Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e5851d5-5df4-33c6-bb12-f1a8796423d7.roa
File: 3e5851d5-5df4-33c6-bb12-f1a8796423d7.roa (raw, json)
Hash identifier: QgM+1eWzoy6NNyfcBNLsOlqgTfBo9zKv5TxBB4gZ5IY=
Subject key identifier: F6:ED:F3:F7:91:7D:52:3C:41:44:CA:F8:C9:43:E0:0D:50:0A:DB:51
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CA9FFF303D55EFDF7380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e5851d5-5df4-33c6-bb12-f1a8796423d7.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396602
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ca:9f:ff:30:3d:55:ef:df:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=57172ba1-69ee-44ae-a0b1-a6131cb7913a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:fe:b9:7a:8e:62:f7:f5:de:c7:5b:5b:42:
2f:0e:94:86:a0:85:93:8f:3d:5e:f7:15:46:cd:78:
62:a7:72:fd:7b:07:88:8a:8b:e4:bc:22:08:1d:71:
42:9a:a3:23:95:ba:91:67:2f:0b:85:f0:69:85:59:
67:68:50:62:9e:8e:fb:61:37:94:88:07:fb:ac:91:
d8:2f:74:1f:f7:e8:07:bc:b3:b4:c8:be:ab:6d:e2:
0d:9b:d4:b5:af:8a:86:7e:88:eb:fe:2c:a9:8e:73:
a9:a3:6b:01:8f:43:3b:d1:79:a2:8e:45:8a:8e:61:
08:5e:80:3f:97:3b:3f:7d:16:31:d9:59:b9:72:34:
1e:fe:fd:e3:0f:58:9a:b5:e7:a0:8b:68:fa:24:8d:
e8:e0:7e:72:58:62:dd:b1:40:df:12:62:dd:15:35:
41:2b:95:e6:d0:47:9f:d1:86:90:59:2e:60:d1:f9:
31:43:f0:a7:9f:81:40:11:16:ef:f8:60:8e:30:ad:
35:c4:29:42:f8:2a:e0:ee:45:6e:f1:b3:46:c8:c5:
83:15:35:05:58:f5:ad:42:ee:1c:48:8f:35:7a:f5:
d5:d0:05:50:63:95:21:b4:4d:4f:2f:37:58:ac:a0:
3e:b8:db:bd:de:ec:c5:6c:9f:68:0b:26:19:3b:48:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:ED:F3:F7:91:7D:52:3C:41:44:CA:F8:C9:43:E0:0D:50:0A:DB:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e5851d5-5df4-33c6-bb12-f1a8796423d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:6c:b3:c2:74:74:02:4d:ce:91:23:21:a9:ce:ab:5f:5a:e0:
5f:a4:e1:9d:5f:6a:f7:a8:7f:9e:66:e8:b7:4c:23:17:ba:1a:
24:ed:c8:0c:0d:14:7d:0b:9f:eb:9c:9f:8c:56:43:24:bc:8f:
ee:0f:68:0b:43:ab:4c:fd:af:ad:0e:24:04:6f:f0:99:96:c8:
3a:6e:f3:98:d3:f5:be:37:1f:97:71:0d:05:f6:c9:b0:98:68:
a2:fa:bf:f5:4d:96:c2:32:d1:fb:b3:24:cb:8e:87:3c:80:23:
20:e5:7f:59:ba:93:5a:41:61:ed:96:54:9a:c7:f9:e4:17:12:
bc:75:49:36:6a:ff:a2:4e:6b:4e:ce:59:e9:1b:bc:c3:e0:70:
c6:8c:59:5e:be:52:0f:fc:91:29:fe:c2:99:5e:0d:6d:fb:cc:
28:99:3c:9a:36:51:2a:f1:90:41:93:11:ee:b3:9c:23:fc:1b:
fc:cc:a4:b5:82:5c:6c:c0:f4:29:8f:38:7f:51:00:42:99:c3:
e0:64:9b:62:59:e7:1e:96:30:f3:f5:b4:b8:7b:a3:59:86:ec:
ed:46:cc:45:89:16:12:1b:b2:a5:86:70:1f:ef:23:3a:0d:4c:
c9:7a:0b:8a:8e:0d:49:ac:dc:28:a8:2a:cc:d6:58:09:33:88:
a6:2d:c1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:29:04 2025 by rpki-client