Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08dc736c-3d08-3d56-b338-a8f26bc8ffb3.roa
File: 08dc736c-3d08-3d56-b338-a8f26bc8ffb3.roa (raw, json)
Hash identifier: rbOdGCs6eilYCx0QgdzDypLuADDy0RD/vceg4qjyl8s=
Subject key identifier: 44:74:35:92:27:27:0A:09:C6:4A:4C:6A:FA:22:F9:22:ED:DD:C5:5E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CC509506A7AC8AA74B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08dc736c-3d08-3d56-b338-a8f26bc8ffb3.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396612
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cc:50:95:06:a7:ac:8a:a7:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=da5116aa-9074-48cc-ad57-6b3a67dfffe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8d:52:2a:9e:a1:eb:5f:2f:d9:ab:6d:3d:0e:
29:ca:be:db:bf:5e:7f:72:c0:56:a6:7e:36:ff:59:
22:aa:3b:6c:de:68:42:69:89:92:f2:9f:0d:90:5e:
9a:c9:1e:90:eb:a0:54:d3:79:5d:ff:fc:38:e3:76:
32:4c:8d:ed:a3:61:fa:25:6b:6a:cb:07:84:a4:65:
68:cf:af:c1:0f:ce:1d:0c:5e:e3:1e:40:8b:ff:48:
f8:55:5c:b3:1a:60:cd:89:9c:f5:bb:82:9f:be:fd:
64:4b:d1:64:3e:54:56:38:0e:4c:ed:d6:6f:a5:c2:
3a:95:93:0d:2b:82:ed:14:1e:0f:8c:96:3e:a6:6d:
79:48:a6:d8:29:39:6f:04:33:4f:08:13:8a:e7:cb:
99:fa:b2:e5:a8:21:7e:09:6d:61:0f:7c:c1:85:7b:
5b:ad:c0:c5:5b:98:b1:63:55:79:9e:48:70:cb:ca:
c1:91:98:a1:8c:7c:09:e9:5f:14:bf:f9:04:f3:01:
8a:88:d8:94:68:00:02:00:5b:41:75:e4:3a:95:33:
4d:ab:e2:3f:cd:2c:86:d8:b0:8e:a5:34:07:34:71:
17:55:3b:08:de:24:58:ab:42:6f:9c:bc:f1:55:d7:
16:47:f7:72:82:32:15:30:28:9c:24:c8:f9:43:f4:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:74:35:92:27:27:0A:09:C6:4A:4C:6A:FA:22:F9:22:ED:DD:C5:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08dc736c-3d08-3d56-b338-a8f26bc8ffb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:c9:2e:23:ba:73:1a:c4:7d:14:a2:fa:15:37:41:b8:db:a5:
96:fa:63:5c:0c:f0:d4:d8:08:b1:c6:2f:cd:f9:18:26:97:67:
c8:86:96:43:07:59:29:ea:a6:53:8d:10:7c:c0:14:3e:6d:a1:
a1:46:bb:b9:a4:60:37:58:29:b8:71:f7:f5:ea:2c:b5:d0:bd:
7c:3e:39:b0:89:7f:6d:ca:14:e0:82:fe:98:2b:ee:46:84:36:
3f:ec:4f:01:8b:4f:56:1c:1b:f9:1a:0c:fa:14:d8:61:d1:6c:
a2:13:37:61:e3:53:28:63:ab:e7:b0:19:16:3f:76:34:11:7b:
1e:d0:71:e2:9e:d5:0c:88:63:f0:6b:fc:f9:9b:1b:f9:82:88:
25:d6:50:9c:04:e1:cb:41:ee:8f:a3:0d:93:60:33:fc:33:5d:
27:5c:f3:01:a9:0b:b5:12:88:90:44:31:61:48:36:4d:47:bd:
d6:b3:42:e0:18:d8:2f:8d:89:de:9d:cd:82:68:0b:5a:7e:6a:
36:cb:e4:c7:b0:1b:14:46:1e:8b:96:f9:80:18:58:a7:79:5c:
9c:db:e6:7d:ab:39:0a:1e:cc:a8:28:4b:cc:ba:25:28:c1:dc:
fa:2c:c2:ef:28:17:77:cf:33:84:bc:e9:49:f8:df:7d:d0:be:
53:32:3c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:41:12 2025 by rpki-client