Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf182d65-9a80-3dc7-aca9-33c7634e5028.roa
File: cf182d65-9a80-3dc7-aca9-33c7634e5028.roa (raw, json)
Hash identifier: pZ2s1PA3pzxqHB4LEChI/EG+J5Z+RY6zb+hL3e83Wjo=
Subject key identifier: AA:71:1C:3B:98:FC:A5:40:9B:9F:D5:22:01:AC:D3:38:B7:82:8E:B6
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494733F759BA95327FDFE078C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf182d65-9a80-3dc7-aca9-33c7634e5028.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 396581
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f7:59:ba:95:32:7f:df:e0:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=8da9dfe2-9141-496a-9311-73f6b03cd8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:be:52:70:1f:8d:c3:06:bf:1f:6e:ef:e3:6a:
81:34:4a:60:cf:20:81:de:c5:d9:a8:7c:0c:6a:1c:
3a:88:78:fa:6b:bb:75:88:da:9d:ce:74:9d:69:47:
79:be:42:27:54:db:4d:f8:77:b5:32:47:51:bd:61:
58:af:35:13:84:97:df:2f:bd:45:15:16:62:ec:23:
ea:ad:b1:17:3f:cb:a0:40:44:66:d9:29:a6:8a:de:
fe:15:42:91:54:3a:a5:24:b4:99:b9:c1:6e:ab:7c:
61:96:be:0a:9e:55:9f:0c:f2:03:75:3b:9c:c0:e0:
a8:37:a8:75:63:42:e6:6d:9d:5b:a0:15:4b:ea:bb:
06:6f:04:2c:f2:9f:bb:ba:1a:ea:d6:77:9d:6d:f9:
96:04:94:24:39:3d:1d:a3:2c:dd:8b:ff:8f:93:fa:
f2:76:5b:a7:55:e6:4d:c0:32:9a:35:db:21:93:b1:
56:97:f2:4c:63:aa:4d:70:d9:b4:3e:0a:db:33:bc:
10:8c:e6:62:c2:c5:52:4d:f4:2d:3f:8a:b4:18:b6:
eb:f9:29:9f:9d:75:08:b6:88:bc:d8:79:c2:b8:0f:
97:9c:4e:01:cf:2d:78:5e:3f:a7:17:ff:92:e7:c6:
d4:34:76:f9:a3:44:ec:50:fb:c3:33:d2:f6:5c:e6:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:71:1C:3B:98:FC:A5:40:9B:9F:D5:22:01:AC:D3:38:B7:82:8E:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf182d65-9a80-3dc7-aca9-33c7634e5028.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:fb:dd:86:aa:ce:d1:8f:63:ab:a2:e6:55:b5:d8:85:fe:60:
11:3a:b4:39:aa:3b:e6:f8:83:03:0b:63:8f:9b:8c:82:2e:be:
b0:6d:85:1a:e3:3d:1d:8e:81:f6:b7:bf:55:c4:cd:88:4f:53:
ea:19:67:a5:11:6c:60:65:0e:07:a5:17:26:a3:6c:5d:f8:cc:
44:ed:4e:16:f0:8a:a6:20:37:d6:1f:41:8e:a2:d2:55:ca:35:
0e:16:08:44:c2:03:2d:82:0d:34:fa:7a:f4:93:02:54:8b:14:
58:b5:76:cf:96:61:80:44:af:07:5a:7a:57:b7:79:44:21:28:
58:e3:b1:bf:ab:6d:0e:a1:97:db:27:a9:52:16:75:a7:7f:41:
9c:e5:5f:f3:88:2a:ba:7b:34:2d:3c:a3:a7:24:24:fb:c5:81:
b0:f5:ac:d2:69:94:2b:10:61:9c:8e:25:d0:47:a6:6b:72:9f:
23:41:10:db:41:f6:a5:21:8f:66:da:0f:04:a4:a3:ea:65:0d:
14:1e:ac:76:9a:b4:0b:75:74:00:ba:d1:1f:3c:fb:8f:ba:77:
4e:68:f5:55:16:02:de:79:cd:88:7d:74:a3:d7:50:84:d3:cb:
79:49:9c:4a:d3:3b:e4:0d:92:83:fb:40:db:6e:f6:a8:f9:66:
55:5d:c5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:14:57 2025 by rpki-client