Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03617e68-782d-38ab-be2b-494c5d090173.roa
File: 03617e68-782d-38ab-be2b-494c5d090173.roa (raw, json)
Hash identifier: NRxEZaUyPse/2am2s6snEOH/Dzx/k0bHGedzymkFEy8=
Subject key identifier: 6E:9A:52:45:6C:64:DA:14:A0:04:5C:F0:39:19:05:5B:E7:BA:C9:3D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12FE04A7AD08E65EEFB9C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03617e68-782d-38ab-be2b-494c5d090173.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.212.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:fe:04:a7:ad:08:e6:5e:ef:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=8289d69c-3131-4c1d-933b-835de657d9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:3c:2b:89:d9:66:84:91:cc:db:00:7b:6e:
45:e5:9c:1a:3a:57:58:78:ad:27:b5:60:f3:21:18:
a1:58:8f:36:98:cd:45:84:41:46:f2:38:cf:d0:86:
f0:24:01:a8:df:a7:53:cc:06:93:5e:22:82:78:c2:
5c:0f:de:f0:fd:2f:44:f9:e4:7d:e8:c3:04:46:84:
30:36:68:83:ad:6e:89:6b:9d:1c:3d:14:fe:80:65:
e9:f7:4f:d2:d1:35:cc:39:76:b0:06:02:83:d8:50:
b6:10:88:bb:33:67:1d:b2:03:c5:d6:e0:19:fa:96:
e8:38:b2:5e:92:7d:bf:d8:4d:5f:a4:46:d7:fe:27:
7a:62:ac:c8:28:fd:ee:81:d5:99:5b:2b:ea:ca:5b:
cf:cb:d6:27:15:14:79:61:c9:f2:6a:cf:ab:0e:dc:
b0:c5:6f:8c:55:b9:af:26:8f:fe:d2:35:7e:d8:99:
8a:d2:b1:b9:58:e8:33:56:cc:9c:f6:88:94:4f:79:
33:0b:b6:eb:62:8f:eb:09:5e:42:45:8f:15:37:0b:
00:46:ec:63:db:a1:b7:fb:8e:bd:b7:a5:c5:c0:86:
0d:59:5b:7b:c6:52:57:39:c1:a7:82:c0:d8:06:fc:
61:81:32:42:10:17:fa:d0:09:b0:2e:f2:42:40:b9:
3f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9A:52:45:6C:64:DA:14:A0:04:5C:F0:39:19:05:5B:E7:BA:C9:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/03617e68-782d-38ab-be2b-494c5d090173.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.212.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:97:87:a8:27:9f:d9:64:b5:66:f2:cc:b4:ec:c3:f8:1f:25:
be:ae:42:25:78:52:b9:66:fd:ca:a6:42:51:e5:ea:cf:6c:9d:
54:3d:ae:8e:71:ae:cb:31:8b:ad:d1:06:47:f4:46:f5:bb:9b:
2c:39:4f:62:f1:bc:7b:68:bf:cb:e4:96:b1:e7:55:6c:ee:b4:
68:1f:e1:1f:c7:f5:08:86:f8:51:ee:74:e6:3c:4b:38:d9:43:
e3:89:d6:ee:75:5b:c2:67:13:ef:9c:fe:80:8f:cf:51:af:1c:
d3:2a:68:a7:9c:e2:55:ad:70:9c:f2:a7:96:e7:41:7f:71:ba:
e7:68:74:12:b4:be:bd:10:a5:3d:4a:51:b3:ad:b5:53:94:01:
94:58:00:61:8e:a6:0c:5e:5b:c2:f9:9f:45:24:b2:3e:a1:a8:
a4:2f:e8:dc:0e:4b:01:aa:d6:d4:52:79:5f:de:fc:6b:d3:57:
e3:91:32:9c:ab:e9:4b:9c:33:77:06:1a:e7:1a:86:31:56:49:
89:d5:52:43:67:f3:01:f0:dd:51:5b:18:f0:9e:dd:ce:a2:cf:
87:cf:68:d4:1e:3f:be:86:56:04:12:13:fd:61:a7:91:d9:8f:
5e:c6:13:49:08:55:f5:99:df:cb:94:1f:e7:2a:7d:0c:e2:dd:
0f:d0:c0:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEv4Ep60I5l7vucAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ODI4OWQ2OWMtMzEzMS00YzFkLTkzM2ItODM1ZGU2NTdkOWJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0k8K4nZZoSRzNsAe25F5ZwaOldYeK0ntWDz
IRihWI82mM1FhEFG8jjP0IbwJAGo36dTzAaTXiKCeMJcD97w/S9E+eR96MMERoQw
NmiDrW6Ja50cPRT+gGXp90/S0TXMOXawBgKD2FC2EIi7M2cdsgPF1uAZ+pboOLJe
kn2/2E1fpEbX/id6YqzIKP3ugdWZWyvqylvPy9YnFRR5Ycnyas+rDtywxW+MVbmv
Jo/+0jV+2JmK0rG5WOgzVsyc9oiUT3kzC7brYo/rCV5CRY8VNwsARuxj26G3+469
t6XFwIYNWVt7xlJXOcGngsDYBvxhgTJCEBf60AmwLvJCQLk/lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6aUkVsZNoUoARc8DkZBVvnusk9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDM2MTdlNjgtNzgyZC0z
OGFiLWJlMmItNDk0YzVkMDkwMTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtQMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJyXh6gnn9lktWbyzLTsw/gfJb6uQiV4Urlm/cqmQlHl6s9snVQ9ro5x
rssxi63RBkf0RvW7myw5T2LxvHtov8vklrHnVWzutGgf4R/H9QiG+FHudOY8SzjZ
Q+OJ1u51W8JnE++c/oCPz1GvHNMqaKec4lWtcJzyp5bnQX9xuudodBK0vr0QpT1K
UbOttVOUAZRYAGGOpgxeW8L5n0Uksj6hqKQv6NwOSwGq1tRSeV/e/GvTV+ORMpyr
6UucM3cGGucahjFWSYnVUkNn8wHw3VFbGPCe3c6iz4fPaNQeP76GVgQSE/1hp5HZ
j17GE0kIVfWZ38uUH+cqfQzi3Q/QwKA=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:34:18 2025 by rpki-client