Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/135c39c1-e113-36fa-97c6-959ef54e1fab.roa
File: 135c39c1-e113-36fa-97c6-959ef54e1fab.roa (raw, json)
Hash identifier: WPd7vogD1VJ76eqwT2HZBoACa1gYv3Y+JIClt8oRvs4=
Subject key identifier: 57:4D:66:2D:1C:D5:DA:CF:64:38:88:78:03:56:B6:1D:14:8D:DD:D5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CB972FDFB3394B340200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/135c39c1-e113-36fa-97c6-959ef54e1fab.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396592
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cb:97:2f:df:b3:39:4b:34:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=7f3d576a-83f9-4eba-8472-83b4dda56452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f9:dd:3f:d8:21:b2:e4:6d:13:dc:78:6a:23:
06:a7:c3:0a:04:44:e8:89:05:b7:02:9d:b2:38:ec:
91:f9:61:e0:13:22:96:49:de:1e:61:df:a0:a4:f1:
49:17:f4:7b:25:a3:be:fa:9e:89:14:f5:37:ab:34:
bb:a0:5e:bf:a4:4a:ab:89:a7:17:cd:86:37:6d:85:
c5:a9:b0:35:91:e3:ff:cf:fd:b1:f2:d9:ca:d9:35:
47:90:c1:9b:6b:db:a8:b9:af:67:bb:26:79:7e:5c:
64:ff:71:8a:a7:c4:56:b0:b0:34:f0:38:31:bc:a9:
22:de:bd:9e:89:33:f0:a7:36:63:c4:41:1d:ad:d2:
7e:11:6a:09:81:09:60:40:30:e8:54:4b:fd:96:82:
55:57:8c:6a:f6:98:4e:a4:d2:8c:0c:a5:b6:49:30:
f2:fe:8a:06:00:62:d4:e1:4e:ff:e3:b0:2e:59:79:
00:e8:00:24:8b:91:82:9f:f8:1f:3f:f4:95:cc:c8:
51:09:66:c5:eb:13:c3:83:3c:f1:08:d5:a0:d7:d2:
71:60:ca:a8:18:de:ff:f3:a6:96:fb:66:21:0b:81:
0b:ef:f5:55:ea:e1:03:6d:e4:7f:3c:fe:5a:e2:31:
af:25:49:e6:65:92:dd:b7:ad:b1:1c:57:c3:79:5b:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4D:66:2D:1C:D5:DA:CF:64:38:88:78:03:56:B6:1D:14:8D:DD:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/135c39c1-e113-36fa-97c6-959ef54e1fab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:9f:a9:b5:49:68:b2:08:b4:ea:fc:64:de:09:c9:50:41:44:
f9:9c:48:2f:d0:33:75:0d:f5:10:a6:a2:06:46:68:65:83:d9:
b4:3d:3a:8b:40:9f:2c:ae:28:2a:3c:6b:0b:7f:17:cf:fd:ea:
21:9f:7a:c8:1f:7f:45:81:e8:48:46:3d:4f:00:85:83:c7:31:
15:cc:08:50:d6:ec:96:9e:b5:77:0d:f4:6a:8b:d9:9d:6b:fc:
5b:fe:e1:34:52:ec:74:b3:10:42:61:1d:23:c0:0c:01:05:83:
b1:78:5d:0f:f8:70:f2:d7:69:79:08:b7:ce:eb:09:57:4a:a5:
ae:88:3b:21:00:eb:66:42:fe:85:62:c0:0d:16:b5:1d:fd:45:
aa:7a:3a:86:7f:76:a6:5f:a0:55:e4:35:f1:66:b0:ba:63:d7:
20:e6:77:25:2e:d6:8d:7d:1c:d8:b0:e0:9a:03:d8:1f:bd:79:
7b:15:3f:7f:f1:ad:c7:f4:03:85:b1:a9:12:58:e5:c0:50:c6:
9a:26:95:c6:1a:c7:b6:4c:b5:10:92:97:65:f5:85:ca:9e:9d:
b5:ec:64:d9:7c:56:06:99:a2:f2:a2:14:bf:9d:24:65:51:4f:
1f:9a:b9:c4:b2:87:82:1e:f9:ba:2c:77:3c:a7:7c:74:38:90:
07:84:d2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:42:24 2025 by rpki-client