Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca9802a6-6fa2-30b2-b429-fa7cab4e26af.roa
File: ca9802a6-6fa2-30b2-b429-fa7cab4e26af.roa (raw, json)
Hash identifier: R5nAXDEf+CmkO4bWPelD+hYWoPJqGN9q5a1I6jJLfQM=
Subject key identifier: 5A:5B:87:95:59:64:98:D7:1E:69:18:27:7B:BD:45:BF:87:88:9D:B8
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494733F46358EA4172D7F4CD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca9802a6-6fa2-30b2-b429-fa7cab4e26af.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 397194
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f4:63:58:ea:41:72:d7:f4:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=bd072fd8-5cc8-4349-9eef-85da5cc0373b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:b8:8b:06:26:ac:1d:72:e6:99:5c:3e:c7:
3d:25:15:e5:60:62:6f:ec:52:75:47:19:6b:f3:88:
3b:f5:fd:78:0f:71:44:21:0b:56:05:65:bc:1c:4b:
8c:cb:f8:05:eb:e0:bc:23:63:b0:07:00:4f:0a:ae:
cf:d7:4a:cb:01:10:2c:25:d6:5d:2a:3b:cf:14:1d:
e8:6c:c0:8e:b3:e1:92:ba:42:29:66:a7:d3:b2:12:
b0:45:39:8e:bb:7b:9f:6b:30:41:61:42:71:00:9a:
bd:67:84:f9:87:11:89:36:98:ff:1a:27:7f:8a:d9:
48:04:3d:ec:ee:a3:24:e1:ff:90:cb:47:b6:85:7d:
f9:8e:05:97:d4:6b:14:da:a5:d9:78:a2:cd:50:82:
27:dd:11:25:7c:9d:a2:5b:1e:e5:8c:29:9e:c7:fe:
8e:25:c7:4a:a4:f7:75:bb:d5:18:b5:ba:84:ff:32:
67:82:02:84:69:ac:dc:33:21:2f:3b:a6:c3:50:fa:
3f:99:b0:1c:08:60:a5:00:9e:5e:9a:ff:f2:5e:35:
2f:f5:da:9e:09:2b:bf:62:8f:1f:5a:3e:7e:ae:31:
ab:fe:5f:ab:bb:50:5c:f1:e6:bc:bb:3d:ee:40:f7:
16:e4:c5:94:35:01:96:e4:cc:f1:82:b0:96:78:03:
65:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5B:87:95:59:64:98:D7:1E:69:18:27:7B:BD:45:BF:87:88:9D:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ca9802a6-6fa2-30b2-b429-fa7cab4e26af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:68:05:96:d4:64:d5:38:11:1f:66:19:a1:67:bf:bf:60:5d:
1e:8b:11:40:08:20:5f:c3:02:c6:05:74:8c:4d:29:20:6f:28:
fc:70:8b:8a:61:62:6b:ac:96:04:6b:4f:d7:8c:93:f5:20:51:
54:f2:85:a0:a6:86:eb:71:17:de:c5:74:78:4c:09:1e:e6:39:
42:34:28:99:57:a1:19:5d:f9:cd:ce:88:60:9d:d2:a9:c1:48:
72:4d:6d:8e:6c:d0:3d:89:1d:e3:8e:66:34:9b:00:48:8d:41:
8f:5b:e3:2e:65:89:92:b0:2d:b3:5e:7b:85:34:ac:f0:53:37:
52:a5:03:7b:bb:66:97:a7:74:fd:95:aa:bc:7d:05:26:c3:de:
75:12:d9:3b:80:7c:b6:85:c0:61:fa:76:8b:09:33:c2:84:15:
13:5b:61:71:ba:61:31:18:f9:7b:29:a0:db:9d:36:f3:93:eb:
1f:ad:31:96:b6:5d:d7:0e:89:c3:ff:c2:b7:b7:78:ee:d1:a0:
a3:a3:72:62:6e:90:6d:4e:80:21:94:fb:1a:2d:68:74:82:5b:
a5:70:5e:f0:6d:8c:a4:f5:a2:54:dd:6c:f3:85:c7:c8:44:70:
c3:c1:c3:5e:eb:32:3a:6b:24:79:ec:12:5a:29:31:24:d7:14:
6c:fd:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:04 2025 by rpki-client