Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0aa1f25b-2121-37cc-b166-3c841367dfe6.roa
File: 0aa1f25b-2121-37cc-b166-3c841367dfe6.roa (raw, json)
Hash identifier: zc7TxcvstqyADgepQ4vSfNiPRfnZUGgKXeueZV1CCRg=
Subject key identifier: 87:57:85:A1:71:40:C0:8C:D4:6F:95:FE:BA:05:80:42:62:C8:AC:57
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494733F7AF60833BFA8DD50700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0aa1f25b-2121-37cc-b166-3c841367dfe6.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 396568
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f7:af:60:83:3b:fa:8d:d5:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=a1090f03-5c2f-4c8b-ae6e-ecabf5d12b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:e7:df:86:10:d8:a6:c3:5d:aa:c3:00:23:
7f:ae:d5:0e:93:ad:6b:89:6e:bf:65:0c:a1:7a:b3:
c4:f1:85:77:8e:12:c4:5b:0f:47:13:2f:a7:2d:f8:
ff:2d:fa:e0:d5:83:0e:55:7d:7a:ae:27:0e:df:2e:
86:d0:10:68:9e:77:ee:6d:51:d4:3c:92:3c:fb:a3:
5c:6c:7a:77:94:4e:28:01:a1:6a:89:1e:ad:6b:3b:
72:0e:f4:52:5e:4c:6c:6b:85:35:cc:d3:8f:02:f9:
a8:c7:e6:9f:97:b4:92:9d:63:6d:3d:2e:f7:e1:a7:
9f:dd:6d:a5:80:6b:42:9c:e9:5b:db:30:0a:30:b0:
41:d5:c5:d3:a3:e9:7a:4b:5f:c4:96:ca:da:e8:0e:
cb:5e:fe:d1:1e:28:f7:1d:f4:33:c0:b4:f0:7b:46:
30:75:4a:fa:82:4d:55:b0:8f:db:31:65:0b:95:cb:
78:0c:76:7f:35:67:4f:bf:b1:62:03:7f:b8:07:09:
c1:b2:57:ac:15:9e:d8:de:ee:35:18:fe:6b:70:f6:
7b:50:9b:75:dc:18:78:18:87:b7:26:d4:d9:12:00:
90:c8:70:98:47:35:03:e1:8e:97:e2:f6:16:61:dc:
3e:c4:7f:87:3d:56:2a:f4:b3:92:ae:8f:a0:ed:1b:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:57:85:A1:71:40:C0:8C:D4:6F:95:FE:BA:05:80:42:62:C8:AC:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0aa1f25b-2121-37cc-b166-3c841367dfe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:e1:c8:8d:97:18:d1:16:19:ca:c9:66:0d:df:da:a5:9d:35:
46:21:16:77:f0:74:7c:1b:b2:5a:15:76:3b:09:87:f7:74:cb:
bc:30:cf:04:f9:44:87:8f:12:99:79:94:0b:d4:02:4b:9c:5b:
41:7d:a8:97:13:08:66:96:22:bb:ad:de:4c:b0:24:d8:15:94:
fa:b8:50:ba:1f:02:c9:1e:79:61:ad:dc:ac:da:33:b3:b8:5b:
f0:45:1f:78:08:fe:c7:d5:79:12:c7:24:15:f4:03:88:e0:8b:
28:69:a3:64:72:64:f5:47:27:ee:30:0c:ff:12:0b:0a:22:6a:
06:6f:aa:b1:29:4b:37:76:0f:3f:5f:e5:7d:8e:70:25:8c:bf:
02:a2:23:94:dc:02:1e:47:cd:4b:92:16:ea:93:8f:2c:b1:ae:
38:3a:50:ce:58:57:dc:c9:48:df:3f:59:2c:22:4b:09:4b:1e:
72:19:af:e9:b5:2f:33:b7:15:8a:e3:7d:14:f1:14:8b:f8:1e:
18:1b:32:21:d1:bf:ed:03:fa:1d:b7:12:76:f5:5d:9e:94:e6:
96:05:b9:c9:ae:aa:76:b7:14:ae:9c:66:43:7c:e4:cb:41:59:
e3:36:39:89:ce:87:4a:81:89:6a:79:38:8f:df:52:4a:7d:80:
e0:47:d5:20
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElHM/evYIM7+o3VBwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
YTEwOTBmMDMtNWMyZi00YzhiLWFlNmUtZWNhYmY1ZDEyYjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO3n34YQ2KbDXarDACN/rtUOk61riW6/ZQyh
erPE8YV3jhLEWw9HEy+nLfj/Lfrg1YMOVX16ricO3y6G0BBonnfubVHUPJI8+6Nc
bHp3lE4oAaFqiR6taztyDvRSXkxsa4U1zNOPAvmox+afl7SSnWNtPS734aef3W2l
gGtCnOlb2zAKMLBB1cXTo+l6S1/Elsra6A7LXv7RHij3HfQzwLTwe0YwdUr6gk1V
sI/bMWULlct4DHZ/NWdPv7FiA3+4BwnBslesFZ7Y3u41GP5rcPZ7UJt13Bh4GIe3
JtTZEgCQyHCYRzUD4Y6X4vYWYdw+xH+HPVYq9LOSro+g7RvpXwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIdXhaFxQMCM1G+V/roFgEJiyKxXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGFhMWYyNWItMjEyMS0z
N2NjLWIxNjYtM2M4NDEzNjdkZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCN4ciNlxjRFhnKyWYN39qlnTVGIRZ38HR8G7JaFXY7CYf3dMu8MM8E
+USHjxKZeZQL1AJLnFtBfaiXEwhmliK7rd5MsCTYFZT6uFC6HwLJHnlhrdys2jOz
uFvwRR94CP7H1XkSxyQV9AOI4IsoaaNkcmT1RyfuMAz/EgsKImoGb6qxKUs3dg8/
X+V9jnAljL8CoiOU3AIeR81Lkhbqk48ssa44OlDOWFfcyUjfP1ksIksJSx5yGa/p
tS8ztxWK430U8RSL+B4YGzIh0b/tA/odtxJ29V2elOaWBbnJrqp2txSunGZDfOTL
QVnjNjmJzodKgYlqeTiP31JKfYDgR9Ug
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:37 2025 by rpki-client