Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d091613e-2b8b-3d8c-923b-59040e079dde.roa
File: d091613e-2b8b-3d8c-923b-59040e079dde.roa (raw, json)
Hash identifier: mVJE/FIk121PYcUAgQamOjKaLWT5ZQOupogAA35Pg/I=
Subject key identifier: B4:91:02:E7:D1:32:0C:6B:C7:CE:87:AE:25:D1:DD:D1:29:DE:E5:93
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CB221ADA98C2EBA09580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d091613e-2b8b-3d8c-923b-59040e079dde.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396571
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cb:22:1a:da:98:c2:eb:a0:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=b5df478b-ef14-4667-b447-b15456b99a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f5:05:8a:8c:36:82:94:b1:a3:b8:3c:53:b7:
8e:d1:57:a0:51:0d:c7:ff:73:17:31:02:4e:10:f8:
cd:d6:67:41:7a:ef:c8:67:29:58:e0:7b:e2:2f:30:
5a:25:8d:03:22:0d:d3:9a:01:75:28:c7:21:12:6c:
0c:7a:65:bd:2c:ed:3e:5d:f5:17:da:f4:58:ac:d1:
f7:b5:12:5f:be:df:2d:0a:23:2e:1e:ad:1f:ab:ec:
d9:cb:21:0a:98:5f:dd:c0:06:24:a5:6c:9a:60:82:
d7:39:21:89:3d:0d:19:3a:0b:c7:49:18:ec:35:e0:
36:27:43:fc:39:10:28:8c:2f:a4:3c:ef:29:19:2a:
d3:8e:b3:7a:f5:53:c2:0b:ea:fe:e3:cc:93:14:88:
fe:34:da:af:eb:67:f7:95:5f:e6:a0:6a:a4:40:63:
57:bc:10:cb:2a:89:1e:14:cf:b3:07:15:40:59:12:
e3:e7:26:e6:12:2f:e6:81:c6:25:67:73:a3:3a:64:
b1:92:4c:69:33:6a:40:8b:f8:be:78:ba:c6:fb:61:
78:15:45:93:21:24:b1:9a:5a:e5:72:e0:16:df:00:
ce:53:7f:bc:d8:54:67:0e:6c:42:6f:f4:20:17:34:
34:f0:ab:73:17:33:1b:b4:c3:6b:d2:9d:b8:da:df:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:91:02:E7:D1:32:0C:6B:C7:CE:87:AE:25:D1:DD:D1:29:DE:E5:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d091613e-2b8b-3d8c-923b-59040e079dde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:b0:30:ab:a2:a9:f3:dc:65:f7:e0:7b:65:bf:f1:8c:bf:32:
21:9b:a1:c1:ce:a2:b5:ac:84:fe:aa:ae:f9:89:19:94:1d:d4:
63:61:87:ec:cf:ac:81:a6:9c:ad:a8:b6:68:7d:9e:77:67:7e:
91:e2:53:b3:54:be:91:8d:e2:5a:7a:6d:bb:d9:fa:dc:30:26:
6a:53:cb:dd:8d:26:ea:6f:aa:d6:b4:0f:cc:bd:b2:15:e2:db:
82:26:95:b5:40:c6:51:4c:d6:4d:0d:5a:2d:65:f8:f1:25:e0:
6f:2a:8c:31:c5:37:3d:34:6b:6e:eb:65:1f:2a:64:71:94:74:
70:74:34:e0:f3:55:26:8a:79:8f:f5:49:f2:24:a4:74:38:03:
7e:dc:2c:39:0e:a0:0f:2f:cc:c5:2c:8c:1e:81:59:2d:29:a0:
fc:75:bd:47:ac:eb:68:0f:a0:8a:15:bb:f8:b3:5c:ee:89:1f:
37:d7:3c:87:05:10:21:48:2a:69:72:2c:e1:d0:48:4a:91:8a:
76:ad:36:8e:c9:ad:07:16:e3:65:88:de:f0:f0:2d:cb:65:0a:
2b:e9:02:01:42:66:7c:b0:12:01:88:2d:69:05:9f:c3:77:7b:
c3:69:72:19:d7:c6:4c:ec:b5:64:91:e0:c7:9c:37:3a:20:8a:
07:b3:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:21 2025 by rpki-client