Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47bfebe4-e930-3686-ba87-0c2eb3f231fd.roa
File: 47bfebe4-e930-3686-ba87-0c2eb3f231fd.roa (raw, json)
Hash identifier: EaI0ifWA8pzjq7AV6B+Vo1ivXP2E1Cz9I3LYKCCg2t4=
Subject key identifier: F9:CE:D0:CA:D5:12:EE:12:BC:D2:5D:05:9A:96:F8:BE:E3:EC:09:47
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695D0F705804B8B77F9D200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47bfebe4-e930-3686-ba87-0c2eb3f231fd.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396569
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:d0:f7:05:80:4b:8b:77:f9:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=c302c906-f507-45b7-a240-3ef4032d396d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:68:53:bc:90:92:47:d0:8f:89:7d:55:3f:
13:bd:b4:71:cb:ac:54:c6:36:f4:be:3f:1d:aa:f6:
4b:d1:21:c1:d7:3f:bd:51:11:5d:f2:ae:4f:f8:66:
f1:b7:f3:2e:38:6e:19:a0:f2:f8:0f:71:9c:6a:65:
0f:21:d3:9b:8c:d1:a8:62:59:52:1a:f6:cb:7f:cb:
b9:16:12:a2:28:77:ea:d9:36:e9:8e:33:45:84:0c:
bf:c9:cc:e3:c7:07:bd:82:67:5b:a8:b0:9f:af:aa:
d6:10:1a:86:f2:ad:e9:d1:b1:ea:63:7b:b9:f5:c6:
ca:48:32:ee:ef:54:5a:19:1d:c2:91:d3:56:19:69:
92:71:e9:57:71:32:5c:e7:6a:f5:12:d9:4a:df:b0:
d1:4e:aa:96:f8:92:e2:66:59:9e:a4:45:fe:a6:78:
ec:35:ca:02:13:c5:a7:1b:fd:24:af:78:e6:bb:01:
84:5b:ac:a7:76:45:ad:5a:c0:bf:c2:cb:5e:92:09:
67:00:8a:e7:32:b8:b3:34:0f:95:e9:75:58:f6:90:
fc:e6:ba:53:7f:13:44:f6:30:a5:06:46:a3:96:0a:
a9:26:22:f8:88:6d:27:59:c6:e3:e3:50:76:83:38:
ec:57:4b:c5:46:8f:ef:db:70:02:89:0d:45:33:b5:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:D0:CA:D5:12:EE:12:BC:D2:5D:05:9A:96:F8:BE:E3:EC:09:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/47bfebe4-e930-3686-ba87-0c2eb3f231fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:fc:9b:af:12:da:81:08:c0:11:ae:4e:57:57:2a:a1:17:8e:
bb:8a:53:ba:ce:78:ad:20:93:f6:85:f1:39:84:f7:6b:13:2b:
30:75:7a:7a:6f:13:b2:04:5d:a4:c9:58:61:b6:f6:41:1d:cd:
e9:4c:81:40:91:ed:47:6d:e9:f0:74:4d:75:9a:1f:b7:79:8c:
1f:a3:b3:75:c6:e7:ef:6d:f1:5b:51:a2:1b:85:4c:ff:b7:87:
8e:d6:f8:ac:8d:4c:2a:c9:6c:7d:5d:2b:ae:49:21:fa:df:15:
56:40:82:b0:85:9f:8f:41:0a:14:b5:42:71:27:d9:28:bb:3b:
92:07:ae:b6:b1:45:9d:10:c0:28:84:76:25:3d:eb:84:6e:ac:
bc:26:2a:22:0b:85:b4:09:78:c5:ae:13:d9:c9:5e:41:57:40:
79:51:e8:be:e4:f8:5f:96:ad:6a:6f:6a:68:41:43:ae:dd:5a:
fc:aa:9f:98:27:56:29:c3:60:df:4b:75:84:8f:e9:36:4b:58:
fa:5f:2b:32:7d:ed:ac:86:b8:02:09:e3:5f:f7:5f:c9:46:ae:
b9:ae:42:5f:b2:1a:73:9a:77:a2:95:b0:dc:49:38:51:e6:3e:
25:bb:cd:e5:6a:08:45:97:c9:f2:c6:63:1f:64:1b:59:cf:60:
b7:ad:ab:6d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhmldD3BYBLi3f50gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
YzMwMmM5MDYtZjUwNy00NWI3LWEyNDAtM2VmNDAzMmQzOTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22loU7yQkkfQj4l9VT8TvbRxy6xUxjb0vj8d
qvZL0SHB1z+9URFd8q5P+Gbxt/MuOG4ZoPL4D3GcamUPIdObjNGoYllSGvbLf8u5
FhKiKHfq2TbpjjNFhAy/yczjxwe9gmdbqLCfr6rWEBqG8q3p0bHqY3u59cbKSDLu
71RaGR3CkdNWGWmScelXcTJc52r1EtlK37DRTqqW+JLiZlmepEX+pnjsNcoCE8Wn
G/0kr3jmuwGEW6yndkWtWsC/wstekglnAIrnMrizNA+V6XVY9pD85rpTfxNE9jCl
BkajlgqpJiL4iG0nWcbj41B2gzjsV0vFRo/v23ACiQ1FM7WSyQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFPnO0MrVEu4SvNJdBZqW+L7j7AlHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDdiZmViZTQtZTkzMC0z
Njg2LWJhODctMGMyZWIzZjIzMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC0/JuvEtqBCMARrk5XVyqhF467ilO6znitIJP2hfE5hPdrEyswdXp6
bxOyBF2kyVhhtvZBHc3pTIFAke1HbenwdE11mh+3eYwfo7N1xufvbfFbUaIbhUz/
t4eO1visjUwqyWx9XSuuSSH63xVWQIKwhZ+PQQoUtUJxJ9kouzuSB662sUWdEMAo
hHYlPeuEbqy8JioiC4W0CXjFrhPZyV5BV0B5Uei+5Phflq1qb2poQUOu3Vr8qp+Y
J1Ypw2DfS3WEj+k2S1j6Xysyfe2shrgCCeNf91/JRq65rkJfshpzmneilbDcSThR
5j4lu83laghFl8nyxmMfZBtZz2C3ratt
-----END CERTIFICATE-----
Generated at Fri Apr 25 21:35:08 2025 by rpki-client