Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3f70196-7dfa-301d-aec8-bc54c7754399.roa
File: b3f70196-7dfa-301d-aec8-bc54c7754399.roa (raw, json)
Hash identifier: Hph5Ak0wmA++lXwyM2dB3es+79/r8t2P2fTCqXT9E3s=
Subject key identifier: 95:FC:FB:6E:67:22:76:01:AC:DA:26:F9:70:3A:FF:B6:59:2F:FC:A4
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494733F92937D899D440800540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3f70196-7dfa-301d-aec8-bc54c7754399.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 396572
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f9:29:37:d8:99:d4:40:80:05:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=4c67fa5a-90ea-4643-b839-4b34601f6568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:5a:46:10:1e:d7:27:09:a9:40:71:08:bf:
4e:dc:60:2e:2b:43:ef:78:1e:cf:a8:65:3a:66:e4:
95:f1:2b:8c:5d:dc:03:fb:09:f7:61:e0:3d:1a:93:
f2:04:df:32:c8:8c:5a:b3:73:42:fb:b0:5f:bf:79:
1d:63:31:e9:c3:7b:71:0f:18:06:79:ea:b8:de:78:
9f:91:a8:c0:72:3e:28:be:8b:54:a8:04:c3:51:8b:
79:5c:ab:c3:1a:29:3f:19:34:d5:09:94:1c:83:12:
5d:ca:a4:e7:81:25:b1:bf:f6:a3:69:a8:5c:7b:de:
2e:1b:fd:9f:8f:a8:d0:26:37:33:18:db:2d:90:fe:
f7:1a:1c:0c:6c:b6:b3:cb:13:18:00:20:d2:d0:78:
cc:94:3b:39:55:20:3a:6a:15:a8:c3:a2:5d:4a:9c:
33:99:b0:64:32:34:50:7f:51:88:27:46:93:b7:22:
f1:71:4c:4e:06:ee:c6:9f:71:69:ac:92:cc:94:e6:
05:d2:e6:ad:1c:49:ad:cf:ac:05:b2:4e:a6:ce:68:
10:db:e8:f2:59:ff:eb:31:e7:08:0e:56:82:0b:f5:
a2:2a:12:b9:1b:f2:f7:a2:aa:ea:fb:f2:de:1c:b7:
92:86:9e:c8:e7:bb:30:fb:f8:a7:ee:7c:c6:92:c4:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:FC:FB:6E:67:22:76:01:AC:DA:26:F9:70:3A:FF:B6:59:2F:FC:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3f70196-7dfa-301d-aec8-bc54c7754399.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:b9:e2:bb:b3:c4:9e:71:8a:a8:fe:26:0f:8d:99:32:bd:41:
12:eb:4b:fd:b5:0f:4b:fc:a1:b8:51:68:8d:ad:e5:4d:1c:45:
26:d9:71:cf:64:2e:48:74:69:78:12:bf:91:59:d2:28:8e:55:
7a:6b:1e:f7:48:cd:b1:89:60:de:92:56:de:5d:d8:22:7e:73:
bc:d5:25:cc:9c:48:46:a9:85:73:66:1f:f2:95:37:9c:d9:21:
c4:9d:f1:db:2c:89:e1:85:03:85:4f:d5:77:f8:0f:74:e7:d8:
2b:3f:b6:1a:1d:58:01:1c:57:07:d4:d4:13:83:a2:29:a3:7a:
4e:9e:98:eb:e0:31:94:df:f0:ae:33:60:0b:db:99:19:26:2b:
85:e3:fe:af:48:eb:87:6d:cf:2b:e7:a2:b4:57:55:31:1c:70:
3d:ea:bb:b2:b4:37:ea:ef:2e:aa:a4:30:7c:10:f5:51:f1:8b:
a2:77:eb:d1:9e:b3:71:ec:ea:61:f5:85:46:2d:1c:4a:6f:19:
f3:dd:78:4e:ae:9a:18:9e:71:28:07:ad:92:50:cd:06:41:9d:
bf:25:8d:be:b2:76:2f:96:e0:b6:4b:6b:bf:df:5b:13:22:03:
4f:97:3f:0c:d7:01:bb:a1:47:23:31:70:ef:05:d5:67:b8:01:
14:0a:09:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:55 2025 by rpki-client