Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78ec8c03-6eef-3f06-b29b-34441b530fe2.roa
File: 78ec8c03-6eef-3f06-b29b-34441b530fe2.roa (raw, json)
Hash identifier: ihkeIgFD9ItIKJPGju5Y2fJs87D+RYoX4eFL4e6Fpug=
Subject key identifier: 04:5F:80:34:B9:2F:49:39:14:0D:AA:F4:C2:02:E1:F3:62:C9:88:F2
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CB04CEF0DA4DA1573EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78ec8c03-6eef-3f06-b29b-34441b530fe2.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396586
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cb:04:ce:f0:da:4d:a1:57:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=1a26f4af-493e-4d4a-9ebf-dd855fa90049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ff:09:35:ec:ab:26:7d:27:0a:b5:15:46:33:
ef:c9:f0:ee:ad:a2:dc:5d:6f:a2:eb:3f:ca:4c:75:
f7:bf:50:4e:31:32:50:9f:34:03:cf:66:d2:cf:71:
a7:55:b4:0e:bd:91:e6:26:cc:9b:1e:fe:6b:5a:3f:
a5:0a:31:31:d3:1e:00:94:9e:b4:2e:25:1c:0e:0b:
6c:da:98:1d:47:8c:a7:ff:38:02:02:1b:ee:d5:c4:
22:1d:47:bb:61:b6:1d:d7:90:96:44:40:57:c3:ee:
4c:cf:14:61:a5:22:c3:13:01:12:40:51:29:e0:62:
56:fe:9f:4a:56:11:bf:d9:8f:1f:f1:58:14:61:b3:
5f:82:2c:e3:55:0f:0d:ce:9c:71:b7:03:30:46:48:
ba:35:8b:2a:87:30:e5:45:8d:26:eb:31:87:97:72:
ca:bb:f7:85:3a:60:c4:df:df:6b:52:6c:dc:ff:09:
ab:e9:92:d2:ab:a9:43:49:f0:60:c2:2f:49:8a:ca:
5f:61:2d:8c:0c:f2:e2:09:b9:99:f1:30:8d:93:db:
08:34:8c:33:32:ca:85:7d:5a:1d:01:18:d7:28:90:
76:24:c5:59:53:79:19:50:e5:15:b2:a0:6a:2f:fa:
2c:95:9c:e2:04:f9:e8:be:d3:59:7f:15:8f:15:59:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5F:80:34:B9:2F:49:39:14:0D:AA:F4:C2:02:E1:F3:62:C9:88:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/78ec8c03-6eef-3f06-b29b-34441b530fe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:45:24:c1:9d:c1:48:9b:5a:08:a1:48:38:d0:d6:a0:b3:d1:
86:50:3c:90:6f:74:8b:75:48:0b:10:39:05:6f:88:a6:7e:3e:
81:eb:d6:ba:94:00:0b:2c:ea:fa:39:f9:29:8e:68:9f:1f:33:
64:17:f2:aa:f4:00:92:0e:53:be:7e:42:95:2e:22:2d:02:27:
d4:ec:f1:1b:08:12:ff:bf:3e:17:cc:15:bd:ff:c1:c4:6d:85:
43:c1:03:52:90:6c:d9:57:e0:25:aa:09:53:87:21:65:e6:11:
ae:3e:be:e2:db:ab:b0:b6:f0:aa:5e:52:01:ab:45:8c:e2:3e:
66:f2:cf:a2:fc:54:82:2e:ba:df:18:f2:5d:61:3a:05:da:b1:
09:2a:36:43:0c:f5:95:50:e6:fa:68:be:83:24:dd:3b:13:47:
32:7f:e2:95:8e:0d:4f:0f:eb:6b:2a:9c:7e:52:f3:72:c0:05:
d2:61:39:ac:e3:d9:f8:89:00:d3:a5:7f:ee:73:dc:e2:55:dd:
46:3d:80:44:46:4f:37:69:3c:45:0b:9e:2d:0f:32:e5:59:80:
a1:19:78:51:a9:55:ad:23:97:5f:49:af:35:16:76:3d:06:26:
60:05:3f:e0:4c:41:83:f2:b6:6a:d0:e0:53:c8:0f:a0:fd:0f:
c5:db:b5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:03:09 2025 by rpki-client