Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8ffa5dd-a688-3208-ab00-351cbccf276d.roa
File: c8ffa5dd-a688-3208-ab00-351cbccf276d.roa (raw, json)
Hash identifier: X/Ba3iXWB427+ZWZAiFqTnq/QoqMtG7njnRiU21F134=
Subject key identifier: F9:B8:53:14:BD:69:0D:5F:27:3D:F0:26:B7:B2:37:42:87:81:54:98
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695D10499A30C3C378E5300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8ffa5dd-a688-3208-ab00-351cbccf276d.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396554
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:d1:04:99:a3:0c:3c:37:8e:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=cf047bfb-95b0-422c-b9a6-81e62be892fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:a6:fc:f6:b8:8e:cc:d8:a8:b6:5e:f8:f4:
9b:5d:66:b0:73:d3:68:d0:52:4b:be:b9:5f:2f:21:
f5:76:6b:08:4f:a6:06:3b:f7:e4:be:9d:90:ed:24:
5d:d3:f5:0c:e4:7d:8a:55:fb:c1:18:67:24:d1:6f:
cc:f1:fe:05:b8:96:66:00:74:10:17:2d:33:8d:61:
2f:a3:db:aa:cf:c3:d4:b4:49:c5:37:ac:56:8e:16:
d2:cd:65:16:9a:76:55:d0:1d:9c:a7:06:da:d3:ec:
ea:ab:4f:5f:cc:47:d2:78:41:60:49:05:f2:a5:96:
fd:86:1c:9f:c8:db:37:59:3a:9c:10:eb:3a:5c:2a:
64:ca:f5:4e:e8:61:3d:ed:4c:4a:b7:7b:8a:fd:29:
53:9b:56:71:b4:68:75:d7:14:e3:0b:27:0d:8f:0a:
37:e8:0e:fe:2a:45:a7:ad:69:43:b7:28:b2:6a:11:
dd:92:19:06:f9:ee:02:10:5f:da:fe:d9:64:8d:a9:
8b:b6:7e:8a:42:f6:5e:21:07:22:61:31:d6:4b:be:
dc:b3:28:44:62:04:dd:c7:9b:4c:7d:79:d5:00:4e:
af:28:95:2e:e2:dc:2c:15:df:23:cf:30:28:aa:23:
72:24:60:96:b6:35:ce:92:b5:7d:ec:7b:67:e6:4c:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B8:53:14:BD:69:0D:5F:27:3D:F0:26:B7:B2:37:42:87:81:54:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8ffa5dd-a688-3208-ab00-351cbccf276d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:cd:7e:f7:fd:19:33:cf:6a:73:1a:5d:e8:b8:1e:8f:4d:70:
7e:2c:04:6c:16:ef:d0:4a:94:6f:8d:5d:a1:e9:ae:c0:d0:85:
5a:c2:49:47:de:70:73:29:a6:bf:ed:db:0b:36:3e:11:76:a1:
16:d6:4c:af:6d:57:04:02:a8:52:c9:34:67:01:47:f0:c9:1c:
ed:78:83:b8:6f:d1:68:b3:b8:e6:e5:98:c4:dd:1f:4f:a1:9a:
ae:09:4e:32:4b:90:56:3f:08:74:24:c4:64:fb:00:6d:ff:99:
9a:7e:2b:2d:1d:c4:96:a2:93:dd:97:68:17:71:af:52:5f:28:
da:e5:c3:46:9d:42:db:84:af:2f:fb:2c:5d:df:4c:a8:ea:91:
be:e8:e0:c2:00:86:cf:7b:db:93:b8:b1:ee:6d:a7:b3:bc:7f:
c1:58:08:7d:ae:4a:a5:22:b0:4f:64:ea:43:49:fc:35:8f:fa:
f0:4a:cb:e4:32:09:10:0d:3c:98:4f:ea:fa:8d:06:2e:b5:3a:
f2:35:94:ce:ee:d4:38:3d:ac:9f:61:14:8d:e2:d2:7a:ca:8d:
f6:21:97:65:55:37:fb:08:71:0b:cd:4e:6c:c8:0f:d5:f3:f8:
a1:52:72:c5:ea:78:aa:5f:6e:d4:71:b9:f5:f3:8e:19:b9:69:
c2:ff:1f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:41:53 2025 by rpki-client