Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de6b2284-8a31-3af9-9fb9-1d1c5173a208.roa
File: de6b2284-8a31-3af9-9fb9-1d1c5173a208.roa (raw, json)
Hash identifier: G1SePgugYuhFjqqSDvPfjEyO1S8ixC0aWlGVWOVwYHY=
Subject key identifier: DC:A0:B9:6B:AB:E0:D7:1D:87:7C:FF:AB:06:29:60:2B:DD:9C:07:67
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CE4D14FD6476AADC5E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de6b2284-8a31-3af9-9fb9-1d1c5173a208.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 20362
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ce:4d:14:fd:64:76:aa:dc:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=210babcc-23a6-4d0d-a233-28e132dc810a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5a:92:b5:0d:f9:6b:91:15:e7:16:f2:15:36:
bc:3d:f2:4d:e0:9f:1b:99:43:61:fd:db:1b:6b:42:
bd:bf:be:85:bd:82:33:f4:d8:6c:44:a0:00:d1:05:
75:ea:75:92:42:9e:94:50:4b:d8:e9:19:ec:80:6b:
7f:12:98:a6:9d:7e:57:a6:7c:83:80:56:a9:72:02:
5a:9e:95:b3:a0:98:b3:2d:04:96:2d:4d:0b:de:8f:
76:79:a5:67:0b:08:80:5b:d3:2d:49:5d:27:74:65:
df:b4:d7:34:58:5f:30:fc:75:9a:5b:f5:dd:2b:08:
29:e0:f2:0b:7f:76:f2:1e:8b:6c:f2:55:22:f7:33:
1e:88:e2:2a:71:c3:07:b3:ce:9f:bb:fb:2d:5d:90:
c8:0e:c1:bf:34:b3:d4:e0:3e:ac:e2:40:c6:92:74:
8f:8d:34:74:7b:4a:30:f6:82:db:4f:fd:0a:41:69:
a2:8f:be:76:f9:4d:18:96:0d:0b:38:bb:97:c8:06:
62:88:b1:9e:c7:7a:87:c4:fe:5a:c9:cb:0d:58:f6:
22:34:33:48:d7:e8:cb:77:7c:68:4f:76:0b:08:1d:
bf:12:24:4d:14:1b:a1:33:08:e8:33:d4:2a:1f:16:
f0:6f:55:f1:6a:7a:90:e9:b1:0a:4f:58:3a:cd:0b:
c8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A0:B9:6B:AB:E0:D7:1D:87:7C:FF:AB:06:29:60:2B:DD:9C:07:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de6b2284-8a31-3af9-9fb9-1d1c5173a208.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:4a:b5:42:3e:f4:da:89:6b:55:18:9a:7e:81:52:f8:4c:46:
62:fa:c6:99:b1:82:05:4b:9b:a1:78:4c:28:fb:da:c6:56:ad:
49:06:11:8e:d3:87:49:dd:e2:d4:91:45:87:b1:81:10:02:09:
84:c8:f6:2a:74:f8:64:ec:eb:da:92:2e:08:1d:b1:78:98:06:
fd:7d:c4:ee:d4:fe:ae:6a:0a:bf:97:e1:b7:e5:9f:8d:4a:8a:
9e:f9:7e:72:6d:f5:dd:bd:db:9e:11:68:ae:af:76:e9:d7:37:
e2:5f:c1:e7:7f:91:84:66:ea:7c:e4:fe:c5:8e:09:06:7b:55:
7f:40:f8:c8:24:49:5c:de:cc:5b:de:bf:8e:0f:47:8d:db:f6:
2c:92:23:0c:8c:6e:be:3c:f6:c0:15:59:f9:cb:99:d8:2b:d1:
7c:a0:26:02:ab:11:60:68:cb:be:c0:c4:b2:2e:8a:81:14:b3:
27:b4:93:7b:c4:7f:c1:d3:66:e1:2c:31:cf:f9:95:3b:f9:7c:
89:cd:e3:d6:e0:2e:85:d1:49:a5:09:84:e5:1f:76:67:01:fe:
fe:5c:c2:65:02:22:2b:41:ec:59:32:35:7d:91:7a:89:8c:64:
1f:34:fb:38:6d:83:6c:64:95:6b:a4:64:bb:5c:e9:0d:e6:e8:
da:88:a7:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:54 2025 by rpki-client