Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56c13c2a-abde-3b3c-a9b5-451cf1e10fc8.roa
File: 56c13c2a-abde-3b3c-a9b5-451cf1e10fc8.roa (raw, json)
Hash identifier: dQHnqkFg3mWN19urXTFqI/J55uh/5oc/M8ZAFX/sbNA=
Subject key identifier: 8B:10:50:09:5F:1B:3D:FD:45:45:3B:A5:E6:7F:28:56:D9:07:28:53
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695D00F07129FBC3E36B880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56c13c2a-abde-3b3c-a9b5-451cf1e10fc8.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 36616
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:d0:0f:07:12:9f:bc:3e:36:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=c9120b2a-e641-4ba3-ac71-42bceff5f69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:50:96:b5:d1:d4:86:d9:76:27:34:64:3b:28:
1e:b5:ec:df:73:04:86:79:a9:0a:a0:5f:83:1b:56:
cb:58:d3:f7:fd:57:cb:81:cb:e1:60:3b:b8:36:02:
24:1c:ec:b3:2d:74:4b:3b:7c:95:d4:ab:f3:ad:d3:
fe:52:ea:51:bd:94:5b:5d:c8:a5:6c:48:5a:1d:8a:
0a:bc:38:70:02:18:6c:8d:f0:0c:cb:e1:31:06:fd:
c3:05:80:28:69:28:bf:25:b4:f6:f7:31:a7:8a:d7:
96:53:c3:eb:8b:d9:9e:38:ca:e2:9b:fa:64:b6:a3:
59:87:4b:b2:94:36:b1:da:f9:7b:78:85:52:41:96:
55:b2:3b:7d:36:24:d2:9f:d6:48:ee:1c:97:92:de:
aa:83:77:2b:8a:4c:50:e8:d5:b8:e5:b1:ca:d9:06:
eb:f7:37:13:49:d5:6d:0f:7a:0e:62:5e:63:dd:3c:
62:35:3a:5b:c9:e7:76:d5:7c:0b:69:9c:58:f8:b5:
06:5c:1d:d9:a5:3f:f6:d6:7c:31:e2:91:89:16:91:
69:7c:9f:76:86:0d:10:52:49:fa:42:66:2c:32:0d:
af:fc:c6:58:be:9a:47:97:ff:a5:01:42:47:b3:98:
57:0b:5f:3e:ac:6c:14:6a:21:2f:70:b0:5c:a9:70:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:10:50:09:5F:1B:3D:FD:45:45:3B:A5:E6:7F:28:56:D9:07:28:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56c13c2a-abde-3b3c-a9b5-451cf1e10fc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:4a:ae:13:13:11:25:76:ae:c5:e4:ac:35:90:7b:3e:d5:fc:
3c:16:15:d5:fb:8d:9e:5e:a5:d3:63:84:13:64:b7:5b:95:96:
6d:3d:86:5e:03:e1:0d:14:6f:0e:16:fc:66:aa:e1:f4:ab:93:
c3:87:b9:83:fd:ca:63:d9:79:20:e9:1c:68:29:09:6a:53:00:
51:31:e0:ef:9d:cd:0c:a4:01:b5:2a:53:7c:00:a5:bb:5d:91:
53:f4:6e:06:20:9d:54:60:73:da:d2:7f:39:31:c6:f0:47:68:
df:b3:79:72:26:88:34:41:cf:19:20:b5:12:55:56:c7:f4:ac:
2c:fe:88:32:be:68:e7:a3:a4:a1:d9:f8:14:b2:b1:fc:61:cf:
5f:20:61:69:5b:3b:90:d0:81:c2:db:17:47:ae:b6:dd:38:80:
44:41:01:2d:7c:5e:ee:91:83:6e:06:ff:e6:37:20:af:f1:5b:
45:2b:b9:fe:e6:f8:f7:af:94:0f:20:d4:f2:f5:fe:44:8f:42:
59:a4:77:4b:61:bf:d0:73:8e:92:5b:7e:08:67:a9:b6:d3:a9:
99:cf:1f:46:ff:e5:d7:49:5e:a3:48:19:04:ce:1a:2f:ee:f3:
f0:55:de:ac:0a:22:2a:d5:22:66:a0:4b:1b:ed:35:3b:bd:0a:
41:a8:f7:2b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhmldAPBxKfvD42uIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
YzkxMjBiMmEtZTY0MS00YmEzLWFjNzEtNDJiY2VmZjVmNjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglCWtdHUhtl2JzRkOygetezfcwSGeakKoF+D
G1bLWNP3/VfLgcvhYDu4NgIkHOyzLXRLO3yV1KvzrdP+UupRvZRbXcilbEhaHYoK
vDhwAhhsjfAMy+ExBv3DBYAoaSi/JbT29zGniteWU8Pri9meOMrim/pktqNZh0uy
lDax2vl7eIVSQZZVsjt9NiTSn9ZI7hyXkt6qg3crikxQ6NW45bHK2Qbr9zcTSdVt
D3oOYl5j3TxiNTpbyed21XwLaZxY+LUGXB3ZpT/21nwx4pGJFpFpfJ92hg0QUkn6
QmYsMg2v/MZYvppHl/+lAUJHs5hXC18+rGwUaiEvcLBcqXBlJQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIsQUAlfGz39RUU7peZ/KFbZByhTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTZjMTNjMmEtYWJkZS0z
YjNjLWE5YjUtNDUxY2YxZTEwZmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAgSq4TExEldq7F5Kw1kHs+1fw8FhXV+42eXqXTY4QTZLdblZZtPYZe
A+ENFG8OFvxmquH0q5PDh7mD/cpj2Xkg6RxoKQlqUwBRMeDvnc0MpAG1KlN8AKW7
XZFT9G4GIJ1UYHPa0n85McbwR2jfs3lyJog0Qc8ZILUSVVbH9Kws/ogyvmjno6Sh
2fgUsrH8Yc9fIGFpWzuQ0IHC2xdHrrbdOIBEQQEtfF7ukYNuBv/mNyCv8VtFK7n+
5vj3r5QPINTy9f5Ej0JZpHdLYb/Qc46SW34IZ6m206mZzx9G/+XXSV6jSBkEzhov
7vPwVd6sCiIq1SJmoEsb7TU7vQpBqPcr
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:58:27 2025 by rpki-client