Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0ddbd76-e6aa-396b-8b56-f3ac0883a722.roa
File: d0ddbd76-e6aa-396b-8b56-f3ac0883a722.roa (raw, json)
Hash identifier: OcJf9uoAWRbxjIciUoWF56RpS2MfDQLmCuaZpbGQy7g=
Subject key identifier: B7:00:9D:F0:97:CC:28:D7:A3:A6:FC:E0:72:78:FC:D5:C8:DB:B1:EB
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584953C451615FA46C5FC9C8C600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0ddbd76-e6aa-396b-8b56-f3ac0883a722.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 396589
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:51:61:5f:a4:6c:5f:c9:c8:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=d8f8886d-35f8-4fa5-a14e-543eea41e984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7f:89:b9:ee:12:82:37:9c:ed:f1:6f:aa:d3:
48:2c:38:dc:25:a0:ce:b9:43:70:46:3e:1d:42:1f:
5b:be:01:b6:1d:91:54:4a:c7:72:92:34:0a:31:5c:
f8:3d:cd:78:ea:c3:a6:7d:39:64:7b:d1:70:eb:f1:
96:9e:e2:4c:58:d7:00:8f:67:c5:fa:db:4e:8d:6f:
da:77:f0:bb:46:63:90:ba:d0:12:f0:35:97:22:eb:
d5:20:6b:43:0f:83:25:f1:05:11:5d:d5:3e:b4:f6:
5d:6b:48:fa:18:28:84:7a:c8:3f:49:30:e3:e4:89:
f0:87:a4:84:ec:2c:d0:fb:fd:dd:96:98:6c:87:02:
9e:d4:ce:a6:ed:3a:5a:1b:96:0b:a3:f3:7c:6d:69:
6f:1f:d0:25:7f:20:18:83:18:80:65:8f:05:ee:ad:
2e:d9:3e:fd:c7:7f:94:8f:f6:da:3c:80:4f:01:1a:
c5:3b:f0:77:0c:c8:23:60:c5:8f:26:61:b1:21:c4:
95:f1:a6:08:66:74:8c:b2:75:19:af:f5:b4:64:ec:
c3:0d:6a:69:2a:85:3b:e3:f4:8e:f9:e5:1a:88:30:
ca:c3:e2:4d:95:88:a7:ca:84:5e:94:b9:06:44:cc:
4b:da:79:c7:9b:70:ac:b5:46:31:5b:e4:4f:09:5b:
e0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:00:9D:F0:97:CC:28:D7:A3:A6:FC:E0:72:78:FC:D5:C8:DB:B1:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0ddbd76-e6aa-396b-8b56-f3ac0883a722.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:a0:b9:7b:bc:71:01:1d:25:91:cd:91:22:4c:8d:df:1a:78:
04:52:7f:f2:1a:f9:ca:09:b5:1a:6f:96:8e:09:27:a1:6d:1a:
0e:ef:fa:aa:6e:97:f1:1d:f7:7e:a5:6c:e0:98:53:06:da:e2:
d9:3c:c7:94:db:ee:fc:e8:94:bd:c5:cd:59:2e:f4:00:25:d8:
05:f0:34:46:75:d1:f8:73:80:0b:15:a9:d3:25:4a:df:d5:b3:
bf:68:5b:7c:4d:cf:a2:19:21:ea:19:a1:86:b8:b6:76:de:e7:
d0:5f:1c:18:d5:d5:7d:bb:b3:d1:7a:8a:e5:04:84:09:b9:4f:
c3:72:67:fe:9c:1f:a5:fd:7f:68:45:3c:ff:88:f5:35:9e:03:
6a:78:1e:0a:d6:31:1c:bf:9f:84:2c:b4:d3:fe:65:0e:6f:9c:
a4:84:8e:8f:b0:a9:bc:13:b9:1a:11:4e:76:79:34:28:f5:f4:
6c:d6:1f:28:fb:2e:f6:c1:48:3f:15:96:22:99:07:cd:7c:e9:
76:32:e3:c4:14:b6:54:c2:e9:09:e0:90:2f:80:a4:21:c6:4b:
a3:d9:04:29:7e:42:87:90:99:b0:c1:da:e9:d5:ec:66:fb:55:
fc:eb:5d:88:1b:e7:87:1e:4f:fe:78:76:8c:19:ff:ef:bc:79:
95:06:0b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:29 2025 by rpki-client