Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea374711-4076-325b-ad5e-8add964e4d5a.roa
File: ea374711-4076-325b-ad5e-8add964e4d5a.roa (raw, json)
Hash identifier: F2O5KSrFyCKvSBPeQJoyDxDebwocU6p0XQ5t9G0UeG8=
Subject key identifier: 2B:FC:C8:E0:AB:C1:A0:18:D4:53:3B:19:2C:4E:7F:70:4A:43:F4:AD
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494733F48AE0DC63B76FE99610
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea374711-4076-325b-ad5e-8add964e4d5a.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 396559
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f4:8a:e0:dc:63:b7:6f:e9:96:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=053ce725-607c-4c12-9132-327fb5e46a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:54:07:62:22:44:46:66:3e:47:7f:29:f9:d5:
59:86:66:87:33:6e:45:52:97:36:1c:f3:ca:f7:63:
6e:3c:c4:d8:7f:88:95:8b:e7:af:c9:38:8f:7a:49:
0e:4b:29:7c:58:ae:31:3b:de:02:c2:63:2e:a8:ec:
9f:66:97:fc:1b:93:c5:c7:63:3c:4a:29:d9:08:8e:
16:9b:b5:d7:c3:a4:9f:11:0e:8a:6c:97:fa:6d:d6:
a0:c5:69:94:2d:42:b2:f0:75:72:5f:06:27:18:00:
cb:5d:bb:06:42:13:91:69:19:d5:9f:c4:57:72:56:
1f:dd:20:1b:bb:ed:ff:e1:24:97:bf:3c:eb:dd:c7:
0a:2b:75:3e:b8:08:41:da:9c:a0:a0:96:9e:ae:d7:
ff:e5:fb:ef:75:06:60:f4:da:0c:c1:88:cb:c6:16:
d3:f5:9e:61:f0:fa:24:72:a7:0c:d1:3a:53:dd:ea:
8a:9c:03:94:22:2d:a4:91:23:65:07:2b:b7:45:c3:
af:4d:e4:31:5e:d2:d9:dc:95:0f:dc:72:98:04:8f:
d6:9b:94:56:32:dc:39:c9:07:a3:e1:d4:67:9c:d0:
94:0f:a9:0a:54:df:21:f6:00:ae:37:4c:9a:69:25:
4e:5b:31:f3:32:23:0a:b7:7d:3b:82:c4:5a:c4:ce:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FC:C8:E0:AB:C1:A0:18:D4:53:3B:19:2C:4E:7F:70:4A:43:F4:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea374711-4076-325b-ad5e-8add964e4d5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:21:3d:36:8a:ef:a4:21:79:6e:31:d6:84:00:d1:a8:85:05:
e0:33:65:d2:50:07:ba:22:aa:2f:09:c5:80:91:cd:99:c6:61:
1d:f3:60:e4:ab:33:04:be:cc:23:38:86:3a:e3:1a:90:2a:5c:
c2:20:a3:83:be:da:06:a5:99:ce:94:64:6f:a4:42:d4:23:9b:
54:8d:2d:4e:56:3d:b5:3d:2e:4c:26:ce:d5:57:d7:c1:36:9e:
44:91:c8:c9:1e:4b:fa:3c:e3:87:28:2a:80:4f:44:4d:97:6a:
8f:e8:0d:69:8d:31:91:c0:a4:df:54:d5:31:cd:b4:9e:8a:ff:
fb:e9:82:99:b6:16:92:6c:71:b8:92:af:0a:36:b4:64:4e:ac:
03:30:c8:5a:69:88:a5:95:e0:28:87:89:06:b9:d3:a0:75:46:
7e:98:85:71:88:62:17:cb:b6:8f:8e:a5:8c:80:f3:d5:85:2d:
2e:58:d2:23:bd:94:55:71:3e:14:e3:d4:d9:57:ec:d1:61:1d:
48:92:bb:4d:9d:51:ac:66:d9:0b:27:bd:10:dd:d1:6c:f4:33:
53:9e:cc:55:f0:9e:a2:58:53:88:32:17:3c:39:c0:84:56:50:
a1:87:84:9c:e8:81:42:b3:6b:a6:02:53:1e:04:c2:b9:1e:76:
85:f4:49:43
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElHM/SK4Nxjt2/plhAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
MDUzY2U3MjUtNjA3Yy00YzEyLTkxMzItMzI3ZmI1ZTQ2YTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlQHYiJERmY+R38p+dVZhmaHM25FUpc2HPPK
92NuPMTYf4iVi+evyTiPekkOSyl8WK4xO94CwmMuqOyfZpf8G5PFx2M8SinZCI4W
m7XXw6SfEQ6KbJf6bdagxWmULUKy8HVyXwYnGADLXbsGQhORaRnVn8RXclYf3SAb
u+3/4SSXvzzr3ccKK3U+uAhB2pygoJaertf/5fvvdQZg9NoMwYjLxhbT9Z5h8Pok
cqcM0TpT3eqKnAOUIi2kkSNlByu3RcOvTeQxXtLZ3JUP3HKYBI/Wm5RWMtw5yQej
4dRnnNCUD6kKVN8h9gCuN0yaaSVOWzHzMiMKt307gsRaxM4fZQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFCv8yOCrwaAY1FM7GSxOf3BKQ/StMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWEzNzQ3MTEtNDA3Ni0z
MjViLWFkNWUtOGFkZDk2NGU0ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBPIT02iu+kIXluMdaEANGohQXgM2XSUAe6IqovCcWAkc2ZxmEd82Dk
qzMEvswjOIY64xqQKlzCIKODvtoGpZnOlGRvpELUI5tUjS1OVj21PS5MJs7VV9fB
Np5EkcjJHkv6POOHKCqAT0RNl2qP6A1pjTGRwKTfVNUxzbSeiv/76YKZthaSbHG4
kq8KNrRkTqwDMMhaaYilleAoh4kGudOgdUZ+mIVxiGIXy7aPjqWMgPPVhS0uWNIj
vZRVcT4U49TZV+zRYR1IkrtNnVGsZtkLJ70Q3dFs9DNTnsxV8J6iWFOIMhc8OcCE
VlChh4Sc6IFCs2umAlMeBMK5HnaF9ElD
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:05 2025 by rpki-client