Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23885c03-aace-3b48-a92a-a3768e582bdd.roa
File: 23885c03-aace-3b48-a92a-a3768e582bdd.roa (raw, json)
Hash identifier: 8F8PZcX6Ka6J9DOfgVhnijBIsHi5d9WY07HfGesS3uE=
Subject key identifier: 3F:80:67:D5:35:D2:F3:A1:B2:35:50:0B:4B:BA:2C:D5:79:50:FC:47
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695D0B8ACDE7AD369CEEA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23885c03-aace-3b48-a92a-a3768e582bdd.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 36620
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:d0:b8:ac:de:7a:d3:69:ce:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=f1ddef1c-4fb3-439f-ad21-8f1f30f91427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:79:eb:47:75:6b:89:f1:f5:09:46:56:38:
76:c5:08:11:cb:4f:93:55:44:2a:f8:e3:74:0e:20:
2b:4e:c7:87:ab:be:57:44:f0:43:e5:06:d2:4a:94:
1e:d5:96:01:7a:b1:61:c0:ae:16:2b:b4:86:96:cc:
e8:82:7e:be:02:b7:69:0b:34:2f:30:e1:a5:18:86:
cd:dd:02:dc:db:75:67:c0:56:20:b1:38:c0:1e:1c:
f5:8a:9e:dd:25:23:cf:8a:20:76:c0:8f:3f:73:dc:
22:54:be:47:12:5a:4e:37:74:56:35:46:4e:c0:bf:
b6:aa:a0:4d:49:64:d9:a9:47:09:cb:36:53:1f:38:
4c:e0:12:4a:27:c5:8d:b0:d6:e1:2d:47:04:ca:60:
1a:65:b9:ca:14:f5:4d:95:f0:2e:78:b0:ed:25:d6:
50:24:6f:65:7a:37:3e:34:07:bc:eb:b9:f3:82:ad:
ee:e1:7e:58:85:da:6f:89:37:75:f6:e9:2f:33:db:
2a:0a:74:53:80:ef:5b:71:5c:96:e7:1e:2d:d2:eb:
ca:42:2c:9b:8a:47:28:e5:ec:dc:64:53:e9:d2:6b:
87:86:9b:3c:ea:38:c0:98:79:fa:a2:16:c2:4d:33:
71:0b:d2:d5:e9:9b:4f:2b:58:53:7e:9d:c8:e7:d1:
9a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:80:67:D5:35:D2:F3:A1:B2:35:50:0B:4B:BA:2C:D5:79:50:FC:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23885c03-aace-3b48-a92a-a3768e582bdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:b3:94:8c:7c:5e:bd:92:13:d5:6b:53:50:ab:f6:3c:0e:82:
ce:89:30:a0:36:dd:2c:74:64:df:b4:e1:d2:fb:46:2d:0d:96:
60:d2:b0:c2:dc:9e:77:10:3b:25:44:c7:92:bc:5a:fc:b4:e4:
c6:15:a5:32:92:e5:d9:90:45:b7:59:c4:16:c8:2c:46:d3:a6:
71:6e:ed:d6:6c:79:2e:4d:3c:30:6c:2a:ff:db:3f:c5:31:87:
10:87:36:c0:d5:9d:83:e7:52:a5:d2:2e:a3:d0:ec:a4:67:c1:
2a:4f:2e:e8:bc:80:41:96:86:8f:d4:ed:60:3d:ce:3f:ab:cf:
7a:38:a9:5b:6c:c5:ef:74:35:f1:42:26:4f:b8:83:a7:4b:32:
be:e4:a8:0e:fd:56:bd:5d:14:89:ce:47:52:8b:1e:56:b6:96:
ba:c5:92:ee:b0:f7:75:d8:0a:04:9f:87:37:37:34:30:29:bb:
00:52:56:5c:4c:9f:3b:5a:56:f6:32:b6:0a:83:58:39:f8:02:
72:d9:9d:8c:97:ce:42:6b:d8:2d:5a:8b:12:1a:6e:9b:80:47:
ec:61:86:e1:c9:db:8a:43:ec:2f:e5:3c:a5:7c:76:66:db:f3:
e6:bf:d7:62:99:41:a8:72:08:22:33:8f:bd:f9:08:9b:ef:81:
4a:04:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:18:15 2025 by rpki-client