Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb2d54eb-67fe-3920-8c5c-80c9b3f21466.roa
File: bb2d54eb-67fe-3920-8c5c-80c9b3f21466.roa (raw, json)
Hash identifier: DdvSlD7FTOE6oKvs70P+791sditAfbjJeo38Bo5vGEU=
Subject key identifier: 13:2F:61:A0:43:CB:4D:28:B5:7E:DB:01:CC:61:D5:B7:12:60:AA:FA
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CAB9FFAB9DA935E62180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb2d54eb-67fe-3920-8c5c-80c9b3f21466.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396596
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ca:b9:ff:ab:9d:a9:35:e6:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=c9ec099c-7442-4251-88f1-1645c06eff70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:36:ed:1a:45:5f:11:bc:43:45:5d:ac:51:
2b:0f:1a:ce:cc:47:88:3c:88:f3:2c:15:d9:1a:fd:
ab:10:9e:03:e4:c8:28:22:b0:56:45:46:c4:b2:24:
93:42:4a:53:15:7c:38:1a:79:84:8e:b1:00:61:87:
ba:ab:54:50:91:40:fe:cb:38:82:52:95:51:56:2c:
aa:b9:d8:78:53:a3:29:11:92:bd:65:d6:07:d2:3c:
f7:1f:8e:7d:3f:93:4a:fb:7b:d9:b8:98:09:06:6d:
22:bc:76:03:88:56:7f:81:4a:70:95:3b:2f:59:b2:
a6:07:25:81:fd:ed:ed:4f:b1:40:c4:bf:ca:39:91:
c4:bc:b5:a0:8f:cd:b3:dd:ef:e8:9c:1d:9a:5a:0c:
18:bc:73:e7:b1:bd:48:93:d1:3a:1d:72:c6:1d:eb:
8f:69:15:3c:e0:53:8c:ac:84:0b:a2:77:5b:7c:36:
bd:9e:e6:e1:33:c6:e0:a9:2e:bd:86:69:9c:97:9d:
fb:61:28:e2:3c:81:0c:19:d6:a9:8f:e6:7f:21:3e:
bb:fc:a0:9c:26:a2:c5:74:17:49:35:67:a2:52:57:
33:78:e4:b7:51:85:9c:b5:08:05:e2:ba:7d:e5:42:
8a:e2:e3:75:34:79:74:2a:1a:b7:96:15:fa:7a:60:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2F:61:A0:43:CB:4D:28:B5:7E:DB:01:CC:61:D5:B7:12:60:AA:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb2d54eb-67fe-3920-8c5c-80c9b3f21466.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:d2:43:9a:17:7c:6f:9c:6d:3d:11:f1:34:d9:03:1e:32:0b:
42:fb:3d:af:49:31:ad:da:91:ab:33:c8:23:ea:6d:d2:38:95:
52:43:e8:c9:fd:67:d3:7e:6b:c9:bc:28:72:c8:b5:16:96:46:
58:6a:61:0c:27:46:a8:c9:ef:8c:69:8f:53:21:fc:a7:a2:86:
e9:e3:2e:e4:be:e3:80:fd:84:07:db:cf:94:ad:6c:1d:a7:0d:
8f:bf:b5:86:7a:72:fb:d9:17:4d:8a:8f:cf:36:e0:77:ad:8f:
7d:79:6e:0c:30:73:0b:56:d1:01:76:36:a1:05:82:e2:f1:24:
3d:18:d1:c7:1c:9a:7f:b3:d1:b6:c4:40:e5:fd:73:fb:4d:be:
70:1f:cc:fb:c5:b3:fd:fd:0e:d0:44:d5:74:5e:42:09:9e:25:
fb:7d:27:52:bf:89:2c:48:f7:e4:6a:31:df:64:5a:d4:6e:b0:
a5:bf:1c:cb:fe:a9:65:0a:79:33:ae:ba:fd:05:b1:aa:cc:f4:
ca:9a:86:8a:ca:d9:3a:c3:53:9e:0a:bd:2e:d3:e0:bf:aa:4c:
b3:3a:c2:a3:c6:30:f3:71:0c:1e:4c:ba:b3:72:bb:89:b0:68:
21:b9:99:fd:54:b9:e1:c4:58:53:97:cf:0d:50:54:1f:a7:47:
1e:57:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:03:15 2025 by rpki-client