Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f44b7e37-d148-373b-9e27-ef3288bb1317.roa
File: f44b7e37-d148-373b-9e27-ef3288bb1317.roa (raw, json)
Hash identifier: Vv0US35yd4RQ/7z3F4hjFCbP6Wi5Dq8EV50aF8E5oaA=
Subject key identifier: A7:74:ED:41:3D:FA:EC:1E:9B:16:09:82:0E:0B:84:3A:7F:58:63:F2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584953C4523BD78833183E5C1CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f44b7e37-d148-373b-9e27-ef3288bb1317.roa
Signing time: Thu 27 Mar 2025 13:00:52 +0000
ROA not before: Thu 27 Mar 2025 13:00:52 +0000
ROA not after: Wed 25 Jun 2025 13:00:52 +0000
asID: 396555
IP address blocks: 192.153.247.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:53:c4:52:3b:d7:88:33:18:3e:5c:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 27 13:00:52 2025 GMT
Not After : Jun 25 13:00:52 2025 GMT
Subject: CN=5c83df76-14c5-42de-a402-777b4335db25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:f9:29:1a:b4:01:a3:bb:74:bd:6d:f2:d3:
8a:99:8f:b5:66:f2:06:db:ba:6f:5e:19:21:41:34:
bd:13:fa:10:61:1c:68:47:8a:5a:5f:0a:6b:e8:c2:
11:f0:d7:06:3c:d4:bf:08:4b:fe:4f:ce:51:fe:a7:
38:7e:4f:6d:95:d1:8a:a8:a5:eb:d0:37:8b:c4:bd:
e0:c5:fb:49:28:a6:04:7f:4b:8e:dc:aa:78:2d:20:
b3:35:a4:77:f7:94:13:56:85:6b:ef:12:89:8d:3c:
6f:d8:25:b1:68:ba:d8:0b:1c:d0:f8:69:42:25:60:
19:f0:6a:7e:d0:2e:e7:8a:a9:06:86:53:52:50:27:
00:c5:f3:27:47:1c:3d:c1:8f:37:4b:33:a0:90:38:
27:70:bd:51:0c:6c:ca:04:87:46:ed:44:b9:89:4d:
b8:9b:68:fb:73:66:ca:f8:bc:75:cb:17:26:80:c1:
82:3a:5c:cf:7b:cd:d9:f1:7e:ae:7d:8e:8f:c9:b0:
97:48:29:69:05:41:eb:fa:5f:61:d2:3d:24:73:33:
1a:90:81:14:ad:42:37:69:26:57:fe:cf:30:c8:1a:
4f:e2:34:f4:31:08:66:49:c9:ab:a5:a0:8c:f4:3d:
d9:a6:a1:85:5e:0f:6c:50:96:fb:0a:7d:ee:af:69:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:74:ED:41:3D:FA:EC:1E:9B:16:09:82:0E:0B:84:3A:7F:58:63:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f44b7e37-d148-373b-9e27-ef3288bb1317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.153.247.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:11:4f:e0:8f:f7:b7:07:da:79:d2:ef:f2:13:e0:97:b7:4b:
5e:f2:df:3f:95:17:14:08:fc:cd:0c:4d:8e:59:83:3e:70:0a:
1d:0d:a8:4a:d2:8b:d5:12:c1:59:3e:36:e7:92:87:22:61:52:
b6:b9:41:a5:e6:1c:a4:33:58:69:2a:29:1e:33:95:ac:45:58:
d4:04:69:ca:22:99:22:15:d9:1c:66:d0:05:ed:74:d6:46:94:
48:3b:93:3d:27:6e:b5:5d:c3:a5:f6:ea:7f:ba:08:ab:9b:09:
15:e4:ee:cb:dc:15:4d:b2:f1:99:2a:b0:d4:62:2c:b2:dd:73:
a6:4f:78:37:60:44:fb:b3:a5:23:da:b9:74:56:81:59:50:88:
bf:67:1b:46:a2:ef:e8:ca:4c:22:8e:83:36:b1:e9:af:ef:dc:
c6:54:b9:96:97:5e:6f:2b:f0:03:bd:f2:85:86:89:6b:cc:8f:
db:48:03:66:fb:28:13:eb:86:62:46:54:8c:3c:92:de:23:be:
f9:16:81:99:ab:a9:f5:ae:b1:c3:28:42:29:9b:37:7a:a5:cb:
1b:63:7f:5a:57:67:a3:33:75:94:d1:af:05:15:52:78:8f:9a:
d6:16:fa:83:49:bf:af:81:23:07:ff:1a:3d:61:f4:95:82:81:
75:d9:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:12:54 2025 by rpki-client