Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a361cf4c-25fa-3104-8fa2-8dd03498804b.roa
File: a361cf4c-25fa-3104-8fa2-8dd03498804b.roa (raw, json)
Hash identifier: NJuxe5MEph0YjcV9aDEPJA0BRTfqXiUrjifmHuJK+7k=
Subject key identifier: B0:A2:EB:1D:88:28:E1:54:58:BB:05:FC:68:8D:92:4C:8E:EB:16:40
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695D0A86791A8731701F7C8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a361cf4c-25fa-3104-8fa2-8dd03498804b.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 397201
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:d0:a8:67:91:a8:73:17:01:f7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=de4fb78a-e789-49cc-b685-f9a3e1d747bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:57:2f:d1:d2:02:d8:64:cb:49:1f:72:c9:41:
4a:55:bb:44:8e:af:f2:24:ac:8f:b1:a6:22:db:f1:
9c:df:9b:3c:02:87:d5:2d:31:dd:a9:52:12:48:99:
7b:99:ea:e4:a5:b7:10:67:d3:4f:35:7b:3f:92:ac:
95:c3:fc:40:a0:d0:ce:e6:e2:2e:5a:41:64:ef:7f:
ea:d9:49:5a:3f:ee:dc:25:34:11:ca:6c:27:a0:a6:
6b:04:59:9b:d8:01:5e:7b:f1:b3:4b:1f:ac:42:92:
c7:cb:34:ea:1c:dc:b9:ba:a7:9f:15:ae:69:69:b3:
8c:0c:dd:a0:da:ac:58:b3:0e:c8:69:44:f3:ee:1f:
be:0b:4e:c8:c8:bd:3d:d2:da:67:52:d3:6c:7c:57:
5d:35:b7:41:f1:a3:60:0b:a3:a5:f8:82:e2:68:54:
62:f4:7a:1d:04:82:c8:1e:a5:0b:77:f5:61:40:5b:
d5:c4:ce:c5:0a:49:10:78:5e:64:3a:82:cd:f6:b4:
0b:1e:b6:33:ab:2c:6c:0f:7d:0d:29:0e:bc:ad:55:
95:91:01:d5:01:16:d8:37:d5:27:41:00:53:70:e8:
40:e2:70:af:9d:57:2d:cf:70:b4:00:81:b4:ee:41:
31:2b:e6:08:e4:71:25:60:41:7c:33:10:ad:ba:91:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A2:EB:1D:88:28:E1:54:58:BB:05:FC:68:8D:92:4C:8E:EB:16:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a361cf4c-25fa-3104-8fa2-8dd03498804b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:fa:96:5b:bd:99:b7:95:0a:93:20:2f:0f:b6:41:87:35:bd:
ea:0a:47:1e:44:6f:74:9a:74:09:d1:27:96:0c:b5:c7:6c:53:
08:ab:f6:72:9f:b2:e7:41:3f:39:fd:fb:07:5f:5c:e6:6a:db:
32:58:53:d7:10:3f:4a:d9:ce:72:b5:75:fc:41:40:41:c1:7d:
7e:26:69:35:f1:68:49:fe:96:61:e7:ba:41:ea:a1:09:1b:39:
0b:b7:e4:62:8d:60:39:3e:17:56:17:1c:ed:90:bf:14:06:37:
95:45:79:71:7a:52:13:32:29:b5:76:8b:4c:6a:1e:a5:aa:53:
33:4c:3f:d9:1e:1d:8a:25:10:bd:71:0e:61:6e:1d:94:64:18:
eb:18:e9:c8:11:3c:3d:9a:6a:d8:f2:6d:03:4e:54:72:d1:6a:
d8:7b:e7:6d:7b:16:bc:be:71:90:98:36:47:d5:aa:c4:9a:45:
f3:fa:49:12:ee:8f:39:30:40:15:e4:2c:72:53:52:e1:fa:1d:
9e:4f:e5:90:a4:49:15:91:11:a2:a8:71:5c:65:dd:fa:31:4f:
1b:47:a0:00:5b:96:20:eb:04:49:dd:b4:83:15:63:18:43:c5:
13:42:3a:72:0a:f4:9e:f6:a6:2f:52:f0:93:f5:7f:38:b1:b9:
a4:56:32:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:12:35 2025 by rpki-client