Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/218236af-04f9-3b10-aeb9-932aa04b4e9c.roa
File: 218236af-04f9-3b10-aeb9-932aa04b4e9c.roa (raw, json)
Hash identifier: LWNzKIb5qVMZE+6kz1Fw1g9lBKZdBwKO8LIRfEwejoE=
Subject key identifier: D8:EC:A3:8A:82:C7:E8:39:5A:A1:61:E9:98:C3:70:93:39:4C:CB:E8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584953C4534600C55CC80226CEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/218236af-04f9-3b10-aeb9-932aa04b4e9c.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 36631
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:53:46:00:c5:5c:c8:02:26:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=b0fa6c81-5b2c-46b8-8f2b-0a2b1286b818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b7:3e:21:b2:e2:33:38:fb:d0:2f:f2:a4:c8:
fc:c1:65:5c:59:1e:0e:3e:00:1b:02:9e:8b:44:8f:
c4:fb:8a:93:54:fe:79:5d:c0:e9:9a:09:f5:d3:a1:
17:4a:81:76:8b:df:aa:3a:ee:6c:b0:71:aa:e0:d7:
87:e5:19:bf:c6:f4:fe:53:58:ea:3f:2b:38:5e:bf:
04:90:86:fc:5a:4f:69:ad:63:c3:50:87:ae:f3:18:
02:57:8c:a7:81:af:1e:ba:a6:55:62:c5:4b:6b:32:
55:f6:8a:5d:30:8e:86:e0:57:de:e4:21:dd:13:78:
eb:87:50:b3:d4:5f:e1:0e:bb:df:8a:2e:c2:3f:1a:
c8:59:dc:ce:0b:d4:dd:14:b8:56:b1:83:d1:67:87:
21:43:b3:e8:d1:e9:14:33:ca:d5:93:01:1c:21:13:
42:38:ad:b1:2f:47:6c:8e:d9:5c:d4:ee:9b:28:82:
b9:ee:2c:a2:01:4e:49:b0:92:b3:fc:04:85:45:08:
c9:f3:da:84:92:0c:e3:8b:b9:44:61:3c:84:0f:e0:
2c:41:46:d0:e3:49:05:32:4c:8c:5e:31:72:0d:89:
92:ac:39:9f:92:3d:32:6b:1c:9f:ab:7d:85:7a:69:
c5:de:1e:77:21:ae:84:dd:32:87:41:e1:f5:61:9c:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EC:A3:8A:82:C7:E8:39:5A:A1:61:E9:98:C3:70:93:39:4C:CB:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/218236af-04f9-3b10-aeb9-932aa04b4e9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:03:37:8e:1a:40:a0:e7:ab:3a:15:0d:3b:99:5b:c7:0d:51:
6b:5a:41:d9:a7:9d:07:c5:56:37:9a:c6:54:e7:b5:77:0d:1d:
4f:a2:2a:28:e5:4c:69:02:45:d7:38:fa:91:f0:e4:2e:09:69:
24:dd:4d:7f:c2:9f:fb:97:bf:8c:6a:27:21:3e:84:44:7e:15:
2b:bc:63:4e:b5:a2:24:f2:93:2f:2f:f7:46:e4:a4:5d:4d:cd:
11:14:33:fc:94:1d:75:af:b3:11:8f:d0:6d:57:ff:b0:2e:a2:
e5:05:c6:c9:ce:c2:c1:da:1c:2c:4a:5b:7c:e9:d8:a7:97:2a:
a9:13:76:51:ef:5c:6c:8c:37:64:20:ac:12:14:f5:8e:0a:49:
2b:eb:9b:01:2b:20:01:32:99:c4:16:f2:09:0f:8c:4e:99:7f:
65:bf:99:76:7d:b1:e6:87:ea:b3:b1:9d:cf:86:b1:75:6b:ad:
66:37:73:a5:94:7f:d3:40:5f:f8:61:dc:da:d1:49:b0:eb:e0:
e7:b2:dc:98:e7:03:a4:3c:b7:ef:e9:60:5a:b5:c6:8d:4f:b2:
28:6d:c7:e4:1a:d3:53:1e:11:85:30:cf:c3:f0:b0:88:5b:21:
3f:9a:01:09:f7:b2:f9:80:cb:f4:64:6d:5c:a6:00:73:00:67:
7f:40:4a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:58 2025 by rpki-client