Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19ca5263-4ea0-328d-9512-7555666c3507.roa
File: 19ca5263-4ea0-328d-9512-7555666c3507.roa (raw, json)
Hash identifier: XyXLwlAmFkWGyJ6dXLv6W2jsCcTAmsuL8Wrs0QvfjU0=
Subject key identifier: 7D:63:9B:25:4E:A3:4D:A7:2A:86:E7:35:8A:57:7E:23:DD:71:59:40
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CADC26F1DA1299F57540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19ca5263-4ea0-328d-9512-7555666c3507.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396543
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:ca:dc:26:f1:da:12:99:f5:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=ede549db-adf9-49d8-a2a9-a09b2b25ed41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:41:9e:58:52:2d:61:a9:43:5b:52:df:b5:
44:59:ab:d0:1c:a5:89:72:ae:4d:c7:f0:da:4c:ae:
8d:8f:11:4f:8b:ea:6f:08:be:28:07:6a:9a:94:22:
bb:7d:db:1b:c2:40:74:8d:57:ba:28:39:78:c8:b7:
bc:3c:7d:86:f4:52:75:27:ca:d2:a4:dc:f3:08:0d:
ec:33:c5:58:07:78:3a:4d:e4:ee:60:41:5f:5f:35:
7e:1c:b5:c8:c8:6d:81:6a:94:a9:5c:ca:9f:67:2b:
29:a8:ab:bd:86:0f:8f:57:b9:9f:16:9e:f3:bf:e9:
3a:ce:37:69:f8:6e:68:cc:80:28:93:21:af:f1:6b:
9b:7b:87:2d:b3:cb:31:10:2b:dc:60:f1:61:e8:20:
2d:87:d5:3b:9e:9f:54:72:6e:71:92:80:d8:8e:64:
4a:f4:fd:53:5d:4e:46:d8:6b:39:d4:3f:d4:59:4d:
63:e6:6f:76:95:45:e7:46:fe:ad:2e:8f:6f:aa:bd:
d6:ba:61:f4:f7:05:3a:1f:f1:81:28:a0:bb:3a:fe:
1a:25:78:4c:12:6d:15:6c:48:fd:ab:fb:91:f5:7c:
4b:82:06:95:d3:0d:e1:c7:38:7b:f6:59:a9:99:39:
87:15:17:da:0b:12:04:02:ea:68:dc:c5:53:78:7b:
3d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:63:9B:25:4E:A3:4D:A7:2A:86:E7:35:8A:57:7E:23:DD:71:59:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19ca5263-4ea0-328d-9512-7555666c3507.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:99:10:f4:b3:73:9a:00:5c:e4:c8:a0:65:7e:b4:ed:f4:4d:
21:93:d6:30:d5:b4:a7:30:e4:5c:c2:b4:63:42:e1:8a:74:b2:
cf:b7:b5:84:42:c6:20:81:ca:3c:08:28:c5:b3:12:ce:8e:5c:
49:13:64:3e:63:68:24:0b:94:b8:cf:82:42:27:91:ee:99:96:
ed:f3:d4:b3:ca:18:e0:ec:db:d2:4a:41:1e:90:07:e8:20:4b:
6e:f8:f9:d9:b8:c9:43:aa:d7:64:91:6c:af:ce:85:82:11:54:
80:4b:a5:f1:db:1c:28:4f:40:ac:6e:37:f0:94:20:bd:31:b9:
bc:5a:e0:3e:bf:8f:94:06:14:3f:e9:21:2d:03:10:c4:02:37:
fa:f3:1a:4e:66:4f:b7:eb:f2:77:dc:d8:cd:9a:80:19:4b:3d:
00:75:d2:4f:08:d8:25:ce:ac:9e:f3:95:f2:ec:b6:8b:24:e6:
f7:98:f3:7d:7a:34:17:8c:ad:fc:2d:bf:14:0c:bb:c9:89:11:
0f:e9:8c:98:bf:5c:23:ed:25:c5:4c:4a:93:2d:83:50:82:78:
df:b4:cf:a5:bd:b6:e5:8b:ad:a1:4a:ff:99:46:35:d1:39:ad:
7d:db:de:c5:8f:c1:a3:ac:4d:af:57:a7:73:64:61:f0:5f:ea:
67:b2:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:15 2025 by rpki-client