Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1a2832-ab31-38d1-b42a-b4e0be6c4017.roa
File: cf1a2832-ab31-38d1-b42a-b4e0be6c4017.roa (raw, json)
Hash identifier: xmknVrDwSoKoYgu+hNYaqFbS8l+hmymz92zE+bu1m3M=
Subject key identifier: A3:7A:0C:EC:D4:2A:8E:F7:11:12:43:6B:F4:E5:8E:71:1D:81:9B:26
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CF9A7A5387853AA2C100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1a2832-ab31-38d1-b42a-b4e0be6c4017.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396583
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cf:9a:7a:53:87:85:3a:a2:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=76d42114-3531-4f17-a3bb-70f1689e8128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0f:ee:f1:02:86:58:a6:fe:97:a5:bc:d2:bd:
d4:1f:11:d9:c8:be:7a:44:16:31:54:21:a0:18:f7:
26:67:73:a1:9b:59:16:7f:ca:18:5f:c5:d8:d3:0c:
71:5f:2a:0c:86:65:b2:07:dd:af:16:67:3e:28:34:
da:f3:50:b9:d6:1b:39:dc:cd:0e:d9:c5:b4:88:8c:
d6:21:98:e3:1d:95:3f:90:4f:ae:20:e6:66:12:55:
51:d5:06:fb:b3:14:61:f7:ac:a8:ef:b0:ed:81:01:
ce:b0:c4:4d:a5:71:8f:51:4b:2e:8c:f7:36:fe:e2:
13:02:66:7b:21:bd:e6:5b:ac:86:aa:e5:cd:fc:2f:
08:fa:81:df:4b:1b:12:00:e0:74:0f:e6:e5:ec:61:
56:83:36:d5:47:a0:1c:0f:5e:e8:5e:a8:4c:da:81:
4b:43:4c:38:44:ce:40:28:e1:4d:cc:f7:e7:7b:a1:
0b:5f:50:24:f9:8e:e8:fd:0e:96:69:d4:00:4f:05:
d9:a4:a4:40:8b:6b:b3:7a:f5:40:b9:2a:4b:cd:d8:
ae:d0:fb:65:5d:76:f0:2f:c8:02:ec:f2:36:3a:2f:
11:05:1d:35:c0:f9:f6:2e:3e:45:0b:3d:8d:eb:4e:
46:f1:f5:ab:5d:59:d6:63:86:21:36:cf:82:44:71:
ec:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7A:0C:EC:D4:2A:8E:F7:11:12:43:6B:F4:E5:8E:71:1D:81:9B:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1a2832-ab31-38d1-b42a-b4e0be6c4017.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:79:38:d6:17:f1:85:c3:e8:d9:2c:ed:cf:03:e2:0d:15:8c:
93:f7:40:06:58:a2:e0:38:0a:21:62:85:8a:20:a6:f6:31:fe:
2f:5c:d6:9f:5d:d1:ec:a3:a1:4a:a4:e2:66:37:8c:fc:c1:a3:
e8:a3:12:21:2d:ec:d5:a7:c3:07:51:66:f3:2b:28:05:8e:74:
3c:b6:be:ce:35:f4:ae:ae:1f:21:cf:c5:3f:4c:bf:b5:cc:64:
e8:68:3e:13:d2:97:98:2e:65:27:8b:71:8f:55:49:fc:78:87:
b3:56:df:96:93:5a:73:73:97:f5:5b:67:2a:e8:83:7b:c5:e2:
f2:5c:d0:5c:08:99:22:0e:23:dd:ae:47:3a:55:82:01:32:18:
68:cc:d4:a0:99:92:2f:7c:2b:48:7c:87:b3:e8:17:85:9d:a4:
b8:4f:3f:52:e1:20:d6:5e:e5:73:76:16:c1:04:46:c8:da:f5:
2c:72:68:28:c8:eb:dc:52:db:7d:c2:1c:00:43:84:db:16:8b:
ed:8e:b7:cd:2a:ef:0d:f0:cc:94:f7:c2:bc:7c:ef:a3:60:5c:
95:50:c5:31:ce:3f:d4:36:86:64:c7:19:a9:74:f7:a8:16:05:
01:9e:df:5b:51:39:83:3e:a2:00:e9:d4:32:6c:12:78:8b:e9:
11:e7:80:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:22:31 2025 by rpki-client