Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09ff588f-f096-385d-b832-5703ce62f475.roa
File: 09ff588f-f096-385d-b832-5703ce62f475.roa (raw, json)
Hash identifier: j4XlJG2030eCKf0CEuswnKGXorZDc4rie4g4huJiBNE=
Subject key identifier: 7E:58:63:DE:D3:8D:47:C6:16:17:DF:02:FD:93:AA:10:40:1D:4F:D1
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695D08A9841D42DC8CEDD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09ff588f-f096-385d-b832-5703ce62f475.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396585
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:d0:8a:98:41:d4:2d:c8:ce:dd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=8223fb45-2fee-49f4-8495-ab89a4ad7109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1f:5f:f3:46:de:bc:52:d6:70:76:a6:80:3c:
6c:70:ad:9f:f1:9f:06:17:65:f1:7f:19:ac:c5:6a:
a7:f1:f8:df:f1:c5:25:b3:6f:08:7e:a1:bb:75:28:
83:45:01:68:23:50:cd:c6:71:b3:fe:a6:0c:d8:33:
49:14:ec:7d:7a:ef:cb:f1:b2:8c:a2:21:6e:6f:d7:
28:e7:ae:f0:80:6e:f7:9e:55:a0:6c:b2:71:85:39:
a3:1a:54:19:53:58:3e:42:8c:de:21:59:b5:04:85:
fb:5b:49:c6:4d:56:79:f8:fb:f8:85:40:b5:5f:4b:
7e:43:23:a0:d4:09:fe:53:01:7b:65:d4:28:97:52:
70:a3:a0:ca:40:d7:62:fd:f2:ae:8a:1d:a8:8b:ca:
af:26:be:9c:bd:46:60:7f:33:e7:cc:b0:01:af:fd:
98:3d:32:54:bc:d9:b5:e2:a6:90:e2:3f:62:e4:31:
b8:e2:87:d1:f6:4f:cd:cc:19:0b:79:52:db:05:dc:
db:9a:66:b9:1f:85:39:56:05:7e:e1:32:4e:91:80:
ad:54:79:c4:1a:1f:f9:69:d1:c4:71:b0:c4:47:34:
52:03:6f:b2:cb:2e:de:78:c0:3f:50:8c:85:54:54:
4e:4a:13:a3:16:cf:65:13:f5:e1:3e:18:db:a9:cf:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:58:63:DE:D3:8D:47:C6:16:17:DF:02:FD:93:AA:10:40:1D:4F:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09ff588f-f096-385d-b832-5703ce62f475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:80:99:1f:44:1e:76:3c:d7:40:f6:0a:44:e6:75:7f:c7:39:
dc:c7:f0:3a:8c:a2:cc:d0:85:61:95:bd:12:e5:bb:6a:e4:3d:
0f:83:ed:ff:83:7d:f4:95:c1:fd:19:08:f9:09:b2:da:8c:f3:
ac:7e:2b:b1:a7:f7:5f:36:e9:4f:ff:4e:3e:64:d8:83:b7:e4:
2b:8b:78:85:89:97:d1:12:53:24:f3:ba:4f:10:90:8f:81:68:
d9:e2:f3:11:2c:c2:aa:15:b9:68:5c:c4:44:19:c1:d4:d0:60:
0e:8f:50:1c:aa:a2:32:2f:74:3e:54:e6:39:de:23:f3:59:13:
6d:1f:c5:4c:f2:6c:74:fb:21:24:85:39:2c:b6:0e:5a:5c:33:
6c:5e:2b:66:db:03:26:b2:7c:bd:df:0d:6c:f0:1d:e5:27:8f:
37:09:39:30:ec:54:f1:d7:89:b6:7d:cf:47:c1:e9:ca:94:4c:
81:7e:f7:f2:ce:24:73:0d:0d:5f:bc:f7:b5:ca:20:95:b0:02:
56:55:94:f4:5b:d0:55:73:a7:25:17:ba:ed:7a:07:c2:0f:a6:
fe:b2:b0:45:13:b0:c4:20:22:93:f3:b1:88:c9:27:fb:e4:8b:
ed:1d:e1:b8:63:85:0c:49:08:67:06:69:9c:69:0e:43:15:fe:
07:1d:6f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:51 2025 by rpki-client