Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd4734df-511c-381d-9b8d-f25f5b6cbbb4.roa
File: dd4734df-511c-381d-9b8d-f25f5b6cbbb4.roa (raw, json)
Hash identifier: fJXJ+pcnVcoYImtDgY6eLB1x8qJvB12LUqF/LMwXMyI=
Subject key identifier: C8:46:1D:CA:28:65:49:BF:22:10:6F:3A:00:EC:C3:7D:CC:80:B7:2E
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695D0394B80BCB0FA4CF4C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd4734df-511c-381d-9b8d-f25f5b6cbbb4.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396544
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:d0:39:4b:80:bc:b0:fa:4c:f4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=fc702375-4d08-4b47-bb9b-fcf33d7ea58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:32:1a:18:f1:a2:e4:44:16:e4:34:f0:ff:
bc:67:67:f0:4c:a9:d7:19:89:fc:b8:b4:98:7c:20:
bd:3d:a1:bc:5d:4d:70:ce:68:c5:5e:a7:fb:d2:f8:
76:eb:68:61:ec:7c:b3:f3:fe:61:09:dc:9e:bd:d9:
b1:a8:dc:94:06:8b:cc:ac:04:ff:11:26:a4:d2:86:
56:5e:da:a5:7a:b1:6d:9f:b1:29:de:8e:e3:3b:6d:
87:39:24:89:5c:6d:07:c1:be:dc:d7:c6:9e:91:b8:
1f:0d:ea:cd:fe:53:a1:7f:58:23:56:f8:e0:1d:1d:
b0:15:e5:64:be:eb:f4:08:af:aa:ac:06:e0:75:80:
1a:bd:65:71:fe:1b:0f:6f:2b:c9:c2:6d:a8:16:e6:
f1:3c:0e:b6:e5:8b:82:83:1c:b5:6b:bf:9f:ab:25:
d9:0b:89:a7:8c:f5:13:bc:ae:37:b5:4d:0d:dd:ca:
5c:04:83:3c:a8:f7:bf:11:a2:77:15:c3:14:f4:d6:
2d:b8:cd:05:7f:c1:53:36:b6:a3:43:d3:ec:36:01:
5b:cb:0f:aa:47:9a:77:21:35:f2:06:e9:3e:cb:c6:
fc:b7:24:3d:59:dc:43:9e:b7:0b:ac:04:67:84:6c:
e8:ab:de:62:4a:f9:59:48:ad:38:07:69:0f:f6:0b:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:46:1D:CA:28:65:49:BF:22:10:6F:3A:00:EC:C3:7D:CC:80:B7:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd4734df-511c-381d-9b8d-f25f5b6cbbb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:3f:96:86:ad:e2:fe:0d:11:7c:1a:78:d8:a3:95:a8:e0:f3:
a5:97:37:1f:48:01:5d:58:db:8e:4a:68:e5:62:4d:09:d7:f5:
21:46:10:32:02:5d:0b:2a:75:6e:91:fc:1a:29:6c:ff:99:f5:
db:5c:0a:80:1b:5e:11:25:06:47:e2:67:35:41:4c:3d:f8:58:
ce:0a:42:4e:6f:78:0a:bf:cf:14:c3:48:81:aa:fe:a7:cd:4a:
0c:4b:13:9e:ea:49:27:00:c3:20:cc:71:92:4b:e3:cc:96:1b:
4d:6b:4f:e5:78:37:f4:87:3c:36:0d:e9:95:87:8e:9b:b9:b6:
11:81:a3:dc:b9:17:8c:d7:0c:57:02:a8:c4:1d:db:c0:25:3e:
90:77:c7:5c:79:f7:07:7a:72:76:ec:c5:25:27:38:78:47:37:
37:9f:4d:1a:31:91:1c:7f:53:86:a4:51:41:a9:da:dd:88:b1:
7c:34:e0:1d:a0:ba:63:9c:10:77:81:b1:9d:e5:47:d0:0b:63:
76:e1:5b:20:47:b2:00:d3:17:40:c0:4c:a0:29:ba:b5:0f:d2:
78:b2:95:8d:57:9e:b7:74:68:1c:29:cc:16:38:17:f6:1d:6a:
ba:ad:86:f2:20:38:12:bb:c5:4b:95:82:7b:4a:27:87:59:f6:
a0:41:8a:09
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhmldA5S4C8sPpM9MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
ZmM3MDIzNzUtNGQwOC00YjQ3LWJiOWItZmNmMzNkN2VhNThlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQoyGhjxouREFuQ08P+8Z2fwTKnXGYn8uLSY
fCC9PaG8XU1wzmjFXqf70vh262hh7Hyz8/5hCdyevdmxqNyUBovMrAT/ESak0oZW
XtqlerFtn7Ep3o7jO22HOSSJXG0Hwb7c18aekbgfDerN/lOhf1gjVvjgHR2wFeVk
vuv0CK+qrAbgdYAavWVx/hsPbyvJwm2oFubxPA625YuCgxy1a7+fqyXZC4mnjPUT
vK43tU0N3cpcBIM8qPe/EaJ3FcMU9NYtuM0Ff8FTNrajQ9PsNgFbyw+qR5p3ITXy
Buk+y8b8tyQ9WdxDnrcLrARnhGzoq95iSvlZSK04B2kP9gt4vQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMhGHcooZUm/IhBvOgDsw33MgLcuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGQ0NzM0ZGYtNTExYy0z
ODFkLTliOGQtZjI1ZjViNmNiYmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC5P5aGreL+DRF8GnjYo5Wo4POllzcfSAFdWNuOSmjlYk0J1/UhRhAy
Al0LKnVukfwaKWz/mfXbXAqAG14RJQZH4mc1QUw9+FjOCkJOb3gKv88Uw0iBqv6n
zUoMSxOe6kknAMMgzHGSS+PMlhtNa0/leDf0hzw2DemVh46bubYRgaPcuReM1wxX
AqjEHdvAJT6Qd8dcefcHenJ27MUlJzh4Rzc3n00aMZEcf1OGpFFBqdrdiLF8NOAd
oLpjnBB3gbGd5UfQC2N24VsgR7IA0xdAwEygKbq1D9J4spWNV563dGgcKcwWOBf2
HWq6rYbyIDgSu8VLlYJ7SieHWfagQYoJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:50:52 2025 by rpki-client