Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac7b5952-e9cd-36eb-a334-37dd2b0f0378.roa
File: ac7b5952-e9cd-36eb-a334-37dd2b0f0378.roa (raw, json)
Hash identifier: K5eHe9KhV2Q0OEkNA9MWVh5n2BI5t15ZdsVLwY64p90=
Subject key identifier: A5:27:9D:AB:95:BE:BB:34:37:5E:5C:85:CC:86:79:7F:43:DA:8E:96
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CDADB3D89CB662045F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac7b5952-e9cd-36eb-a334-37dd2b0f0378.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396565
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cd:ad:b3:d8:9c:b6:62:04:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=4848ead4-710e-4a99-bc61-91b1c63921ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:f6:c2:5f:a5:6e:76:4c:b1:d1:ae:cb:99:
e4:7f:d1:3a:3c:08:31:e2:71:e2:cb:cd:e4:7a:9c:
f9:7e:8e:79:60:43:f3:7f:67:16:12:d6:6a:bc:dc:
23:18:a4:5b:03:3c:ae:54:c3:77:a2:80:64:f0:97:
41:0d:60:df:af:69:f5:8d:be:b1:fe:06:2f:51:22:
fb:7c:7b:ab:dc:37:6f:7e:92:cd:9e:be:98:39:1f:
7b:65:46:ed:f9:03:9d:8d:69:a3:8b:b8:8c:84:d3:
9d:4b:23:a2:7a:b4:c7:b0:3a:b2:b7:bb:0d:f2:f9:
63:e4:35:3b:e5:dd:37:2f:4f:f4:40:6f:fc:61:55:
97:ea:bd:3c:6e:bc:06:7c:c1:89:0e:75:31:26:54:
dd:1d:c8:83:1a:ba:c2:28:13:3d:91:72:33:34:7c:
cd:aa:02:06:64:cf:f7:5a:9f:ca:80:b2:38:b9:86:
f3:f5:26:9e:68:a4:26:a9:4d:e6:69:3b:0f:c1:f7:
cd:9a:a0:99:2b:55:74:81:43:61:11:e4:3a:0e:f2:
08:4b:1c:fd:ce:a6:ab:35:79:42:41:9d:e0:5a:90:
72:da:31:01:b6:a4:fc:ab:81:9e:fd:ee:96:3b:10:
73:9a:c2:ad:e2:12:76:af:20:75:5e:c0:58:2d:a2:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:27:9D:AB:95:BE:BB:34:37:5E:5C:85:CC:86:79:7F:43:DA:8E:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac7b5952-e9cd-36eb-a334-37dd2b0f0378.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:c2:5c:ed:30:cd:89:10:67:80:d0:16:a6:98:5c:96:09:8f:
11:2c:c3:1a:91:73:34:bc:c7:ab:f4:60:5f:f8:ca:ab:1b:9c:
67:ef:48:b3:a5:c9:74:cd:99:64:c0:7d:ed:18:ec:63:80:d8:
ae:ab:9f:3e:7f:dc:05:ca:b0:60:bf:a4:7d:c5:6e:1c:fd:c9:
d0:60:2b:3c:a1:a1:16:22:11:8b:ee:27:bc:a5:a3:80:48:b5:
1e:63:32:26:d1:9b:90:26:01:84:14:bb:04:19:d1:55:5f:09:
01:34:c3:c4:ce:e2:83:0e:6f:59:c0:76:94:a8:21:83:61:b4:
a0:dc:06:a6:ae:11:2f:bf:c7:fb:e7:65:77:72:8c:89:70:96:
8c:48:34:94:b5:0c:6c:0a:81:f8:d0:78:58:5f:16:e6:63:c6:
0a:83:c3:41:cd:94:02:94:5c:dd:3d:b3:a8:8f:74:25:27:f5:
05:14:09:92:cd:8e:9e:16:7f:8a:bf:cf:16:2c:a4:4c:89:a6:
a5:ab:7d:d3:31:e4:22:3a:36:2c:2b:52:29:3c:76:e3:71:72:
89:fd:63:b6:ec:87:23:90:5a:b8:a7:fe:1d:a1:68:64:e8:ce:
bf:a0:67:e8:cb:3c:7a:b9:4a:4a:14:40:5d:1b:e3:67:58:3d:
66:d3:d6:9f
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhmlc2ts9ictmIEXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
NDg0OGVhZDQtNzEwZS00YTk5LWJjNjEtOTFiMWM2MzkyMWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxH2wl+lbnZMsdGuy5nkf9E6PAgx4nHiy83k
epz5fo55YEPzf2cWEtZqvNwjGKRbAzyuVMN3ooBk8JdBDWDfr2n1jb6x/gYvUSL7
fHur3DdvfpLNnr6YOR97ZUbt+QOdjWmji7iMhNOdSyOierTHsDqyt7sN8vlj5DU7
5d03L0/0QG/8YVWX6r08brwGfMGJDnUxJlTdHciDGrrCKBM9kXIzNHzNqgIGZM/3
Wp/KgLI4uYbz9SaeaKQmqU3maTsPwffNmqCZK1V0gUNhEeQ6DvIISxz9zqarNXlC
QZ3gWpBy2jEBtqT8q4Ge/e6WOxBzmsKt4hJ2ryB1XsBYLaIkWwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKUnnauVvrs0N15chcyGeX9D2o6WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWM3YjU5NTItZTljZC0z
NmViLWEzMzQtMzdkZDJiMGYwMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCLwlztMM2JEGeA0BammFyWCY8RLMMakXM0vMer9GBf+MqrG5xn70iz
pcl0zZlkwH3tGOxjgNiuq58+f9wFyrBgv6R9xW4c/cnQYCs8oaEWIhGL7ie8paOA
SLUeYzIm0ZuQJgGEFLsEGdFVXwkBNMPEzuKDDm9ZwHaUqCGDYbSg3AamrhEvv8f7
52V3coyJcJaMSDSUtQxsCoH40HhYXxbmY8YKg8NBzZQClFzdPbOoj3QlJ/UFFAmS
zY6eFn+Kv88WLKRMiaalq33TMeQiOjYsK1IpPHbjcXKJ/WO27IcjkFq4p/4doWhk
6M6/oGfoyzx6uUpKFEBdG+NnWD1m09af
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:07:43 2025 by rpki-client