Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e08fdbc-8fc0-3f72-b6a2-ce473c329be6.roa
File: 9e08fdbc-8fc0-3f72-b6a2-ce473c329be6.roa (raw, json)
Hash identifier: kyIVRLNBuhuFLJBmTDTRlQG1cNP76MA6czt2+GAt8sU=
Subject key identifier: FE:0B:00:82:6C:60:2D:45:90:CA:E6:B9:68:0B:FA:4E:4E:AB:04:22
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494733F8857E13B392E68E4000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e08fdbc-8fc0-3f72-b6a2-ce473c329be6.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 396547
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f8:85:7e:13:b3:92:e6:8e:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=957b3e96-6d17-4eb1-ba2b-38b97d3b2e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:25:8a:ab:b5:09:ae:54:8d:6e:27:3c:df:
c1:1a:df:7f:a2:8f:e0:a6:9f:46:95:32:2e:5f:ea:
80:0a:0e:8d:ab:71:5c:ae:98:c2:ba:f5:85:cd:2b:
4d:33:a7:61:ce:22:45:f8:a7:b7:c9:11:5c:4f:1f:
b9:51:ea:8e:2f:f7:1d:0f:83:94:d8:2c:bd:dd:83:
78:71:e7:ef:33:94:b1:6d:0d:bb:dd:21:9f:f2:cf:
a0:52:13:c2:ce:71:98:4c:2d:b1:4f:76:35:2b:dc:
6c:21:99:55:63:55:88:b1:ba:32:62:94:84:bf:6f:
cf:f6:e8:8f:bb:83:b4:89:ea:f9:25:2c:93:4e:71:
01:8c:da:3e:43:51:65:86:bf:f8:e6:1b:62:f7:84:
0c:27:9e:ad:9e:74:75:ee:7d:55:72:b0:f6:97:8f:
48:21:eb:a3:39:94:24:f2:2b:d9:bd:93:b7:9e:2f:
61:50:35:34:f0:26:d9:1d:13:01:40:b5:7c:64:fd:
27:db:8c:c1:13:51:3d:86:14:f6:e1:14:ab:d3:61:
9f:13:59:8a:1c:4e:22:8d:33:16:b2:48:f3:89:16:
62:40:83:82:57:61:9f:57:51:73:ca:7d:c1:96:07:
00:58:4c:21:55:0a:48:71:0c:1b:0c:ea:f4:c0:1f:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0B:00:82:6C:60:2D:45:90:CA:E6:B9:68:0B:FA:4E:4E:AB:04:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e08fdbc-8fc0-3f72-b6a2-ce473c329be6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:c1:78:d1:15:58:fa:45:68:63:44:6c:b6:68:7d:c7:d9:0f:
7f:67:95:27:2b:d6:06:3e:b4:12:b6:e8:34:4f:1b:79:5d:41:
c5:5c:29:ca:79:14:84:55:99:07:ff:1c:10:a4:da:86:88:b4:
05:f4:80:ab:e2:89:6c:e4:8d:6f:2f:df:60:40:8d:1d:11:14:
81:f2:d4:b5:36:86:7a:c2:53:01:d5:42:ca:36:98:72:f8:8f:
ff:67:f4:95:5a:33:1c:7f:01:f8:82:94:bc:e7:f7:9c:c8:90:
07:55:bb:ec:6e:7c:b8:9a:89:f7:d6:e8:d7:3a:65:fa:e7:b2:
94:fb:6f:4c:5b:bb:4b:96:09:ac:51:29:9e:69:89:eb:61:05:
ae:81:e3:90:16:51:8c:a6:13:9c:8f:e7:8b:a4:e7:09:b0:77:
93:3f:ac:d6:e8:b5:86:23:d9:0c:d1:4e:eb:d2:e1:63:a4:93:
34:ba:40:f6:3f:7b:6d:b0:04:29:cb:74:b6:46:14:42:fe:7e:
6b:bf:e0:48:ae:29:11:a5:9b:77:3b:61:bf:83:74:cd:87:cf:
95:a7:e5:26:81:f0:40:d9:8d:bd:14:93:84:e0:e3:ce:f7:98:
8e:8b:09:cc:7d:13:0e:32:84:58:f9:95:3a:4e:b0:31:91:9c:
d0:63:ca:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:19 2025 by rpki-client