Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b442620e-ac18-3e7d-9341-fc1e63a6d528.roa
File: b442620e-ac18-3e7d-9341-fc1e63a6d528.roa (raw, json)
Hash identifier: KSYHQD2YlRnfouL0ikCqUuNFjKmlWK8XWHM+DjF3Vug=
Subject key identifier: 95:98:3C:32:28:0D:B5:1F:22:17:70:30:26:F6:31:D4:21:C8:1A:8F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494733F4EC7FCE869891807600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b442620e-ac18-3e7d-9341-fc1e63a6d528.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 396606
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f4:ec:7f:ce:86:98:91:80:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=fe96d37f-2536-439f-98d7-0e9de6cea96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:3b:a5:06:31:5d:e0:6b:e6:34:81:08:8c:
71:5f:09:00:1d:bd:e9:38:5a:b2:e0:67:f2:06:b5:
0f:f3:92:45:f7:86:73:4d:4a:2c:a9:6c:c3:6f:a3:
29:3b:3b:ed:45:11:9c:d8:c7:90:e5:86:6e:74:f2:
5b:5b:53:01:fb:a2:1c:85:0e:6f:28:47:97:9a:c3:
af:43:d7:8e:4c:1d:4e:a7:0e:6a:e8:4e:88:a7:56:
fe:8d:a2:62:06:a6:64:d7:f6:42:a4:97:df:5a:1d:
7a:0f:aa:27:14:21:86:fe:9d:88:0b:01:a8:2d:de:
c8:ac:9c:9a:db:aa:45:60:f6:84:65:07:a6:10:35:
7a:46:9b:2b:17:3e:11:7d:d8:fd:05:e6:8f:39:f1:
5e:c5:98:ca:8a:35:f6:df:0a:be:ef:c1:74:17:e8:
c5:14:24:5d:96:f6:8b:2e:71:c1:46:4a:d5:15:73:
50:34:82:d3:01:b2:e5:e2:e8:53:4e:8a:a2:85:df:
78:66:8b:4c:df:24:32:fa:e9:d6:45:a4:78:8e:c9:
c8:e7:f5:86:c6:6d:c6:73:92:01:24:9d:e9:a0:f2:
5e:82:75:94:13:c8:a0:fd:f7:dd:72:be:74:99:6f:
9b:3e:b8:af:36:14:31:89:97:b8:78:34:ce:9a:03:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:98:3C:32:28:0D:B5:1F:22:17:70:30:26:F6:31:D4:21:C8:1A:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b442620e-ac18-3e7d-9341-fc1e63a6d528.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:b1:b1:b3:77:19:d6:53:e5:c9:61:df:50:2f:ec:79:81:72:
3e:87:8c:5b:32:1e:56:dc:67:c5:f1:3f:95:7f:a7:f7:7d:37:
ab:22:06:a5:37:31:fd:2a:65:b2:c5:38:86:e7:a2:15:3d:3e:
7b:12:d8:85:b7:df:fc:62:8f:c0:63:18:84:44:1a:a1:c4:a4:
0e:f1:ce:f9:70:94:40:92:15:de:79:cc:01:f6:34:fc:4b:4f:
a5:79:58:54:c5:99:98:25:64:41:bd:9f:60:87:b3:0e:30:15:
82:78:78:95:b2:5b:7d:c1:ef:45:f3:c9:96:ab:0f:66:6e:c5:
82:32:a6:32:26:b7:f1:06:0a:a9:8e:92:23:72:03:dd:ce:c9:
e6:fe:9d:b9:28:43:b6:33:da:fe:29:eb:06:14:7e:69:84:15:
68:6f:a1:e5:c4:55:33:cf:6f:c4:1a:e8:ef:6a:e5:ca:bd:e8:
66:98:d7:d6:72:68:b6:81:27:57:5e:4b:4a:9c:9b:a1:bc:23:
b9:dc:ed:18:6b:ea:7d:5c:18:0f:bb:11:1a:e6:0b:7f:31:61:
ee:86:f8:c8:ce:c4:c3:4e:7e:7e:7d:b4:66:59:2c:4f:35:c2:
86:7c:54:96:18:55:1f:dd:6a:5e:89:07:21:e9:c5:87:28:ad:
4c:92:b7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:44 2025 by rpki-client