Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/442cba74-64aa-371e-ae20-e5d3d8769190.roa
File: 442cba74-64aa-371e-ae20-e5d3d8769190.roa (raw, json)
Hash identifier: PLw2V2uyOUmNhsYvDH9wDCZf4eVhf7DyfNoPMWenElc=
Subject key identifier: DB:6B:51:44:E3:32:DD:F5:1F:CA:AD:6E:13:B9:A0:E7:F1:BA:93:AE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494733F6D34CF384F9F8914180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/442cba74-64aa-371e-ae20-e5d3d8769190.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 36629
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f6:d3:4c:f3:84:f9:f8:91:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=47c80758-ebe3-4e99-86c5-09a16bae0cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:95:d5:62:1f:d1:cf:c7:2a:63:51:78:21:
f7:3e:bc:0f:08:b9:97:4e:5a:cd:c3:ad:57:27:5a:
8a:31:b0:fe:24:fb:bf:4b:bc:e4:24:79:23:63:81:
1d:5a:b4:08:b8:32:aa:74:8f:b3:90:03:3c:3b:ec:
65:2e:3c:e7:14:6d:17:9e:1c:a7:16:b3:0f:8b:af:
ce:db:55:c6:44:fb:77:19:36:4e:b5:a1:86:24:df:
75:88:ba:6b:48:0b:43:91:f0:73:86:52:d8:3e:b9:
2e:da:c4:d5:2b:54:7a:66:78:0a:0a:87:76:fa:8f:
25:94:42:61:ec:d4:f1:a4:b3:1d:2a:51:d1:34:a8:
49:c1:62:61:6b:46:45:5d:e6:65:9c:ad:de:07:15:
2b:2f:03:83:b6:9f:23:ad:06:a8:0d:f1:91:a4:4f:
be:16:bd:46:1e:d6:73:c3:d4:27:62:b1:10:ed:3e:
92:97:45:5a:2f:fd:36:dd:82:76:33:14:e5:e8:3f:
ec:24:d3:0a:e8:cd:1a:23:64:9e:55:29:0d:e7:b4:
46:7e:c9:c9:a5:29:e9:2c:09:88:8c:6c:6c:8c:33:
37:ff:d0:6a:9f:41:6b:07:96:be:f8:46:64:a4:93:
c1:13:05:07:98:bf:22:c0:90:f1:5f:be:f9:a9:a4:
ef:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6B:51:44:E3:32:DD:F5:1F:CA:AD:6E:13:B9:A0:E7:F1:BA:93:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/442cba74-64aa-371e-ae20-e5d3d8769190.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:75:d9:99:d1:83:3f:74:fa:6e:ec:29:75:d3:ac:57:13:81:
dd:cd:92:73:36:63:80:3f:95:4f:02:76:b4:79:2f:4e:be:72:
ef:6c:49:e0:55:1f:8f:e6:cc:48:ef:e8:a8:fc:08:5d:ea:cc:
86:08:0d:3e:48:9a:8f:34:32:15:7a:11:d4:bc:6b:c4:20:60:
74:0f:c6:32:3e:3e:45:a3:5e:3e:de:f7:b0:4e:60:26:08:88:
be:9a:18:dd:cd:bd:b5:95:dd:ca:98:8b:af:5e:9d:b3:f1:27:
8c:95:42:16:77:f3:a5:db:0e:2b:0b:3b:11:d2:de:99:1f:e2:
06:5a:3b:58:9c:d1:b3:c2:56:d3:76:fd:7e:7e:6a:11:fa:24:
b8:56:0a:39:6e:99:38:d3:91:97:12:15:d8:9e:13:3b:1a:c5:
ca:5d:b1:ac:2b:76:ae:88:9d:95:bb:b0:f8:9d:53:6c:9a:6c:
e1:a0:75:45:98:1d:77:c0:96:e8:e9:c4:5b:99:d3:ed:5b:e0:
75:2d:af:05:8a:83:16:e7:e4:82:de:47:0f:a4:fb:b2:4b:d4:
cf:94:16:72:45:8c:4d:8d:bd:70:d2:48:24:a6:70:2e:97:43:
b5:f7:92:93:70:56:70:bc:57:e1:15:50:8b:82:5a:f5:6e:f8:
a6:18:3b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:18 2025 by rpki-client