Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d936912-4630-3605-b387-e227025c5e2a.roa
File: 2d936912-4630-3605-b387-e227025c5e2a.roa (raw, json)
Hash identifier: JLAB0NLCMvv9h6GZ5t8VTMreOI/cAuxaQJG/Wed/HkQ=
Subject key identifier: 71:E3:FC:A7:EB:6F:11:7E:AD:28:61:C4:C0:A8:83:D3:41:26:64:84
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F972F0DC8E8547EF3C500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d936912-4630-3605-b387-e227025c5e2a.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.209.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:97:2f:0d:c8:e8:54:7e:f3:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=2a81deef-a857-443b-a1e1-9b07eb50dccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:f5:82:26:9d:60:47:71:66:ed:1c:a4:a2:
f5:0f:b0:4e:69:fd:ae:c5:ad:48:2d:99:08:19:2b:
d5:af:01:70:28:31:db:99:32:81:6b:08:29:70:6a:
2e:cd:8d:c8:de:fa:c0:0a:0b:56:99:3c:62:82:6e:
c6:7f:73:68:fb:08:37:96:52:38:ed:fb:69:d5:be:
23:90:57:a2:ee:30:b9:30:25:ba:1a:f3:ad:eb:ef:
68:68:d1:b9:ee:04:86:f4:5f:24:bd:0c:b8:1f:7a:
2b:6a:7a:c5:9e:24:da:ae:51:96:83:65:60:84:43:
80:ba:dd:7a:e5:ea:84:5a:42:3f:32:fa:b4:d2:6d:
45:3e:14:0a:b0:aa:9c:59:ba:d4:b2:b7:43:be:66:
af:62:8c:ca:44:5e:2c:15:9c:ed:bf:7b:82:2a:a5:
01:c0:b4:8c:a4:9d:1f:4e:79:1c:b2:85:48:75:d6:
d1:ea:ff:72:ac:6f:07:47:62:d1:a3:be:5e:67:6f:
2e:24:a7:c7:6c:ea:15:be:bf:75:61:54:e6:ed:15:
57:5f:8c:07:e1:3e:e6:d0:7f:16:39:93:30:0c:e8:
21:2b:95:3b:1e:73:9b:5c:bb:90:5a:04:d6:d4:72:
68:ad:ed:f8:f4:67:79:e3:3a:3f:e9:c6:3d:6e:80:
c4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E3:FC:A7:EB:6F:11:7E:AD:28:61:C4:C0:A8:83:D3:41:26:64:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d936912-4630-3605-b387-e227025c5e2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.209.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dc:ca:f7:bb:ac:56:55:ef:f5:67:9e:4a:4e:76:17:f1:21:c6:
fc:b7:1b:65:41:77:ea:c5:10:5f:60:ff:67:4a:3a:66:55:11:
75:4e:50:1f:c8:a4:e7:b5:2d:65:9d:e4:15:ae:fe:6c:3b:23:
15:12:12:ec:bf:2f:86:d6:33:13:c7:a4:ef:fb:de:54:e3:2b:
bf:66:76:95:25:d9:8b:bf:4b:4b:29:83:9c:42:dc:a6:56:79:
0b:64:87:92:3d:dc:88:ae:40:83:9b:22:62:22:e7:2f:e2:e2:
78:f1:bd:3f:ad:29:04:94:e2:44:8d:26:56:c1:6c:df:2e:26:
93:c4:8a:66:03:14:7c:7c:c2:29:cb:3c:4b:40:92:8a:14:b8:
51:11:7b:0f:8a:17:76:ac:d2:6a:12:c1:1b:82:4f:82:ce:ef:
61:cb:e7:c5:33:10:53:df:28:4d:c8:8c:15:5d:9d:a7:00:f7:
d0:8d:ba:89:19:5e:da:22:b7:e2:b7:d2:45:38:cd:d5:dd:85:
04:77:c7:8d:fb:ea:49:2e:a6:ae:82:53:96:46:a0:2f:15:89:
c7:9a:cd:9d:f1:9b:42:12:55:18:4f:4f:21:93:74:83:1a:db:
59:0e:82:2f:86:ac:5d:f9:28:4e:32:8f:54:ed:83:b3:dd:c3:
68:19:14:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUP5cvDcjoVH7zxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MmE4MWRlZWYtYTg1Ny00NDNiLWExZTEtOWIwN2ViNTBkY2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDb1giadYEdxZu0cpKL1D7BOaf2uxa1ILZkI
GSvVrwFwKDHbmTKBawgpcGouzY3I3vrACgtWmTxigm7Gf3No+wg3llI47ftp1b4j
kFei7jC5MCW6GvOt6+9oaNG57gSG9F8kvQy4H3oranrFniTarlGWg2VghEOAut16
5eqEWkI/Mvq00m1FPhQKsKqcWbrUsrdDvmavYozKRF4sFZztv3uCKqUBwLSMpJ0f
TnkcsoVIddbR6v9yrG8HR2LRo75eZ28uJKfHbOoVvr91YVTm7RVXX4wH4T7m0H8W
OZMwDOghK5U7HnObXLuQWgTW1HJore349Gd54zo/6cY9boDEhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHHj/KfrbxF+rShhxMCog9NBJmSEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQ5MzY5MTItNDYzMC0z
NjA1LWIzODctZTIyNzAyNWM1ZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANzK97usVlXv9WeeSk52F/Ehxvy3G2VBd+rFEF9g/2dKOmZVEXVOUB/I
pOe1LWWd5BWu/mw7IxUSEuy/L4bWMxPHpO/73lTjK79mdpUl2Yu/S0spg5xC3KZW
eQtkh5I93IiuQIObImIi5y/i4njxvT+tKQSU4kSNJlbBbN8uJpPEimYDFHx8winL
PEtAkooUuFERew+KF3as0moSwRuCT4LO72HL58UzEFPfKE3IjBVdnacA99CNuokZ
Xtoit+K30kU4zdXdhQR3x4376kkupq6CU5ZGoC8ViceazZ3xm0ISVRhPTyGTdIMa
21kOgi+GrF35KE4yj1Ttg7Pdw2gZFFo=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:17:37 2025 by rpki-client