Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09ff588f-f096-385d-b832-5703ce62f475.roa
File: 09ff588f-f096-385d-b832-5703ce62f475.roa (raw, json)
Hash identifier: Uxn5Y1jTyYVrTzHikPcE90bZd0L0td3ZhJtBrlV11bQ=
Subject key identifier: 69:A2:5C:74:16:07:22:AD:0C:CA:99:3B:B9:F0:57:DD:59:AB:CF:AF
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858494733F8BF82C86E14584E7B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09ff588f-f096-385d-b832-5703ce62f475.roa
Signing time: Sun 23 Mar 2025 01:00:39 +0000
ROA not before: Sun 23 Mar 2025 01:00:39 +0000
ROA not after: Sat 21 Jun 2025 01:00:39 +0000
asID: 396585
IP address blocks: 198.17.208.30/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:47:33:f8:bf:82:c8:6e:14:58:4e:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Mar 23 01:00:39 2025 GMT
Not After : Jun 21 01:00:39 2025 GMT
Subject: CN=7a376a3a-c28b-436e-b64d-445bec486e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:06:e5:39:66:e2:9f:41:6e:88:26:d3:9b:e7:
d6:dc:30:ca:b3:46:88:91:8e:61:0b:a7:cc:4c:fc:
22:72:0c:4d:0f:6a:52:a2:fd:c9:d3:72:af:22:ed:
12:65:4f:e6:8b:08:f1:62:cd:76:27:04:70:19:be:
a6:10:0a:37:00:32:c9:75:cc:ec:cb:ea:25:1f:b1:
87:4b:ac:04:5e:74:cb:a4:0d:ce:64:ab:a2:32:3f:
54:89:f0:dd:73:8a:ff:4a:0a:18:a8:2b:59:11:12:
b3:08:5c:9e:f4:90:bf:29:9c:84:4f:f5:f0:cc:a7:
e5:c7:2e:c3:bc:a5:70:9c:e1:1f:57:74:87:ed:eb:
f7:da:9b:67:18:16:b4:35:f2:05:f7:81:ca:9d:52:
4e:9d:7c:a0:ea:f2:02:c5:cb:69:9b:b6:84:27:e1:
d8:e9:83:a7:57:d6:1d:e5:12:ef:50:91:99:87:e0:
2b:f3:8f:1f:9a:6e:30:61:d5:da:92:89:ae:96:4b:
3f:b7:24:06:d4:21:88:5f:df:5a:a5:e7:3b:f9:5e:
e7:ec:cf:e7:1d:d9:7a:40:57:6a:ba:a5:df:19:e4:
fb:0b:f8:59:a2:d0:2e:4b:0d:8e:b1:58:d0:44:eb:
af:d7:6a:0a:76:57:3e:f9:dd:9e:ba:4e:18:9c:90:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A2:5C:74:16:07:22:AD:0C:CA:99:3B:B9:F0:57:DD:59:AB:CF:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09ff588f-f096-385d-b832-5703ce62f475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.17.208.30/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:c6:56:bf:9b:da:1d:2b:14:48:09:58:a3:62:59:0e:13:90:
8b:4e:a8:a3:d3:79:73:4e:6d:1b:55:61:53:cd:e5:8e:4c:8a:
9b:2e:f0:f6:f9:15:85:7b:b0:35:e5:f6:d5:53:8e:91:26:49:
63:c1:63:83:3f:7e:6b:37:63:cd:a4:43:f6:ef:99:e4:be:6e:
3c:3a:72:ec:94:c1:df:9e:06:bd:a7:9d:7f:1a:06:fc:3a:e7:
08:b4:09:6f:f8:66:86:c0:3d:15:c0:af:4a:00:e7:d3:e6:25:
e4:ae:78:16:64:a3:6a:70:7f:24:ae:b0:fa:b2:fe:b0:ea:d6:
30:9b:c5:78:61:b7:43:70:99:cb:ef:97:5b:60:74:51:9b:ff:
12:e7:c3:ff:d1:a2:32:a4:30:1d:db:7b:5c:5c:81:7b:6d:f2:
e9:53:39:49:58:ac:3b:fa:a4:d2:78:f0:e2:7b:d4:8e:a2:c1:
77:eb:6d:56:e7:ee:c9:33:32:5b:b1:09:6c:f0:cb:6e:e7:ba:
2e:33:8b:b3:37:8d:a7:6a:3a:fe:cb:9b:21:39:c6:14:45:42:
64:b7:e7:0c:6a:7f:6f:3e:5c:f8:27:c4:c5:9c:d7:0f:cc:df:
1d:39:80:f7:cd:cd:2a:b8:1e:5d:9f:15:22:a2:15:4f:73:86:
62:e0:e6:22
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWElHM/i/gshuFFhOewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
N2EzNzZhM2EtYzI4Yi00MzZlLWI2NGQtNDQ1YmVjNDg2ZTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwblOWbin0FuiCbTm+fW3DDKs0aIkY5hC6fM
TPwicgxND2pSov3J03KvIu0SZU/miwjxYs12JwRwGb6mEAo3ADLJdczsy+olH7GH
S6wEXnTLpA3OZKuiMj9UifDdc4r/SgoYqCtZERKzCFye9JC/KZyET/XwzKflxy7D
vKVwnOEfV3SH7ev32ptnGBa0NfIF94HKnVJOnXyg6vICxctpm7aEJ+HY6YOnV9Yd
5RLvUJGZh+Ar848fmm4wYdXakomulks/tyQG1CGIX99apec7+V7n7M/nHdl6QFdq
uqXfGeT7C/hZotAuSw2OsVjQROuv12oKdlc++d2euk4YnJByNQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGmiXHQWByKtDMqZO7nwV91Zq8+vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDlmZjU4OGYtZjA5Ni0z
ODVkLWI4MzItNTcwM2NlNjJmNDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQADxla/m9odKxRICVijYlkOE5CLTqij03lzTm0bVWFTzeWOTIqbLvD2
+RWFe7A15fbVU46RJkljwWODP35rN2PNpEP275nkvm48OnLslMHfnga9p51/Ggb8
OucItAlv+GaGwD0VwK9KAOfT5iXkrngWZKNqcH8krrD6sv6w6tYwm8V4YbdDcJnL
75dbYHRRm/8S58P/0aIypDAd23tcXIF7bfLpUzlJWKw7+qTSePDie9SOosF3621W
5+7JMzJbsQls8Mtu57ouM4uzN42najr+y5shOcYURUJkt+cMan9vPlz4J8TFnNcP
zN8dOYD3zc0quB5dnxUiohVPc4Zi4OYi
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:10:18 2025 by rpki-client