Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b20b945-7abf-374b-ab1e-4ac8f0a9a527.roa
File: 5b20b945-7abf-374b-ab1e-4ac8f0a9a527.roa (raw, json)
Hash identifier: ZakI+9tbzy/CkLq5sv1IPzbt1Fo/rlmT6TQNM4fGKzA=
Subject key identifier: 72:DF:75:AA:FE:CA:A1:A1:B1:F2:D5:61:70:7F:FE:3C:7B:AF:D2:04
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CA8B664276F121A85E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b20b945-7abf-374b-ab1e-4ac8f0a9a527.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396605
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ca:8b:66:42:76:f1:21:a8:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=c76d74c9-660f-4147-be83-49196691e408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:88:9a:46:51:ac:6f:f2:01:fe:2d:84:3f:
b4:51:21:69:15:c9:87:9a:7a:fe:bd:c8:17:2b:98:
f8:6f:da:4d:22:e0:f8:34:22:79:d1:cf:97:7b:9f:
74:f1:5a:ad:98:b2:3d:d5:e5:6b:13:4f:b5:36:8b:
70:28:ac:56:5b:a6:bd:ba:94:28:49:e1:a8:59:fb:
7c:bd:d9:d7:20:09:d2:8b:5b:06:ba:65:1b:f9:a3:
3b:cc:02:a0:b3:89:0a:e6:d2:d7:7f:c4:8b:be:47:
ef:87:77:a8:bc:44:b4:1e:cb:ac:3a:f3:d1:fb:da:
66:db:70:20:9c:e6:58:6f:fe:9d:10:4e:cf:9d:ea:
ff:1b:c8:b9:3b:27:97:97:b7:8d:11:78:b3:92:a7:
9a:16:4e:c5:f8:d2:ff:6a:67:03:94:19:d6:e2:15:
c8:08:d6:72:a3:61:14:fb:f6:e8:d3:39:a0:2d:51:
b9:5f:98:2d:81:a2:be:88:7b:d4:bf:4c:fa:4b:76:
4e:81:c0:44:16:67:3b:ab:f0:75:a4:e0:ff:9c:ff:
00:0c:4f:af:39:bf:70:c7:60:28:e4:58:d5:57:29:
58:b9:aa:76:7d:f0:5b:e8:88:79:c9:c5:bf:eb:5a:
71:04:eb:cc:48:da:f3:fe:fd:d0:43:04:20:57:6e:
d4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DF:75:AA:FE:CA:A1:A1:B1:F2:D5:61:70:7F:FE:3C:7B:AF:D2:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b20b945-7abf-374b-ab1e-4ac8f0a9a527.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:5f:85:12:4f:fc:af:d9:0d:74:11:af:19:5c:64:8d:8d:49:
fe:5b:94:22:e3:6e:b8:d0:4c:d6:e0:d9:2a:46:2a:69:a1:25:
5d:18:a5:f8:6a:db:f4:e7:d1:cb:06:d3:ae:9d:e0:a5:ef:1c:
aa:a8:ac:34:0e:81:2f:f1:b2:c2:15:30:8d:6c:3b:66:84:60:
14:cd:49:3a:9e:9d:45:f5:70:1c:43:8a:28:68:19:9f:ed:57:
4d:be:f2:23:10:6e:bf:3a:d2:8f:4a:e8:3d:4a:1a:c2:3e:aa:
25:cd:2c:b3:b8:d4:56:1f:df:9d:08:86:77:a8:85:95:e3:28:
71:ff:93:91:7c:f9:18:52:02:d3:d4:40:03:4d:ea:11:3d:29:
a3:28:42:11:c0:55:5e:9b:47:0d:30:3c:c5:b9:c2:e7:f7:8b:
4c:b4:32:f9:6d:45:01:e7:db:e6:b0:78:84:fd:b0:28:0a:5d:
b4:9d:13:d9:ad:e5:51:28:8a:ea:89:85:8d:9f:67:27:99:3d:
ad:71:6f:aa:72:61:17:c8:2a:0d:da:08:c4:db:09:b9:65:b3:
75:aa:75:13:5a:8b:be:43:28:42:8c:d0:47:bc:3f:af:fb:05:
31:3f:32:c3:40:84:98:f4:ad:81:be:12:ec:70:ec:92:90:f2:
0c:6d:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:19 2025 by rpki-client