Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf182d65-9a80-3dc7-aca9-33c7634e5028.roa
File: cf182d65-9a80-3dc7-aca9-33c7634e5028.roa (raw, json)
Hash identifier: CqPkoV67WffNvGEe+1qgw6Hj6tXzBotSqeYz8up57MU=
Subject key identifier: 67:77:52:27:18:35:7A:86:72:40:B2:0E:67:81:B8:2B:0E:BB:4B:A8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CF278D839FDD35325400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf182d65-9a80-3dc7-aca9-33c7634e5028.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396581
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cf:27:8d:83:9f:dd:35:32:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=c8724655-925e-41aa-a5e5-32eaf1130d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:28:77:bb:13:fd:cd:37:70:77:bb:0c:17:
57:8e:87:c1:46:bf:62:e1:3f:98:cf:a5:b0:64:4d:
74:75:17:ce:5c:f1:53:95:27:c8:e5:e1:23:ed:8f:
3d:9c:3c:8d:19:4c:88:6a:1c:81:b9:93:a2:bc:f8:
7c:33:20:22:69:db:68:0c:87:00:84:55:5e:6b:45:
f7:21:97:d3:80:5b:aa:19:ab:cb:3e:11:9d:98:9b:
96:17:e4:cf:06:4b:41:38:c5:8a:67:03:09:b3:1d:
2e:41:3d:39:67:48:ce:e9:e1:40:02:18:0a:47:1e:
ee:9f:63:a3:61:c9:71:1a:cd:d2:5f:6e:40:7f:b2:
5d:dc:fb:98:e1:c5:48:1a:4a:a3:0a:29:e7:c1:73:
97:31:e1:2a:5a:1a:a7:5f:5e:e9:5b:cf:56:14:58:
e8:11:3f:b6:d9:60:5d:82:5b:b6:93:75:82:10:43:
97:0b:5e:60:3f:0d:91:92:f3:f9:e7:ea:79:38:b6:
40:4e:09:88:fb:17:49:2e:81:f8:bd:c5:7f:79:49:
1b:6e:26:c6:29:cb:11:6f:aa:f8:28:03:7c:9b:0c:
69:2b:73:54:fc:87:d7:fd:9e:40:7b:ef:d2:11:d6:
b3:78:e9:1e:6f:89:0a:25:f1:4f:66:8d:1b:e0:d1:
ee:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:52:27:18:35:7A:86:72:40:B2:0E:67:81:B8:2B:0E:BB:4B:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf182d65-9a80-3dc7-aca9-33c7634e5028.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:e7:36:b2:10:38:8b:f5:48:8a:b5:31:b9:23:85:83:2e:db:
19:aa:73:c3:15:b7:c9:51:96:61:30:04:1a:9d:bb:77:29:5d:
cd:36:fa:d4:bc:6a:06:f4:d9:00:07:65:47:01:f7:a6:72:ab:
cb:69:0e:74:d2:09:85:b1:60:0d:0f:4d:89:fc:86:62:bf:fb:
fb:21:95:1e:0b:67:30:a4:4a:d0:a7:8d:ef:53:75:72:2d:10:
20:b6:5e:f5:c8:6d:ea:65:9f:78:4b:c3:9b:27:2d:b0:f7:ca:
9a:08:fa:4d:a5:40:1c:b8:25:34:a5:10:f7:d9:93:46:99:da:
b5:bb:62:f8:03:eb:17:b3:ab:fc:f9:5a:10:93:b9:83:17:d8:
3e:7b:c1:29:d6:f0:02:20:95:0f:1f:5a:87:d8:d2:18:56:2d:
0c:9c:db:1a:4f:55:04:ef:f1:72:98:d2:5c:01:62:51:ef:3c:
1d:49:cb:47:04:67:50:c1:a7:f5:3d:34:de:9c:ff:7c:cf:00:
50:8f:08:47:07:46:56:94:d3:d1:82:75:fd:4a:30:08:97:60:
92:e2:6f:98:4d:09:72:24:87:1b:f9:40:66:e6:ca:f0:5a:65:
f8:bc:25:25:68:7e:c3:ca:81:22:b3:d5:e9:10:bb:2b:24:59:
75:42:cf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:35 2025 by rpki-client