Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a89a349f-b76c-3ade-82b7-ff151be9ed3f.roa
File: a89a349f-b76c-3ade-82b7-ff151be9ed3f.roa (raw, json)
Hash identifier: puOhlhq4lAUJoumkNrgb1S6oNCT8Ue1mYtZuwm8hdpg=
Subject key identifier: C3:7D:E6:AF:5F:9D:03:AB:F6:D8:4B:F3:5F:E1:5D:55:9D:21:39:F5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695D07D0D63C42DB34717C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a89a349f-b76c-3ade-82b7-ff151be9ed3f.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396588
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:d0:7d:0d:63:c4:2d:b3:47:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=ea6466bc-e358-4b2b-95e1-00334d29c707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:8d:db:91:00:d3:63:74:3d:80:47:d7:f5:
83:d4:e8:57:03:7b:87:6d:ce:26:f4:da:66:c7:a9:
14:fa:6f:95:56:cb:3b:a2:b4:52:d1:eb:9b:41:9b:
8c:a9:2d:ba:bd:b1:a4:8e:86:7c:c2:1d:d4:2b:be:
fd:84:d6:3d:39:92:e9:7a:bc:a4:76:e5:bd:a1:e6:
80:0e:1c:c4:b4:91:63:26:d0:5c:92:da:bb:38:90:
8b:3d:87:a6:a0:d7:c7:d1:1e:b4:a1:16:76:1f:93:
1a:c1:63:81:b9:dc:a0:c3:f2:10:b6:43:97:3b:42:
89:35:2d:c5:73:81:41:5f:db:97:74:f0:d0:8b:6f:
95:66:6f:f2:86:2a:ce:44:21:77:2c:91:7b:1b:53:
7a:57:06:29:c2:69:44:6f:1e:a9:cc:e0:e1:13:cc:
2b:f2:c6:82:50:4e:a4:4a:77:0c:55:19:8b:0c:0e:
4f:ac:a2:a8:69:93:dc:f8:21:58:23:59:89:e7:52:
e9:cd:4f:f6:b4:6a:c7:87:52:d9:18:92:bd:c7:fc:
4b:80:7b:37:f5:da:91:30:53:de:91:e5:ab:6e:ba:
d2:76:06:7b:92:27:5e:87:19:32:15:38:b7:ca:e0:
d6:c1:df:3b:6b:6e:7c:8d:7b:95:55:9b:79:77:72:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7D:E6:AF:5F:9D:03:AB:F6:D8:4B:F3:5F:E1:5D:55:9D:21:39:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a89a349f-b76c-3ade-82b7-ff151be9ed3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:25:20:c4:da:c1:62:40:15:c0:fb:75:91:bb:73:38:34:de:
a8:b2:8c:80:24:12:e8:69:50:c1:95:2c:89:e3:86:27:df:86:
7b:0e:63:c5:6f:c9:c1:ef:30:18:cc:14:16:97:72:0e:ec:ec:
f7:0c:46:f7:d7:ed:04:3a:85:8d:2b:a9:3c:5f:56:02:b7:99:
e7:e2:15:1a:a8:20:de:6b:8d:d2:ca:c4:c6:5b:61:45:bd:99:
bf:2c:9b:d1:14:3e:8a:b7:52:1e:c7:36:00:8b:03:8b:aa:27:
8f:9e:63:b6:c2:61:8b:b7:91:a7:f1:02:72:56:db:4b:7d:d3:
d6:88:67:be:c5:f3:23:3e:3d:0b:ab:09:4d:eb:df:1e:c6:3c:
39:11:01:49:c5:20:20:b3:12:5f:1d:d3:46:d9:33:c8:3f:be:
ad:e0:20:5a:bb:10:67:61:06:bd:9c:a5:79:f0:d4:ee:86:98:
bc:64:b9:10:cb:b8:25:14:82:47:25:fa:56:2c:0a:b7:be:bc:
ad:f7:0e:5e:24:85:fa:14:e8:54:a5:5f:2f:d8:3e:e6:de:1d:
6f:83:52:3f:b6:fa:e4:57:ee:a5:d5:87:56:49:98:9d:2f:12:
9f:39:58:60:27:35:af:d2:02:bd:92:a1:40:74:c6:b8:dd:5b:
96:3d:6a:58
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhmldB9DWPELbNHF8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZWE2NDY2YmMtZTM1OC00YjJiLTk1ZTEtMDAzMzRkMjljNzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJCN25EA02N0PYBH1/WD1OhXA3uHbc4m9Npm
x6kU+m+VVss7orRS0eubQZuMqS26vbGkjoZ8wh3UK779hNY9OZLperykduW9oeaA
DhzEtJFjJtBcktq7OJCLPYemoNfH0R60oRZ2H5MawWOBudygw/IQtkOXO0KJNS3F
c4FBX9uXdPDQi2+VZm/yhirORCF3LJF7G1N6VwYpwmlEbx6pzODhE8wr8saCUE6k
SncMVRmLDA5PrKKoaZPc+CFYI1mJ51LpzU/2tGrHh1LZGJK9x/xLgHs39dqRMFPe
keWrbrrSdgZ7kidehxkyFTi3yuDWwd87a258jXuVVZt5d3LfKwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMN95q9fnQOr9thL81/hXVWdITn1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTg5YTM0OWYtYjc2Yy0z
YWRlLTgyYjctZmYxNTFiZTllZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAxJSDE2sFiQBXA+3WRu3M4NN6osoyAJBLoaVDBlSyJ44Yn34Z7DmPF
b8nB7zAYzBQWl3IO7Oz3DEb31+0EOoWNK6k8X1YCt5nn4hUaqCDea43SysTGW2FF
vZm/LJvRFD6Kt1IexzYAiwOLqiePnmO2wmGLt5Gn8QJyVttLfdPWiGe+xfMjPj0L
qwlN698exjw5EQFJxSAgsxJfHdNG2TPIP76t4CBauxBnYQa9nKV58NTuhpi8ZLkQ
y7glFIJHJfpWLAq3vryt9w5eJIX6FOhUpV8v2D7m3h1vg1I/tvrkV+6l1YdWSZid
LxKfOVhgJzWv0gK9kqFAdMa43VuWPWpY
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:03:02 2025 by rpki-client