Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25addf9f-09a9-34aa-bc82-81b05d68d7e3.roa
File: 25addf9f-09a9-34aa-bc82-81b05d68d7e3.roa (raw, json)
Hash identifier: 5ivFstGdRWwOp+FR0gIk/o/EO3hVS4xbNMQh2ComBW4=
Subject key identifier: 6F:4B:DD:92:00:E6:87:9A:F3:CB:5F:69:D1:A6:4E:E8:41:9B:F1:85
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11EAB019F404EE955024AC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25addf9f-09a9-34aa-bc82-81b05d68d7e3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33660
IP address blocks: 98.202.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:ea:b0:19:f4:04:ee:95:50:24:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=1bd286c4-09eb-4334-9baf-26f725743c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6e:19:eb:fd:2f:e4:13:9a:1d:5d:86:cd:27:
be:40:aa:c8:24:02:b6:32:8a:e3:b5:1e:e7:e2:6d:
23:f5:cc:6d:57:a5:78:64:aa:25:9e:cd:6c:cb:0e:
32:c2:86:f3:35:9d:da:26:40:59:25:60:24:38:0d:
10:7b:76:b4:e6:8b:cb:d8:f8:07:eb:3c:78:c0:78:
c4:76:75:f5:6d:fb:e4:8d:8e:39:17:d1:22:52:99:
4c:9f:0c:34:e0:7c:ed:4c:fd:b3:5a:5c:7d:9a:c5:
71:38:83:20:49:3d:a4:e8:06:10:70:52:28:54:f7:
0a:81:0f:59:fd:ba:85:88:83:7b:c5:0d:0d:b4:7c:
a1:65:db:27:ba:7a:8d:12:83:73:be:e2:19:60:4c:
7f:8d:e9:2e:f0:8d:e2:bc:49:36:52:67:e0:03:c8:
84:fb:94:e3:77:26:b0:97:e4:37:01:fe:00:05:78:
bc:c8:3a:f0:99:f1:8c:6d:5f:35:45:0b:71:c0:21:
fa:95:f8:ad:85:21:a8:66:5d:23:90:13:b9:83:26:
40:a1:eb:a7:b5:66:53:c4:b3:ae:d3:e6:de:5a:7d:
ce:a5:ee:16:d9:56:0d:d6:b0:d6:4a:3d:ef:4b:05:
e9:db:56:ca:a3:7e:67:a1:e3:52:f4:7b:21:e1:19:
f1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4B:DD:92:00:E6:87:9A:F3:CB:5F:69:D1:A6:4E:E8:41:9B:F1:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25addf9f-09a9-34aa-bc82-81b05d68d7e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.202.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:51:08:73:7f:f3:e6:ea:fb:0d:09:f3:a9:c4:0c:5e:9f:c1:
7c:79:2c:76:05:dc:e3:3f:8a:69:3d:fa:91:e5:1e:ba:b3:ae:
4a:82:64:1c:01:7c:29:db:03:6d:ec:2d:4a:0f:c7:76:a2:e5:
7c:95:0a:7b:d7:cb:e5:a0:f0:f3:90:bf:f8:5d:bd:7b:4e:b1:
53:ca:f5:3c:83:56:ce:41:6b:27:b7:a3:d7:e1:a7:b1:5b:a4:
26:71:15:51:6c:c2:8d:65:72:da:6d:bd:44:f0:91:ac:36:5e:
14:1c:98:f8:cf:75:33:54:90:22:0e:80:92:cc:da:5c:b3:00:
a8:4a:cb:f3:90:69:3b:e4:59:f8:d8:66:e5:76:9b:6b:5e:8a:
18:dc:d6:06:e0:a4:c2:53:6c:0c:70:e4:f3:d0:2d:2d:8a:c1:
13:03:58:97:86:be:51:c7:ab:f1:a1:00:24:1b:49:7a:7c:61:
9e:91:2a:20:49:82:84:a2:7e:56:e3:b6:af:5d:16:73:5d:9e:
14:40:ff:d8:81:b1:38:fd:88:47:63:5e:42:54:93:8f:3c:dd:
48:f1:23:ad:02:48:bf:dc:df:86:60:77:1a:4e:0a:bf:73:ab:
31:34:ce:c4:3b:e1:c6:11:16:24:fb:87:5d:a8:c6:fd:6a:63:
71:4d:4a:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEeqwGfQE7pVQJKwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MWJkMjg2YzQtMDllYi00MzM0LTliYWYtMjZmNzI1NzQzYzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk24Z6/0v5BOaHV2GzSe+QKrIJAK2MorjtR7n
4m0j9cxtV6V4ZKolns1syw4ywobzNZ3aJkBZJWAkOA0Qe3a05ovL2PgH6zx4wHjE
dnX1bfvkjY45F9EiUplMnww04HztTP2zWlx9msVxOIMgST2k6AYQcFIoVPcKgQ9Z
/bqFiIN7xQ0NtHyhZdsnunqNEoNzvuIZYEx/jeku8I3ivEk2UmfgA8iE+5Tjdyaw
l+Q3Af4ABXi8yDrwmfGMbV81RQtxwCH6lfithSGoZl0jkBO5gyZAoeuntWZTxLOu
0+beWn3Ope4W2VYN1rDWSj3vSwXp21bKo35noeNS9Hsh4RnxoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9L3ZIA5oea88tfadGmTuhBm/GFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjVhZGRmOWYtMDlhOS0z
NGFhLWJjODItODFiMDVkNjhkN2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsqsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKlRCHN/8+bq+w0J86nEDF6fwXx5LHYF3OM/imk9+pHlHrqzrkqCZBwB
fCnbA23sLUoPx3ai5XyVCnvXy+Wg8POQv/hdvXtOsVPK9TyDVs5Baye3o9fhp7Fb
pCZxFVFswo1lctptvUTwkaw2XhQcmPjPdTNUkCIOgJLM2lyzAKhKy/OQaTvkWfjY
ZuV2m2teihjc1gbgpMJTbAxw5PPQLS2KwRMDWJeGvlHHq/GhACQbSXp8YZ6RKiBJ
goSiflbjtq9dFnNdnhRA/9iBsTj9iEdjXkJUk4883UjxI60CSL/c34ZgdxpOCr9z
qzE0zsQ74cYRFiT7h12oxv1qY3FNSiA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:09:44 2025 by rpki-client