Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1cedd8-2178-3730-9f44-b365e00dadb2.roa
File: 3a1cedd8-2178-3730-9f44-b365e00dadb2.roa (raw, json)
Hash identifier: zR8eN52RZ6V9yHavXhd6c/ochtMMdF+nsB/EDLLj3g8=
Subject key identifier: C3:29:AA:E5:28:AD:21:C6:62:A5:CB:1B:BB:CD:AC:17:63:63:53:23
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CC13DB520A75F8607400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1cedd8-2178-3730-9f44-b365e00dadb2.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396579
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cc:13:db:52:0a:75:f8:60:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=00e8429c-beb5-4017-819e-20dc2b42f42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:5e:38:fc:93:3b:92:26:87:dc:ac:10:0c:
11:1e:fc:6b:ef:4f:52:d6:a2:57:98:c1:48:bd:da:
33:7c:86:a0:fd:30:70:b1:9a:d1:0b:4a:9d:b8:21:
59:a4:a5:d1:04:8c:24:ae:14:6c:f4:bf:c5:db:36:
3b:8b:09:2d:4b:d7:66:6f:01:b4:00:42:c5:9f:3d:
10:ed:ac:d1:7f:b2:47:88:91:59:0c:ac:eb:56:ff:
3e:92:6e:ad:78:27:74:86:eb:8b:8e:7d:1b:04:24:
c4:f0:55:06:57:2e:6f:b2:a0:4d:fe:e2:90:7a:3f:
58:40:c1:f4:f7:74:41:7c:a3:30:c7:2f:bf:92:9b:
d6:ee:39:7d:38:52:55:1d:74:32:7a:0e:89:7c:86:
14:f5:80:d0:6c:58:aa:3b:e8:9c:d6:01:85:fe:ab:
fd:2c:46:a2:19:9d:83:d2:97:fa:b9:0b:58:35:a3:
f7:0d:ea:92:75:fc:83:5c:12:1a:6b:96:18:55:68:
2b:ce:d7:c4:76:c9:fb:31:81:6b:dc:27:75:37:00:
55:02:75:56:19:d9:87:42:c7:9a:1a:80:9d:8c:86:
63:ea:7d:2e:49:ae:b7:14:d4:fb:cb:f7:48:b7:64:
79:fa:1b:dd:24:8a:47:ea:9b:e0:a1:c7:6a:07:e8:
a5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:29:AA:E5:28:AD:21:C6:62:A5:CB:1B:BB:CD:AC:17:63:63:53:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1cedd8-2178-3730-9f44-b365e00dadb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:7d:32:5b:7f:89:79:ee:80:13:dd:83:15:7d:52:38:08:e4:
1c:fe:a7:e0:22:9d:a9:35:d0:5b:9a:6f:9c:e1:e2:9d:1b:bf:
b4:06:ab:01:b7:7c:a8:ec:29:72:31:79:2b:d2:b3:24:30:e9:
5f:49:a5:d0:f6:7b:6e:88:f2:d5:13:9f:ea:93:ba:26:70:a3:
87:89:ce:a9:68:58:d9:e4:b3:07:14:80:e3:b4:bb:03:b2:9e:
0a:23:e4:55:82:67:13:36:8e:bb:2d:17:f5:2a:1f:14:db:71:
7d:7e:77:b8:1d:9b:4f:13:5b:11:4f:97:b5:e8:08:94:4d:12:
81:ef:58:fe:5d:99:02:af:6f:bc:8b:7a:60:c6:0f:ab:2e:71:
a8:4e:70:c0:23:98:a2:0c:03:88:7e:37:ea:a0:50:2b:6f:3e:
29:03:77:5a:6f:b1:a8:13:c1:5b:57:fd:d3:eb:78:66:b1:7b:
dd:63:2a:29:79:af:62:8a:ab:b9:8c:fa:06:44:d6:0d:50:70:
64:c5:a9:95:c7:68:c8:65:03:3a:48:00:b9:2f:2a:1f:80:11:
94:3e:2a:78:7b:7a:33:55:a3:60:80:7f:79:89:d4:00:02:b6:
51:f1:13:2a:e7:79:29:02:05:2f:ce:37:0a:de:00:63:c6:01:
27:3e:37:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:53:15 2025 by rpki-client