Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8be47ec-d6e8-383e-ad77-2d9eace346f3.roa
File: d8be47ec-d6e8-383e-ad77-2d9eace346f3.roa (raw, json)
Hash identifier: rsJKYrNXVYiTP/iOWhbepvHLAUdreBeNIgZ7KLu9f/E=
Subject key identifier: 01:E4:10:9B:57:A1:AD:79:D3:FE:F3:52:AD:5A:38:9B:62:1D:6F:AF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695D1EF4BE65246BC3AFE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8be47ec-d6e8-383e-ad77-2d9eace346f3.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 36618
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:d1:ef:4b:e6:52:46:bc:3a:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=503ededd-4dda-462d-a6fb-6eb4d43314c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:fc:b8:9e:b0:9c:89:86:98:65:f0:3a:41:
41:47:dd:15:4c:9b:da:21:42:5a:65:bd:44:e7:c9:
05:b5:ca:66:6e:47:d9:f0:23:71:23:45:b9:5c:da:
6a:9a:51:d8:2e:c8:0f:af:71:61:17:60:73:93:a2:
28:58:73:25:1f:ab:09:6c:09:37:bf:c2:c8:b0:cf:
12:71:37:48:ed:ae:df:8e:a4:0f:70:90:4c:5f:c5:
9f:5f:ca:38:7a:e0:85:87:e1:9a:df:84:3b:3b:f3:
29:9a:e7:3c:37:9d:18:0b:95:5a:51:2a:a5:97:03:
08:c8:7f:9d:70:a4:4b:8c:57:16:b3:7b:1c:e9:9a:
bf:16:d8:da:30:e1:51:eb:df:73:23:31:0c:b3:67:
01:83:56:9e:d2:f2:59:57:dd:59:a4:bb:3b:29:6a:
15:3d:03:a3:80:72:74:cb:e2:66:ad:72:7b:19:4d:
05:35:96:92:60:9a:40:53:32:70:68:87:99:43:d3:
71:05:f3:6c:0e:85:c7:3b:74:6e:dd:fe:c7:0c:60:
c4:86:e4:51:86:1f:45:d3:cb:f0:99:5c:2b:4c:0c:
35:d7:6f:64:15:d7:78:89:fb:a6:67:f4:26:60:f6:
13:e9:49:ed:cf:e6:ae:16:65:54:21:cf:85:83:e7:
2d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:10:9B:57:A1:AD:79:D3:FE:F3:52:AD:5A:38:9B:62:1D:6F:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8be47ec-d6e8-383e-ad77-2d9eace346f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:54:a1:80:af:08:50:4c:af:c6:54:5b:5a:30:e5:10:c1:52:
a7:29:4f:c7:27:61:e9:02:58:11:7d:17:fc:08:12:df:9c:ca:
7b:3d:39:28:cc:95:77:8a:08:06:a4:ce:1f:d4:57:54:4b:5f:
a7:e0:f6:31:50:24:32:ca:f3:9b:db:08:fc:43:5f:0a:fb:7d:
60:6b:48:6d:c1:ca:ad:57:fa:54:68:89:86:9c:58:19:03:90:
90:c2:17:03:16:f7:67:14:ff:be:71:3b:46:d6:75:38:0a:0a:
87:8f:8e:42:a1:19:01:99:bd:d1:8b:cd:2f:40:38:63:41:de:
06:22:1e:61:c6:62:ce:42:fa:6c:f4:36:5b:bd:6d:a0:95:80:
78:6e:da:74:46:b0:60:2b:d5:37:e2:4b:10:d3:0f:bb:c1:16:
02:d8:15:82:fc:46:98:6f:88:62:0c:08:a0:0f:6d:da:c1:e2:
c5:d1:59:fe:ab:31:f9:d7:12:0f:48:18:7e:6a:6f:10:07:aa:
14:b8:98:7a:ef:a0:4e:6a:bd:1c:24:49:59:55:a7:dc:20:78:
af:38:13:20:c2:33:83:35:c2:a7:02:03:c9:70:25:fb:63:8c:
37:54:75:cc:9e:eb:a2:bd:a2:ac:2b:a1:f9:26:69:e5:e4:29:
c6:2a:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:03:41 2025 by rpki-client