Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a34798a-a552-311f-9f9b-eeaa46e7777d.roa
File: 7a34798a-a552-311f-9f9b-eeaa46e7777d.roa (raw, json)
Hash identifier: USu0U5uRJcghSqQhpUAMM3oUzTU60c1QgQtax1g0lN8=
Subject key identifier: 6E:CA:27:12:3E:55:9B:F2:C2:86:CB:8E:08:13:C9:CD:CB:58:3F:7F
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CC7090E878222F0FD4C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a34798a-a552-311f-9f9b-eeaa46e7777d.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 397211
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cc:70:90:e8:78:22:2f:0f:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=3f06184c-576e-45a3-b48d-227c8ee84bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:d5:9a:fa:39:3a:27:b8:d7:cf:1a:eb:84:
16:27:f1:07:4d:5e:2a:be:4c:cd:43:30:3c:19:e0:
68:47:7f:2f:47:3b:0a:07:da:11:e7:7b:4b:96:74:
d7:c8:ce:18:c1:0e:e2:46:ae:9a:88:1a:45:44:6d:
c7:61:26:17:05:e5:6b:db:b7:5c:7d:ec:8d:c5:80:
b7:bf:44:b6:6d:9f:86:b8:bd:43:01:03:f4:aa:c6:
4b:0e:fe:61:de:25:cd:7a:23:92:79:e4:e7:12:93:
f5:72:cf:5d:4e:4b:97:cd:4e:16:c2:1a:40:19:e5:
29:b4:67:9b:01:86:16:29:4d:7b:78:a7:9b:4b:04:
e0:17:c4:e8:cc:a9:1d:52:51:af:f0:08:61:0e:85:
e9:d9:b4:7b:a4:08:e4:57:b9:d6:7c:e4:7a:f7:a7:
72:b3:7f:48:5b:cb:5e:07:df:82:af:92:a4:7f:62:
d0:5a:5b:c2:be:82:e2:a0:a1:8e:9a:e3:51:fd:56:
a3:09:ae:68:51:3d:a7:89:67:b6:bf:a3:4f:59:bf:
5e:dd:a5:49:95:e8:cc:31:3d:28:42:23:15:93:ee:
fc:48:23:02:93:ed:85:8d:d6:1b:8c:7d:61:21:19:
70:f5:79:1c:90:94:d2:56:16:6b:e6:d3:f3:c8:02:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CA:27:12:3E:55:9B:F2:C2:86:CB:8E:08:13:C9:CD:CB:58:3F:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a34798a-a552-311f-9f9b-eeaa46e7777d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:80:f7:79:35:eb:66:ae:18:8b:a2:60:f2:63:b5:00:90:c3:
7e:0b:44:dc:14:0c:56:b7:f7:1f:14:b6:90:19:77:36:69:cd:
d3:14:c7:cc:b4:c4:6c:54:1d:45:c7:b7:38:21:2d:30:c0:ea:
08:9c:55:aa:e8:15:f1:68:ef:94:47:51:c4:2d:07:bf:b0:eb:
33:26:4e:0c:d6:44:86:1e:aa:73:44:db:fd:52:ca:8e:ad:00:
da:5e:56:85:d4:12:0d:72:66:b1:76:f1:2e:8c:9c:0b:67:da:
d0:b4:f5:94:8c:aa:5e:50:84:75:2d:ac:9f:e3:d9:62:d0:76:
c5:e4:57:fe:22:37:28:b6:6a:e5:eb:3e:30:cc:1a:4a:70:b8:
11:4e:59:b7:0f:f2:4f:35:b9:d1:87:78:66:b5:b8:61:f1:25:
9a:ce:ac:70:d5:12:24:56:1c:83:27:c5:f7:dd:a8:bd:57:68:
5e:9b:ae:9a:a5:d5:ec:31:3e:7b:15:32:b9:86:fa:df:ee:6c:
b8:bb:80:57:2a:da:66:7c:60:9b:89:17:4f:b2:b7:d0:0b:4f:
fc:15:63:a6:ca:e5:1c:7f:2b:db:ab:b2:ae:40:42:4e:9b:c5:
ba:96:8e:af:52:a5:a4:46:99:f7:ad:1c:d1:af:ef:78:e5:e0:
87:b6:82:ac
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhmlcxwkOh4Ii8P1MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
M2YwNjE4NGMtNTc2ZS00NWEzLWI0OGQtMjI3YzhlZTg0YmJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hnVmvo5Oie4188a64QWJ/EHTV4qvkzNQzA8
GeBoR38vRzsKB9oR53tLlnTXyM4YwQ7iRq6aiBpFRG3HYSYXBeVr27dcfeyNxYC3
v0S2bZ+GuL1DAQP0qsZLDv5h3iXNeiOSeeTnEpP1cs9dTkuXzU4WwhpAGeUptGeb
AYYWKU17eKebSwTgF8TozKkdUlGv8AhhDoXp2bR7pAjkV7nWfOR696dys39IW8te
B9+Cr5Kkf2LQWlvCvoLioKGOmuNR/VajCa5oUT2niWe2v6NPWb9e3aVJlejMMT0o
QiMVk+78SCMCk+2FjdYbjH1hIRlw9XkckJTSVhZr5tPzyAJFowIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG7KJxI+VZvywobLjggTyc3LWD9/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2EzNDc5OGEtYTU1Mi0z
MTFmLTlmOWItZWVhYTQ2ZTc3NzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBkgPd5NetmrhiLomDyY7UAkMN+C0TcFAxWt/cfFLaQGXc2ac3TFMfM
tMRsVB1Fx7c4IS0wwOoInFWq6BXxaO+UR1HELQe/sOszJk4M1kSGHqpzRNv9UsqO
rQDaXlaF1BINcmaxdvEujJwLZ9rQtPWUjKpeUIR1Layf49li0HbF5Ff+Ijcotmrl
6z4wzBpKcLgRTlm3D/JPNbnRh3hmtbhh8SWazqxw1RIkVhyDJ8X33ai9V2hem66a
pdXsMT57FTK5hvrf7my4u4BXKtpmfGCbiRdPsrfQC0/8FWOmyuUcfyvbq7KuQEJO
m8W6lo6vUqWkRpn3rRzRr+945eCHtoKs
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:58 2025 by rpki-client