Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9c0e80b-8173-3d98-a536-b4369dd734a3.roa
File: d9c0e80b-8173-3d98-a536-b4369dd734a3.roa (raw, json)
Hash identifier: eeeCAOhXO4vnEXs0ZZzhJHknguf0NgNPD2Pq6sIfS0s=
Subject key identifier: 7F:D1:E3:06:0F:A2:21:01:9B:40:18:8D:A2:7D:3F:82:2F:FA:AD:5F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CBA432E48158922D3800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9c0e80b-8173-3d98-a536-b4369dd734a3.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396558
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cb:a4:32:e4:81:58:92:2d:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=ab2fb65f-58cc-4a50-86a4-5073610aeb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:b5:a3:e6:8e:e5:31:ed:71:bd:84:39:f4:
c7:3a:de:b8:ef:2b:18:fc:bb:58:34:21:72:14:ee:
04:ff:3e:a2:11:5c:3d:ab:3f:30:db:81:f4:79:40:
b6:89:6a:b2:e8:19:fe:cc:4c:49:09:e8:01:12:e7:
71:98:35:be:f6:e9:e7:35:24:94:c1:30:70:13:f4:
c5:77:61:ac:90:84:ca:d8:12:df:0f:6e:72:5c:a8:
17:8e:3b:f6:bf:16:f8:dd:41:5a:97:ae:e7:27:23:
13:2d:17:62:5d:3a:2b:16:31:3c:8d:25:f7:de:33:
01:0b:1e:f7:8a:21:8f:a3:9f:9b:39:4c:1f:0c:be:
3c:ce:d9:a2:9d:d6:4f:3f:8f:ca:6c:8d:41:1b:47:
25:13:ef:b3:6e:ac:80:9e:92:55:04:68:f4:4c:df:
a4:d6:67:4a:e7:33:97:f5:0b:df:55:cf:f6:7d:8e:
fe:b1:ba:b4:67:65:f0:cd:e7:61:81:a9:b2:8c:32:
d8:93:d6:89:ba:0c:42:5c:b8:15:11:10:e0:fa:83:
0c:e2:38:ba:db:f7:4d:7c:46:91:4e:a8:cd:bc:1c:
96:d7:37:8c:54:63:83:52:33:89:ec:53:33:4d:95:
c2:74:dc:ad:d4:a5:42:d3:28:2a:cd:ec:f0:c1:87:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D1:E3:06:0F:A2:21:01:9B:40:18:8D:A2:7D:3F:82:2F:FA:AD:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9c0e80b-8173-3d98-a536-b4369dd734a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:87:b3:97:da:5f:19:be:2b:20:0c:5e:59:51:07:fe:e9:61:
b8:a0:a8:fc:8b:21:9c:6a:c6:e1:f6:de:25:b0:f3:24:82:99:
3e:ad:0b:b3:4e:fd:49:88:81:ae:55:29:4a:86:9e:16:35:23:
5b:e9:ef:d8:75:cb:45:af:23:48:11:39:29:83:50:77:b0:21:
6a:f7:12:04:78:ab:12:c2:81:32:c0:d8:3b:aa:3a:2a:51:74:
db:e3:36:fa:1e:2b:8c:84:a9:3b:e3:ae:c5:2c:5d:b6:84:b1:
3d:08:ec:a6:0a:cf:22:83:49:a4:38:7a:f8:49:70:d5:6a:47:
fb:1d:b9:d7:36:ac:22:1d:13:36:89:0f:13:41:a8:3d:c7:54:
72:14:0f:d0:08:59:9f:b3:ff:d0:2b:74:e6:1f:99:62:22:1c:
d9:41:7d:c4:09:0a:41:b1:36:3b:70:c4:ae:f1:35:d5:92:24:
45:17:52:42:91:c8:d0:e6:b1:67:98:51:5f:2d:6e:07:47:74:
bc:c4:1d:8c:2f:04:8c:4f:c4:76:70:23:97:5c:02:9c:51:bc:
f8:94:cb:b0:9d:ab:92:07:4d:a6:35:83:e8:75:40:17:17:81:
0a:2a:37:71:a9:92:d6:90:24:6d:e4:a3:ce:0f:1a:76:51:be:
05:83:d8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:19:27 2025 by rpki-client