Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/646f7fa6-f3f5-3f96-a751-c8e1724ed49f.roa
File: 646f7fa6-f3f5-3f96-a751-c8e1724ed49f.roa (raw, json)
Hash identifier: dph/lH6ZY3e1I4Awme8FlGwem7YrBd+g4ZPkviS5hZ8=
Subject key identifier: 78:4B:1E:9B:05:71:F0:00:9A:52:99:FF:50:37:94:E2:5D:1A:A7:54
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695D19E87B7B27654C14E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/646f7fa6-f3f5-3f96-a751-c8e1724ed49f.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396577
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:d1:9e:87:b7:b2:76:54:c1:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=18d2f324-4c75-4882-9d0c-2b15c67d8b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:68:f5:54:4c:1c:49:01:64:6a:f2:02:e3:01:
7b:1c:99:d7:cd:ec:58:84:ef:9d:20:43:55:72:fc:
83:56:61:18:6a:e3:33:72:90:c6:38:b3:73:ea:86:
7e:80:47:45:3d:61:68:2e:d9:57:ef:c0:1d:b6:3a:
b7:7a:e9:b8:d9:2e:40:2f:31:17:00:8f:6d:02:98:
d1:17:2f:7c:f6:74:9b:fb:d9:4b:7c:af:de:b4:cd:
81:55:c1:9a:3f:fa:24:29:ba:98:8e:b9:1f:75:84:
fe:e4:97:c2:40:b2:40:83:fa:3d:e8:d9:7f:6e:07:
21:1d:04:95:4c:1b:74:03:d5:a9:a7:07:16:26:e3:
56:0d:a8:23:bc:ad:06:77:85:bc:29:ca:dd:db:93:
06:1c:d9:d8:e1:07:6a:d9:b7:d4:21:3c:38:5b:f6:
6f:f8:e6:e4:2e:03:de:5f:35:63:3f:e2:0a:04:cc:
69:7e:42:af:32:d7:cc:ab:cd:9f:bd:8d:91:d5:a7:
78:11:7b:31:b1:de:b7:a1:2d:b3:98:1b:08:cc:07:
a3:e2:88:d2:eb:38:35:6b:25:20:19:73:52:68:5e:
8e:7b:a9:49:25:a2:5f:9c:e6:0a:f6:00:7e:51:d1:
b8:e6:17:1c:a6:0c:bb:e7:59:bd:92:a2:5c:ec:81:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:1E:9B:05:71:F0:00:9A:52:99:FF:50:37:94:E2:5D:1A:A7:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/646f7fa6-f3f5-3f96-a751-c8e1724ed49f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:c9:3f:09:ec:fb:49:6d:55:29:32:b7:e3:de:6f:79:d3:07:
8c:67:5a:93:c2:17:97:29:9e:b3:ad:9c:4f:c4:2f:3b:a3:87:
54:82:66:1f:63:7d:e5:bb:cb:92:a9:69:9e:af:1a:d3:a4:24:
04:e9:a7:e8:8b:11:98:42:a7:36:8f:b5:a6:6e:6e:d9:86:1f:
e9:ef:0f:ac:ee:ea:51:07:61:c4:e9:1e:15:5a:ca:ad:71:63:
c2:3c:79:91:03:a9:8e:bb:d8:52:22:ce:92:27:84:cb:c1:e8:
78:e3:36:b0:6f:cb:c6:f8:77:2b:bd:58:e1:59:2f:35:7e:8b:
b3:82:c3:65:12:47:65:ec:a2:98:2d:1c:3b:bc:bf:98:02:6b:
3b:47:ef:a7:63:36:e9:e8:86:8b:ef:76:a2:97:e1:c2:92:2b:
8f:ed:c3:ee:68:81:9c:b8:5d:c4:db:32:09:e6:cc:57:01:43:
d7:4c:9c:d3:5e:ac:82:83:bc:67:a3:44:d0:24:9e:79:10:75:
48:ee:82:25:1f:c0:75:7d:d1:36:1f:02:33:86:d6:ad:93:87:
79:ad:e8:8a:17:f2:87:cb:91:e4:59:dc:0e:ce:01:e9:4a:6f:
b7:74:52:8b:3d:dd:97:80:37:be:93:68:88:d9:de:8c:7b:42:
b7:51:97:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:00:57 2025 by rpki-client