Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2d94b24-6180-304b-87fa-084267bbd343.roa
File: e2d94b24-6180-304b-87fa-084267bbd343.roa (raw, json)
Hash identifier: pByeNotdUF9+h4+qqgkAQ3wVJGVshVQbOQrE4EHJepY=
Subject key identifier: 81:9C:44:D0:B4:EF:C4:B6:38:54:F4:0F:A8:DC:6F:19:71:DF:DD:B5
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858486695CCCCB573F34E45320200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2d94b24-6180-304b-87fa-084267bbd343.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 396553
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:cc:cc:b5:73:f3:4e:45:32:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=0d529c16-23b2-4e7e-886e-55cb5d8ec566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:e7:04:5e:a3:a6:97:13:87:51:6b:3f:35:
6d:00:0c:bd:ff:ba:8c:78:bd:c0:a3:6e:84:25:72:
86:51:5b:b5:e4:31:d6:7c:6b:c2:b7:08:80:cd:ba:
19:b1:5b:6a:ac:f7:f0:6f:9e:e2:eb:6d:19:94:6f:
e5:65:8a:89:4d:68:b1:f2:64:b5:7f:51:8d:41:34:
81:38:03:06:57:eb:22:c8:28:1d:d1:9c:0c:37:df:
bc:e2:f4:c2:6e:92:90:b7:05:e3:4e:8d:eb:a5:f8:
98:42:19:98:86:48:54:62:66:ba:82:dc:d2:35:b7:
f1:05:3b:6f:0b:88:0e:65:19:e6:9a:62:3e:e2:7b:
08:0e:22:ed:36:33:08:ef:d0:7f:18:13:df:65:76:
e7:3c:66:14:27:5b:7e:cc:96:fb:2c:45:fe:3b:31:
f3:e3:71:69:43:38:4a:89:74:39:cc:32:58:5f:9b:
02:10:8a:db:f0:8b:6e:2a:21:45:06:1c:cc:2f:54:
cf:ae:ba:26:17:4e:4a:00:9d:13:38:81:c3:04:02:
96:61:95:43:bb:2e:e6:34:fb:af:73:fa:3f:32:00:
ea:78:2b:17:4c:1f:5f:71:ca:45:82:89:da:a5:52:
da:13:5b:5e:b0:7a:5d:ee:ad:27:cf:d6:b7:6b:2e:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:44:D0:B4:EF:C4:B6:38:54:F4:0F:A8:DC:6F:19:71:DF:DD:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2d94b24-6180-304b-87fa-084267bbd343.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:87:e5:d6:40:3a:e8:00:4f:6a:7b:a2:92:fa:fc:a8:f4:30:
cf:5b:ad:a1:1d:82:83:69:67:3b:de:fb:26:e4:b6:ee:ae:42:
8d:d5:d9:0c:18:a9:0e:23:b9:f2:f5:ec:56:f2:d5:ff:d8:2c:
23:a1:35:a5:a4:75:ae:30:43:a4:ec:98:2e:7f:be:2c:89:62:
ba:26:e6:99:af:6c:93:f1:47:df:1d:1d:e4:95:25:ca:23:28:
3b:5c:da:52:0b:53:0c:3f:0e:b6:fa:1b:a7:c2:e2:0e:bd:88:
ee:52:0a:6a:b2:9f:09:a1:41:54:7b:37:ed:a1:f6:06:25:dc:
ef:65:d4:23:24:ec:7a:02:76:e6:b0:c6:be:77:0c:07:73:7d:
9e:8f:94:4f:aa:1d:e5:97:ce:6b:8b:72:60:41:ce:a9:4e:25:
28:f4:65:4a:ac:c2:cd:07:39:59:31:ee:7f:7f:82:d9:96:35:
1e:31:8e:08:0e:79:a6:ef:ba:7b:64:f8:59:25:00:5a:d9:6e:
e2:61:17:7a:52:10:e3:94:f2:20:29:2c:b0:fe:f9:c2:1a:53:
2f:ba:fb:58:b8:11:50:d7:f2:4b:90:9c:ae:34:58:62:bf:02:
01:78:ad:83:9c:67:74:88:88:4b:6a:10:0b:b1:3f:67:8e:ea:
75:01:d0:b5
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEhmlczMtXPzTkUyAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDEwMTE0MDA1M1oXDTI1MDQwMTEzMDA1M1owLzEtMCsGA1UEAxMk
MGQ1MjljMTYtMjNiMi00ZTdlLTg4NmUtNTVjYjVkOGVjNTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5DnBF6jppcTh1FrPzVtAAy9/7qMeL3Ao26E
JXKGUVu15DHWfGvCtwiAzboZsVtqrPfwb57i620ZlG/lZYqJTWix8mS1f1GNQTSB
OAMGV+siyCgd0ZwMN9+84vTCbpKQtwXjTo3rpfiYQhmYhkhUYma6gtzSNbfxBTtv
C4gOZRnmmmI+4nsIDiLtNjMI79B/GBPfZXbnPGYUJ1t+zJb7LEX+OzHz43FpQzhK
iXQ5zDJYX5sCEIrb8ItuKiFFBhzML1TPrromF05KAJ0TOIHDBAKWYZVDuy7mNPuv
c/o/MgDqeCsXTB9fccpFgonapVLaE1tesHpd7q0nz9a3ay6A3QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFIGcRNC078S2OFT0D6jcbxlx3921MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTJkOTRiMjQtNjE4MC0z
MDRiLTg3ZmEtMDg0MjY3YmJkMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQC0h+XWQDroAE9qe6KS+vyo9DDPW62hHYKDaWc73vsm5LburkKN1dkM
GKkOI7ny9exW8tX/2CwjoTWlpHWuMEOk7Jguf74siWK6JuaZr2yT8UffHR3klSXK
Iyg7XNpSC1MMPw62+hunwuIOvYjuUgpqsp8JoUFUezftofYGJdzvZdQjJOx6Anbm
sMa+dwwHc32ej5RPqh3ll85ri3JgQc6pTiUo9GVKrMLNBzlZMe5/f4LZljUeMY4I
Dnmm77p7ZPhZJQBa2W7iYRd6UhDjlPIgKSyw/vnCGlMvuvtYuBFQ1/JLkJyuNFhi
vwIBeK2DnGd0iIhLahALsT9njup1AdC1
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:14:09 2025 by rpki-client