Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f45e392b-e001-38a1-8549-e1971cdeac6d.roa
File: f45e392b-e001-38a1-8549-e1971cdeac6d.roa (raw, json)
Hash identifier: 6daBfFFmBidWmBXmrSF/ciZ48ZHX6sFpTvoUxt2IPa0=
Subject key identifier: DA:ED:CA:9A:46:B4:CD:42:40:92:F1:7A:65:82:B5:27:63:C8:CD:A7
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CFD1373E91EB385CE940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f45e392b-e001-38a1-8549-e1971cdeac6d.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 25485
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cf:d1:37:3e:91:eb:38:5c:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=aea1c257-96f4-45b6-9e08-d95ec4e0237d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:78:f0:c5:44:aa:93:e7:ea:d9:20:65:c6:cd:
81:b2:85:1e:34:ef:88:04:33:20:ec:d7:72:f4:bc:
7a:03:78:dc:56:03:51:40:89:99:2c:f0:54:25:a1:
13:e7:f8:d4:1c:cc:04:a3:b5:75:a8:bc:77:80:1d:
ad:cd:63:28:cd:eb:4d:3a:05:3f:04:cf:6a:a0:18:
d3:8e:82:bd:df:c1:c4:8d:d1:c9:9f:43:03:50:66:
47:d5:0c:0d:86:24:32:0a:5b:c7:4f:ca:7f:bc:7a:
f2:fc:cf:66:41:6f:75:82:d9:5f:00:ca:3c:95:57:
1a:23:b7:8f:97:de:21:12:3a:dc:ef:b2:c8:63:7e:
2c:e7:32:4a:94:2d:04:b4:7a:5d:a2:30:15:f9:5c:
ec:d1:ad:99:8d:b7:30:46:b1:c9:60:b1:ee:3e:59:
da:52:7e:a5:78:58:0d:91:0e:98:ef:ce:73:6c:db:
2f:69:ae:13:35:bd:29:12:bc:5f:d4:fd:b2:61:e7:
92:7a:bd:1f:c2:03:a7:56:91:21:fd:b0:42:f4:30:
2e:e1:33:55:bf:de:f0:47:c7:6a:47:9d:84:03:19:
4e:b0:71:b5:50:c1:10:51:e6:c8:ff:a8:48:a9:ad:
49:fb:c2:ef:a8:30:61:fe:ed:4f:24:83:07:9b:e2:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:ED:CA:9A:46:B4:CD:42:40:92:F1:7A:65:82:B5:27:63:C8:CD:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f45e392b-e001-38a1-8549-e1971cdeac6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d2:72:1f:92:17:95:65:04:78:93:e8:65:5d:73:f7:f2:bd:
d2:53:e1:b9:80:43:a3:92:6b:4b:01:14:41:b3:29:ac:21:bc:
2f:8a:bd:e6:a2:1b:36:6d:4c:17:31:f2:df:70:02:38:7c:00:
e8:5f:66:8e:82:3d:8f:e0:f7:f1:7e:a8:52:9e:47:c0:1b:92:
5d:d3:81:a7:50:25:41:2b:39:77:d9:da:ff:25:99:42:dd:74:
9c:52:1c:bf:16:5c:02:40:61:a0:28:a5:56:c3:98:81:dc:c7:
bd:ce:6f:92:f7:82:d0:74:a0:b0:f8:fd:03:d8:35:3e:fe:d4:
d9:7c:76:56:0d:e7:15:9e:10:3c:c2:d5:20:77:d1:59:11:83:
96:64:a8:cd:98:d5:64:a6:78:63:2d:82:cd:92:e1:4f:e7:e1:
27:93:6b:d6:ce:fb:33:bb:85:7e:41:16:ad:8a:1c:fe:7d:d1:
52:d2:7b:82:f4:a7:c2:f1:e0:90:80:7d:cc:6c:a9:da:54:19:
99:ee:44:5f:2b:6b:3f:fd:ad:ad:6d:ce:1d:a9:c3:1e:03:86:
1c:ec:53:45:f9:d5:0b:c8:93:e3:e6:c6:76:1e:31:46:10:f7:
76:c1:95:35:53:4c:99:00:00:48:45:ce:4d:da:1f:8a:d4:c5:
ea:29:90:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:01:16 2025 by rpki-client