Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1e90987-30a5-3147-b627-e58d4c84c433.roa
File: e1e90987-30a5-3147-b627-e58d4c84c433.roa (raw, json)
Hash identifier: 5ssfso7Jmf48eYwl2qxlx1ppRcPGiei+F83TYwFN/nM=
Subject key identifier: 60:FA:C8:14:48:C9:D8:F2:81:39:F8:1C:31:BB:52:71:BB:FE:10:24
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695D098271BA9EEA88D52E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1e90987-30a5-3147-b627-e58d4c84c433.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396549
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:d0:98:27:1b:a9:ee:a8:8d:52:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=6686bbe5-bae2-4c05-93ef-82f28f6e103f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:36:20:d6:70:9e:e0:b9:bd:35:77:19:16:
77:83:4f:6f:69:c5:40:34:1d:b7:a2:25:e6:83:14:
cc:14:b3:fc:a2:a9:65:29:26:07:08:fd:3d:e3:dc:
74:f2:38:1c:14:8a:e5:45:57:cd:7b:ff:fd:ef:98:
3b:7e:6c:79:fb:f3:47:60:03:1a:66:ae:6e:e1:c3:
91:ad:8f:ae:56:c8:78:7c:34:1c:ac:32:68:5f:ea:
19:32:8f:8c:7d:d8:07:bd:35:0b:92:ad:b1:5a:a4:
43:78:cd:0e:b1:7d:68:72:ef:6b:06:aa:f8:1f:30:
6b:0a:65:94:c9:d9:a4:d5:29:f7:ff:7d:ee:78:77:
b3:88:a8:ed:cf:f4:79:9b:3c:2a:62:dd:8e:59:32:
56:d7:05:bf:f2:b5:f4:a9:27:0a:1e:22:81:14:b2:
2b:e4:61:a4:08:87:92:86:da:ed:8b:72:d8:f1:02:
55:4c:49:8d:b8:ed:d4:7d:ec:a4:70:52:9e:51:12:
57:17:aa:cf:78:42:3c:e3:e2:5a:44:fd:a3:c6:d2:
e9:36:05:63:9a:27:8a:c7:a6:71:0b:1b:26:d8:77:
21:8a:b4:78:b8:46:0f:f4:fe:de:71:8b:7e:ba:d4:
97:00:1f:72:9b:cd:1f:d8:13:4e:c9:21:79:e4:1f:
51:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:C8:14:48:C9:D8:F2:81:39:F8:1C:31:BB:52:71:BB:FE:10:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e1e90987-30a5-3147-b627-e58d4c84c433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:27:4f:12:c7:66:26:4a:73:5c:c9:36:2d:b1:96:a5:d8:08:
63:0a:7a:12:0c:8c:95:83:68:0d:0d:ce:ff:6c:02:55:ff:75:
26:37:c9:c0:0a:85:a1:4f:8c:19:99:bc:f3:69:ed:28:7d:ed:
37:3b:a2:6b:00:eb:97:49:1b:ba:20:81:bd:42:db:44:63:a1:
f1:f1:cf:da:25:94:c8:12:54:80:41:40:78:67:36:9f:ee:d7:
e4:20:7e:33:fa:d6:39:2e:a5:01:82:21:85:85:be:94:27:c6:
df:0c:2b:2f:ae:4d:9b:cc:08:fe:d6:31:13:52:91:61:d9:5b:
a5:01:2a:45:bb:3f:55:c5:22:3c:b3:ba:c6:e5:e1:ee:2c:7a:
82:3b:7e:9e:c3:ba:76:06:a5:b1:1c:76:78:ea:98:4d:0f:41:
4b:cc:1f:9c:d3:c0:4d:45:a7:07:ca:62:89:ac:39:f9:f3:2d:
f8:46:ae:4d:e6:01:a5:99:a4:e9:12:17:c6:ad:63:6a:7c:08:
92:40:b9:d0:52:87:db:3d:17:0a:eb:96:e6:f7:01:00:23:55:
50:dc:a1:8f:35:1b:fd:22:b1:91:59:71:be:05:e5:52:fe:cd:
f4:00:5f:7d:33:9b:51:96:b0:97:e8:b2:ea:99:ba:85:4c:61:
d8:e3:48:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:17:49 2025 by rpki-client