55:8C:CA:B7:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12c84c9b-40dc-3b0b-8307-50a9d3555aa5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:79:88:3f:2c:1e:68:7a:0e:a7:74:6c:76:ec:2e:d6:e1:20:
42:cf:8b:13:2d:dd:39:23:11:0b:35:ae:c3:b7:99:26:22:cf:
07:60:51:65:fd:e2:e6:80:3c:03:2d:20:e0:89:3a:75:8f:27:
a5:fe:2e:3a:78:31:1f:fa:0a:69:52:02:56:d6:20:35:57:3e:
b1:42:54:e0:db:88:4f:12:2c:a8:54:bd:12:ac:af:41:2a:05:
ea:bd:b6:8b:91:14:e7:2b:c7:32:f8:ab:bc:6d:cc:8c:d4:da:
97:4d:9e:bc:3d:e8:17:1d:02:0d:75:3e:df:47:b5:30:30:e4:
0a:6f:bf:bc:4e:2e:9e:ec:01:f4:da:aa:1f:bd:97:a6:3d:09:
22:14:a2:f8:5d:6d:54:28:e3:ba:bf:41:ab:6e:00:f1:27:d6:
bb:30:74:4d:fb:84:43:f1:a8:37:5f:cb:c3:1e:e8:85:c8:b5:
8d:50:cc:b7:b3:1f:01:6b:0c:61:0d:66:44:8e:fa:78:8c:60:
70:9b:9a:3e:bd:82:a5:4c:c1:6a:3d:d1:56:3d:f5:d4:eb:06:
96:2e:2f:d6:b4:69:c7:3d:65:9d:b5:68:1b:45:74:74:53:80:
f0:f9:a8:44:dd:ad:48:91:15:d6:0e:89:e4:73:ed:1e:59:ba:
47:01:7d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:19 2025 by rpki-client