Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/047ed399-ddca-369f-a744-cd3a1087acab.roa
File: 047ed399-ddca-369f-a744-cd3a1087acab.roa (raw, json)
Hash identifier: 7y9OY/ZXoxs0o7VGzJiIeh7V3n1SgtRU9Fj8LD4QHfE=
Subject key identifier: E2:D2:61:0A:E7:98:AD:2F:5E:B2:51:80:64:1D:AD:67:D7:66:D9:7C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494733F95976D7ECF9516EEEC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/047ed399-ddca-369f-a744-cd3a1087acab.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 396615
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f9:59:76:d7:ec:f9:51:6e:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=cb0cc931-61ea-4c4f-94a3-af0103bbd59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:c7:10:41:7a:ef:a4:be:ce:36:e8:17:04:
d0:c8:5f:93:37:23:58:8a:fb:a1:95:c8:33:33:f3:
93:db:5a:ec:10:ad:21:6a:0f:04:a3:54:64:9e:40:
4d:5d:45:e2:fa:95:b2:c6:e9:cc:19:75:ba:ff:0e:
2a:75:5a:b2:a5:7b:70:53:26:f6:2b:ef:88:33:3c:
5c:b4:f4:12:6a:77:84:cb:84:7c:97:0f:75:88:11:
2e:c8:c1:c1:74:37:ad:05:05:e2:dc:41:e5:70:de:
03:6d:7e:87:8a:51:ea:3a:43:14:94:38:b7:04:5b:
11:f1:95:79:9b:cb:92:a8:bf:4a:b5:10:3b:1e:2b:
24:48:27:ef:38:70:ee:4a:92:03:ce:93:89:96:72:
7e:3d:02:2c:d6:64:1f:a7:3f:4d:7d:0c:14:ef:ff:
37:0c:09:a2:e9:09:b5:f3:a3:7f:34:cc:c4:58:44:
94:55:7c:47:6f:31:63:e5:bd:14:1f:fc:55:64:95:
14:78:f4:11:7e:e9:6b:bf:7d:94:34:8b:87:2a:6b:
cc:0e:45:d7:54:d1:11:c9:88:43:99:9d:81:a3:6d:
51:bc:03:4f:72:07:83:79:74:f1:30:8b:17:a3:7d:
e5:35:d0:ca:3d:b0:72:60:89:e6:26:ff:32:ac:cf:
20:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D2:61:0A:E7:98:AD:2F:5E:B2:51:80:64:1D:AD:67:D7:66:D9:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/047ed399-ddca-369f-a744-cd3a1087acab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:da:f6:68:bb:e7:a2:33:99:67:35:f8:95:45:b4:16:a9:02:
83:56:37:52:1c:68:54:02:a7:32:b0:a1:b8:05:31:28:13:08:
9c:ee:10:79:14:b1:89:19:6b:8c:2e:ea:9c:ee:eb:35:09:c5:
c7:f7:93:f2:f1:02:17:ec:51:87:31:94:47:11:3c:d0:d8:92:
21:b8:01:10:8a:6a:19:ef:57:47:cb:83:65:53:8a:48:5e:2e:
0b:34:e0:85:01:3d:90:55:0b:28:00:d0:32:8c:05:fd:66:4a:
69:34:20:25:04:dc:fb:5e:19:79:3e:8b:42:3c:f7:d8:ca:08:
c0:bf:4e:f0:78:bb:24:f8:04:14:64:06:7b:78:64:82:25:13:
01:ab:e5:3b:58:ce:30:96:47:8c:27:de:62:58:d7:6b:89:61:
92:eb:19:c0:51:a6:ba:1b:8d:24:22:02:52:b9:41:b1:5d:87:
f7:e9:68:b9:1d:71:df:05:e4:37:c5:67:94:de:ca:8a:33:ed:
dc:e7:4e:88:2b:97:71:b1:84:b9:ed:9c:9b:a0:d1:ad:3c:75:
fb:65:bf:6d:92:cf:5d:78:c2:42:87:77:f0:40:36:3f:3a:a5:
91:7f:14:12:fc:30:b9:b6:3d:4e:42:d8:72:b7:57:78:82:58:
22:52:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:21 2025 by rpki-client