Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd5a3a0a-9cfd-3b3d-aed2-8c917571cd3d.roa
File: bd5a3a0a-9cfd-3b3d-aed2-8c917571cd3d.roa (raw, json)
Hash identifier: luOfPKHLKz0EuiTVC+F+S6JAsFyWzYd2vZ3PeCnK9QI=
Subject key identifier: EF:8A:03:82:B2:3F:B9:57:1F:D4:B9:B8:CD:E4:3E:47:97:CB:F6:94
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695D1AC192E94B7D48A9440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd5a3a0a-9cfd-3b3d-aed2-8c917571cd3d.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396574
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:d1:ac:19:2e:94:b7:d4:8a:94:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=b281516f-8449-47c3-a1b9-ff17a76f91ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:f7:9f:9f:b9:27:48:a2:69:8a:1c:43:33:
8d:7c:2b:79:be:08:d2:0d:a0:ec:ad:b1:27:7e:0d:
7f:e0:81:2e:a9:2f:72:f0:10:93:4a:68:a7:8a:98:
20:c3:26:63:33:11:d7:ab:cf:2d:5a:2c:cb:f9:0c:
f8:6b:f0:cc:8d:bf:1a:88:2f:90:48:e2:d8:c2:fc:
76:81:8f:d8:09:b3:e8:bb:05:51:45:74:dc:d0:73:
77:65:de:dc:44:f0:a2:70:0f:58:55:74:6c:99:20:
d3:28:5e:82:ef:96:c4:7c:d8:e5:b7:5e:c7:db:74:
aa:db:49:cd:c2:17:75:bf:1f:c0:62:01:c2:36:7f:
04:12:0b:6b:4e:c6:6a:5b:07:ae:33:bc:9d:cc:c4:
6e:43:84:49:6a:9b:eb:0e:68:62:b0:ca:f4:a2:4d:
68:fe:be:72:19:42:1a:b1:70:a0:af:e5:24:90:3b:
77:0c:d1:71:c1:fb:94:fa:cf:94:63:a3:af:6a:e8:
1f:4b:8a:53:08:cb:66:52:55:a5:a5:1a:0e:62:ec:
9f:9c:0d:b6:7a:05:36:2f:b5:41:63:4b:08:20:99:
dc:8f:65:e6:bf:3a:ac:2d:b1:93:0d:bb:9c:a8:bd:
2e:58:08:51:38:1a:be:7a:2e:d6:d5:36:75:af:d2:
c4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:8A:03:82:B2:3F:B9:57:1F:D4:B9:B8:CD:E4:3E:47:97:CB:F6:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd5a3a0a-9cfd-3b3d-aed2-8c917571cd3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:1f:53:1b:3f:0a:e3:f3:65:ee:b3:2c:ea:de:e3:f6:56:f0:
22:28:d6:fd:ce:85:00:2b:4e:e8:4c:27:a6:b8:b2:3b:a6:c1:
9f:88:2d:be:05:e3:8c:dd:d8:f0:fc:58:ce:bb:2b:46:a6:01:
15:8d:e0:34:3f:72:35:5d:ca:0e:2d:d4:83:b7:ce:f5:dd:a9:
d5:52:e7:50:1d:51:ab:92:c7:96:0e:ce:f7:4e:4c:80:1e:1c:
16:ac:ff:6f:e3:74:f2:37:45:33:ae:5e:08:38:f0:e1:07:11:
6c:6d:39:72:c8:0e:1b:45:79:5a:c8:8b:08:a5:ad:01:17:2c:
e3:90:ca:23:ab:94:9b:50:68:b4:a0:4f:b6:b6:57:0a:02:8d:
b6:64:3f:7d:b1:ed:fe:95:76:eb:58:cb:39:b1:45:55:48:55:
ac:50:ae:b1:50:20:94:cc:74:35:2a:aa:73:d8:17:64:3d:ed:
1e:05:8a:c6:a3:22:6e:dc:96:73:46:f6:80:89:5c:b7:c6:c6:
71:bb:09:24:0a:eb:07:1e:40:6a:03:d7:cc:6f:31:4f:b6:7a:
65:e8:6c:84:01:a6:37:a5:18:54:37:08:c7:e3:7a:83:45:a3:
b1:bd:11:45:44:73:ac:8c:30:ee:92:40:41:bd:c3:c6:70:1f:
55:15:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:18 2025 by rpki-client