Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9d311de-293d-3b11-9067-8c26f71ede3d.roa
File: a9d311de-293d-3b11-9067-8c26f71ede3d.roa (raw, json)
Hash identifier: xNaqHar96+lRwIiPRk4yQ0HGu9nAsCjQMueq/aZw7LA=
Subject key identifier: 7B:CF:07:DF:52:17:47:D0:62:F9:F4:6B:CE:AF:13:43:C1:FE:38:3F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CD60285A82E6B5890C60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9d311de-293d-3b11-9067-8c26f71ede3d.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 36617
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cd:60:28:5a:82:e6:b5:89:0c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=3de8fd5b-e61d-439e-8af6-0c03905fec48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:46:59:87:97:36:2a:5a:27:88:93:0a:91:99:
a6:83:e3:fe:28:05:ef:c7:e8:0b:e4:42:3b:f1:d0:
b0:b2:57:ef:60:ea:4a:18:e0:00:75:11:94:38:2d:
59:28:38:ec:c4:98:6f:f3:98:4c:db:af:46:03:c4:
a3:ae:16:42:57:d0:7f:0f:98:ad:15:bf:a1:ff:3b:
50:9d:2c:f9:38:a7:37:7f:32:77:01:77:bc:0b:21:
33:23:bc:99:e9:c7:b6:de:ab:ec:09:34:8b:70:46:
65:ea:62:0a:20:f5:6d:42:dc:ab:6b:13:1e:8f:92:
ce:ee:76:6d:f0:cd:40:f1:c6:54:87:c9:77:59:cc:
dd:70:15:ac:63:94:1f:0a:07:a4:fc:6f:51:bf:4c:
89:d1:07:a2:d4:25:c7:44:67:2e:ff:a2:f9:4b:f0:
8a:a6:4d:ef:e4:e8:29:76:ee:55:33:39:20:87:52:
bb:08:da:fa:76:cb:07:df:2a:4c:f5:e5:c3:63:e2:
ec:fd:7b:e0:6d:d5:eb:03:b8:f1:10:a2:52:09:85:
c6:15:80:6d:b0:41:e7:a1:0b:4e:f8:25:01:91:6d:
db:80:00:51:cc:58:6f:7f:d6:f8:7e:17:77:4e:19:
ef:8f:64:d5:43:86:b1:f2:c5:8d:19:fb:b2:6a:bc:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CF:07:DF:52:17:47:D0:62:F9:F4:6B:CE:AF:13:43:C1:FE:38:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9d311de-293d-3b11-9067-8c26f71ede3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:18:e1:a9:1e:23:3c:4d:56:26:1a:a7:8f:42:aa:29:cd:5b:
7a:2b:cf:6f:9f:bb:3b:ca:7a:75:2d:d9:b1:db:ae:75:72:fa:
37:9c:12:dd:97:b5:5c:71:69:49:14:36:14:ce:4d:16:b6:46:
b9:0f:24:6b:45:3a:1c:16:28:7a:70:59:9a:e4:b2:8a:0a:10:
21:70:48:22:41:89:ce:3f:f5:68:b7:95:ce:7d:85:0a:bb:c7:
91:62:d9:ae:5e:b2:48:d7:a1:4a:bf:08:9c:9f:64:e2:e9:3b:
d9:65:5d:28:32:56:ee:6a:da:0d:45:37:99:89:c1:20:5f:e5:
14:46:f3:5d:e3:25:27:92:7c:9e:e7:12:3c:4b:8e:e6:1b:7c:
6a:64:5f:97:10:73:ff:bf:f1:01:03:af:69:44:8c:11:b3:b6:
c7:aa:ff:1c:b2:96:b1:d4:f9:f0:48:0a:68:62:d3:f8:1f:5f:
06:6c:49:1c:b1:30:b8:58:d3:3c:f8:99:ca:e2:ae:b1:0b:32:
20:80:0b:87:4c:98:de:5a:24:74:c8:30:a7:a6:5f:96:db:c3:
40:18:76:5c:e6:fc:ee:f5:9a:e3:b3:21:2d:78:90:02:3d:b2:
57:44:05:64:8a:8f:2e:a5:d0:e9:47:7e:51:0e:54:68:c6:89:
46:9e:fd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:57 2025 by rpki-client