Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa
File: 87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa (raw, json)
Hash identifier: 3rmCfJAlfWknc1Tq/FoCVl6uGdyxWAuS1if1dyzxQPY=
Subject key identifier: 6E:5F:CA:87:62:07:DC:FE:28:6D:E0:41:DA:5A:7C:03:C5:C5:52:67
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CDD90B4976F1F95E18A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396550
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cd:d9:0b:49:76:f1:f9:5e:18:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=1b0ef449-a327-4e45-b52e-42ac67957610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:47:58:b0:e7:87:1c:f8:8e:6b:5d:0c:f3:a8:
20:85:dd:52:65:c1:2d:bb:33:c1:d1:01:5d:ec:4f:
42:8f:be:e4:43:9a:6c:13:b5:5c:1b:40:bd:f1:6b:
25:84:7e:c3:5d:36:c4:de:c5:76:66:aa:9a:d0:36:
31:57:9e:f5:fb:ad:22:5d:a1:c5:a1:8f:61:c5:67:
f6:a4:f7:43:8c:62:e3:05:98:73:47:60:04:2f:8b:
0d:5e:7d:27:36:01:f5:72:df:2c:7f:71:a1:11:55:
35:f9:3f:bd:24:d7:e7:fc:c8:3b:89:a1:5e:e2:b4:
4e:78:85:ce:3e:10:99:3f:10:1e:28:3f:ec:f1:60:
29:ad:98:23:f0:0a:2a:78:39:16:49:af:e0:c1:80:
96:a4:f6:7b:80:90:e3:60:4f:19:7a:2a:46:47:19:
f6:eb:8f:51:4b:5a:c4:88:76:3f:ac:5d:f1:42:09:
c1:72:bf:c7:bc:d5:27:55:44:2a:9b:aa:c0:a4:71:
bd:16:de:98:35:a4:d5:c4:76:60:d7:a2:6d:3b:4d:
58:37:f0:e0:fa:b3:4d:7e:0b:f9:e2:cc:77:3d:c6:
80:b4:d0:1d:7a:fe:ca:92:d3:2f:e5:4f:c5:8d:9a:
ce:cc:69:cf:c0:57:cb:bf:b5:0c:40:11:01:a3:cb:
b7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5F:CA:87:62:07:DC:FE:28:6D:E0:41:DA:5A:7C:03:C5:C5:52:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87e5d855-a87d-39c1-82c6-1e009f79fc4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:03:ea:2f:fd:4c:65:23:bd:f4:b4:e9:c5:22:cd:64:5c:5b:
3f:c6:0b:1e:fe:3d:93:c1:07:42:7b:9d:db:a4:c8:e9:0d:98:
f9:31:e1:3b:5d:b8:80:93:25:ed:87:3c:15:87:c4:a2:01:dd:
6b:fd:06:c7:79:84:be:e7:33:09:55:5c:61:e8:b2:74:c5:c6:
5a:fa:96:19:db:a0:94:f2:b6:72:43:b1:31:17:19:21:37:f2:
07:65:1f:6b:98:c6:81:2a:d4:b4:fd:85:bd:db:18:06:1d:b2:
e0:0f:3f:e2:8c:cf:7c:20:c9:e3:b7:6a:bc:99:07:f4:2a:d7:
c7:43:be:96:2a:c7:32:81:e7:70:34:27:2e:64:2a:33:e5:11:
cb:9e:62:68:8d:a8:3a:57:01:33:8e:8c:0d:66:c8:9e:0b:bc:
40:8a:e2:22:8f:0b:83:1f:28:f3:98:01:aa:48:ae:e7:03:8f:
b0:1f:1a:97:f0:66:94:f0:e7:e3:f6:91:0c:9d:9b:85:78:21:
a0:42:f0:fb:bd:0e:6e:b4:a1:30:30:71:d7:ba:89:f4:10:f7:
3e:3b:b8:1d:bc:6d:49:92:05:6b:4c:f6:bf:e8:03:81:b2:f2:
b3:f7:3b:6b:be:2b:2a:bb:3a:c2:cb:d0:3a:e7:48:96:52:03:
9f:1f:21:ae
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhmlc3ZC0l28fleGKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
MWIwZWY0NDktYTMyNy00ZTQ1LWI1MmUtNDJhYzY3OTU3NjEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EdYsOeHHPiOa10M86gghd1SZcEtuzPB0QFd
7E9Cj77kQ5psE7VcG0C98WslhH7DXTbE3sV2Zqqa0DYxV571+60iXaHFoY9hxWf2
pPdDjGLjBZhzR2AEL4sNXn0nNgH1ct8sf3GhEVU1+T+9JNfn/Mg7iaFe4rROeIXO
PhCZPxAeKD/s8WAprZgj8AoqeDkWSa/gwYCWpPZ7gJDjYE8ZeipGRxn2649RS1rE
iHY/rF3xQgnBcr/HvNUnVUQqm6rApHG9Ft6YNaTVxHZg16JtO01YN/Dg+rNNfgv5
4sx3PcaAtNAdev7KktMv5U/FjZrOzGnPwFfLv7UMQBEBo8u32QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG5fyodiB9z+KG3gQdpafAPFxVJnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODdlNWQ4NTUtYTg3ZC0z
OWMxLTgyYzYtMWUwMDlmNzlmYzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBnA+ov/UxlI730tOnFIs1kXFs/xgse/j2TwQdCe53bpMjpDZj5MeE7
XbiAkyXthzwVh8SiAd1r/QbHeYS+5zMJVVxh6LJ0xcZa+pYZ26CU8rZyQ7ExFxkh
N/IHZR9rmMaBKtS0/YW92xgGHbLgDz/ijM98IMnjt2q8mQf0KtfHQ76WKscygedw
NCcuZCoz5RHLnmJojag6VwEzjowNZsieC7xAiuIijwuDHyjzmAGqSK7nA4+wHxqX
8GaU8Ofj9pEMnZuFeCGgQvD7vQ5utKEwMHHXuon0EPc+O7gdvG1JkgVrTPa/6AOB
svKz9ztrvisquzrCy9A650iWUgOfHyGu
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:52:28 2025 by rpki-client