Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1358c292-afae-38ad-9e76-bae08d5169c0.roa
File: 1358c292-afae-38ad-9e76-bae08d5169c0.roa (raw, json)
Hash identifier: xxXze/uphYztsP4nqM+4G2sm2X0h2wzRujfMj+j2Ysc=
Subject key identifier: 8B:EA:58:83:D1:20:CA:CB:61:72:13:34:70:07:27:CE:3E:FF:28:68
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143B3873CB369740BBBD2C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1358c292-afae-38ad-9e76-bae08d5169c0.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 7015
IP address blocks: 98.216.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3b:38:73:cb:36:97:40:bb:bd:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=26cb7ce2-2452-4bdc-a31b-636f5ffa59db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:b0:33:fd:66:b7:7a:5e:f7:63:60:15:ff:
9d:22:e0:77:bc:ac:da:dc:58:51:9a:19:fe:04:19:
9a:07:10:cb:20:3d:71:13:a2:af:27:2a:ba:f3:c6:
c5:68:65:1f:89:5e:42:60:ae:76:c4:0d:18:e7:49:
1f:48:84:10:d2:d8:b5:08:9f:e0:a8:d2:cf:1f:65:
ff:e2:ea:f6:b6:fb:2f:f2:6c:f9:43:c4:8e:10:46:
c4:e3:6f:fc:50:bb:3c:15:67:22:23:33:04:5f:f7:
ee:d2:05:23:d9:ae:ea:02:c5:47:f3:b9:2f:76:a4:
51:32:5d:7e:24:9d:fd:3c:fa:c5:d3:41:aa:21:91:
e7:41:cd:26:55:a8:ed:10:c8:dc:25:58:cc:5a:a4:
e6:1b:b1:17:5c:36:70:e9:b6:19:d6:21:3b:f1:5e:
9f:59:fa:99:45:79:d1:bd:59:33:18:1a:cf:d1:60:
a6:b5:96:af:cc:fa:ba:4a:0f:ed:ce:80:c6:18:59:
69:4a:df:38:72:1f:59:28:88:4e:07:1f:b9:38:56:
57:e9:a4:38:31:c7:76:d8:68:f6:ac:21:b8:ed:32:
e2:4a:7a:6d:4a:fc:d3:95:ea:ce:1a:2b:b6:0f:51:
5f:67:59:92:62:1f:fe:1f:08:68:22:d9:74:11:09:
83:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EA:58:83:D1:20:CA:CB:61:72:13:34:70:07:27:CE:3E:FF:28:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1358c292-afae-38ad-9e76-bae08d5169c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.216.192.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:74:b0:e0:c5:b6:67:8f:c2:33:23:77:21:5e:e2:07:71:7d:
18:31:11:d2:66:f2:cf:10:a9:85:c5:e3:54:6d:ff:29:26:2a:
54:19:bc:fa:6e:2f:c7:bf:8c:1f:b3:f1:82:17:e5:fd:1a:f7:
e2:f4:db:61:a3:a2:95:94:f0:94:fa:4d:34:17:d5:7d:c6:37:
6b:a3:bb:5d:87:d5:87:da:31:3b:b2:80:9f:15:7c:b4:50:81:
cf:a7:dd:9b:49:f3:09:03:ea:25:c5:5f:0b:68:e7:fb:6b:ce:
02:4a:d8:20:c9:fe:f6:fc:68:90:af:5d:1a:12:89:77:0d:8f:
cb:ef:b9:3c:f2:26:00:c8:90:34:c1:91:95:49:a4:77:1f:a9:
10:7a:c4:d4:82:eb:01:4f:18:ee:ac:dd:10:3d:9f:28:b9:d3:
8c:a5:1d:c8:49:d1:7f:48:91:a6:83:9f:2a:b4:5e:97:0f:21:
c5:28:1d:4a:26:d6:3e:87:c5:e1:90:a3:a2:05:73:1b:33:fc:
5b:74:78:44:b4:4e:13:bb:fe:3a:c6:8a:77:8f:c6:d2:3c:98:
9b:70:4c:db:10:0a:37:70:2e:c9:e9:e9:8b:95:1c:30:e5:a2:
7e:60:e0:9c:56:91:cf:cb:cf:98:0e:0e:c4:c9:7f:5f:70:2d:
89:d5:e9:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOzhzyzaXQLu9LAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MjZjYjdjZTItMjQ1Mi00YmRjLWEzMWItNjM2ZjVmZmE1OWRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2d6wM/1mt3pe92NgFf+dIuB3vKza3FhRmhn+
BBmaBxDLID1xE6KvJyq688bFaGUfiV5CYK52xA0Y50kfSIQQ0ti1CJ/gqNLPH2X/
4ur2tvsv8mz5Q8SOEEbE42/8ULs8FWciIzMEX/fu0gUj2a7qAsVH87kvdqRRMl1+
JJ39PPrF00GqIZHnQc0mVajtEMjcJVjMWqTmG7EXXDZw6bYZ1iE78V6fWfqZRXnR
vVkzGBrP0WCmtZavzPq6Sg/tzoDGGFlpSt84ch9ZKIhOBx+5OFZX6aQ4Mcd22Gj2
rCG47TLiSnptSvzTlerOGiu2D1FfZ1mSYh/+HwhoItl0EQmDCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIvqWIPRIMrLYXITNHAHJ84+/yhoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTM1OGMyOTItYWZhZS0z
OGFkLTllNzYtYmFlMDhkNTE2OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtjAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHR0sODFtmePwjMjdyFe4gdxfRgxEdJm8s8QqYXF41Rt/ykmKlQZvPpu
L8e/jB+z8YIX5f0a9+L022GjopWU8JT6TTQX1X3GN2uju12H1YfaMTuygJ8VfLRQ
gc+n3ZtJ8wkD6iXFXwto5/trzgJK2CDJ/vb8aJCvXRoSiXcNj8vvuTzyJgDIkDTB
kZVJpHcfqRB6xNSC6wFPGO6s3RA9nyi504ylHchJ0X9IkaaDnyq0XpcPIcUoHUom
1j6HxeGQo6IFcxsz/Ft0eES0ThO7/jrGinePxtI8mJtwTNsQCjdwLsnp6YuVHDDl
on5g4JxWkc/Lz5gODsTJf19wLYnV6Vo=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:05:43 2025 by rpki-client