Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e795966-2cb3-35a4-ae4f-954a493387a6.roa
File: 9e795966-2cb3-35a4-ae4f-954a493387a6.roa (raw, json)
Hash identifier: X2A25Gjpx6HsmJUiR6Kl/5iV5FP+mip4LTTQwd/3XAA=
Subject key identifier: 3F:4F:3C:56:00:92:9C:0C:AC:CA:F9:ED:F1:DD:C5:F8:90:24:10:F2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CD52128103729C5D3700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e795966-2cb3-35a4-ae4f-954a493387a6.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 36623
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cd:52:12:81:03:72:9c:5d:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=31201f32-ffe2-4346-ba32-66b5ec63bb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:ad:85:fc:41:18:3b:86:57:10:42:8b:e4:
3e:7a:84:7a:39:61:9b:4c:c7:c4:bd:d3:cc:a3:e8:
78:87:7b:b2:a9:6e:0d:7c:65:07:45:33:4b:93:7c:
cb:6e:f1:6c:0a:8a:3b:8b:9f:64:25:e0:8c:43:ca:
9c:23:f6:90:d1:ef:17:cf:d6:ef:c6:11:d3:1e:5c:
c5:03:33:e3:e1:09:ef:ad:41:e8:03:57:90:76:6a:
2f:70:bd:38:0f:01:7c:f5:93:0d:7e:46:18:cb:3c:
1b:4a:3f:b8:90:25:ed:19:0b:37:b6:d9:e2:6a:19:
29:24:31:aa:f9:6a:a8:54:86:f3:c8:d5:6f:d0:61:
30:d3:0c:b2:75:39:c3:1c:e8:2a:dc:bf:6f:79:af:
e0:d4:a1:5f:60:c0:16:10:8b:fd:d7:42:15:08:52:
b8:e9:9b:54:2d:fb:cc:2c:e1:ec:38:9a:9b:e1:83:
bf:ce:e5:df:c5:d6:f5:19:67:8c:7a:f5:8e:b2:fd:
12:47:65:75:05:31:b8:9d:e5:e4:c0:c9:ae:2c:5d:
b4:0c:5d:3f:a5:4d:96:cc:a4:e7:31:b0:f1:e0:16:
fb:f2:31:a2:b9:2e:c1:1e:6b:41:4a:0c:e1:c3:72:
a2:df:aa:ec:b8:e6:ba:a9:a7:8c:7c:91:de:92:47:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4F:3C:56:00:92:9C:0C:AC:CA:F9:ED:F1:DD:C5:F8:90:24:10:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e795966-2cb3-35a4-ae4f-954a493387a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:a6:db:06:e5:83:b2:c5:d8:7c:00:18:54:f5:14:16:3b:bc:
72:9c:4b:36:71:db:ee:d2:3d:51:72:79:ac:ad:98:ba:3c:d8:
57:63:78:05:7a:b9:07:8a:0d:fe:50:fd:68:88:67:3d:7e:0a:
91:1b:87:24:c5:72:18:f1:4d:d5:a9:6d:90:43:b8:66:54:f2:
88:7b:c3:14:30:ee:36:03:5d:5b:1d:b0:11:ab:a0:1d:70:78:
fd:04:8c:fb:74:cf:28:83:42:2c:f3:cc:6d:06:0d:1f:e1:e1:
00:54:94:02:fb:cc:8f:8d:8b:3d:d6:90:ef:7d:d1:47:88:5a:
5f:5c:70:e8:3b:8f:4f:4a:c6:58:f0:9f:71:f4:43:b1:51:95:
8d:35:c1:b3:08:3c:d1:a4:28:86:4a:9b:3c:b1:cc:8f:4a:33:
58:b5:50:b7:7e:79:f2:33:30:16:b3:43:d8:c6:0c:db:69:e1:
b6:25:ee:f8:cb:d4:65:95:e1:59:cd:c0:0a:b9:c2:ae:f3:b9:
9c:f4:b0:5f:21:f2:00:7c:51:29:78:0a:4b:40:a2:b8:a5:67:
c3:e3:aa:fb:dc:61:5d:c2:1e:f3:ea:98:50:5a:80:4d:3a:29:
88:51:3d:c3:7a:2b:68:57:6d:b9:98:ad:00:18:78:3f:b9:18:
95:fe:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:51:13 2025 by rpki-client