Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e4230c0-3b78-37c0-a10f-4caaf83663a3.roa
File: 3e4230c0-3b78-37c0-a10f-4caaf83663a3.roa (raw, json)
Hash identifier: hXZr2Im7NxRQhG+xl8ek7oqzmxbIMAPR+32v+C3Gf5k=
Subject key identifier: 36:E5:04:39:81:B1:4E:14:EC:E5:47:3C:90:1D:0B:F3:7D:1D:25:F5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11565DC41A334CF46C8100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e4230c0-3b78-37c0-a10f-4caaf83663a3.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.222.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:56:5d:c4:1a:33:4c:f4:6c:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=4e547e69-bcf2-4ca1-8907-1ce608a228ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:4c:be:ae:74:1c:f2:8f:e8:0d:c6:f4:dc:
96:0e:9d:64:8f:3c:b9:37:83:ea:f1:dc:d2:7b:d6:
bb:0c:b9:e8:6c:aa:e4:57:fc:97:91:40:82:b0:fc:
01:f1:f6:bb:b4:67:5e:93:50:e9:03:a8:ab:bb:4f:
eb:39:29:2a:c4:8f:12:14:11:41:73:0b:c9:ba:ba:
75:27:59:90:8c:a0:a1:35:f6:88:e2:7f:9c:b6:c3:
3f:bf:9a:e8:c1:22:07:13:72:f8:f8:0a:61:93:41:
7c:3e:a9:dc:1c:ad:f8:d3:27:06:29:10:a9:ee:40:
44:a1:02:6c:be:cf:2a:ec:9b:cb:eb:f6:13:c4:d7:
11:1b:0e:41:4a:10:0a:05:e4:02:fc:91:c4:42:0e:
ad:05:0d:50:c2:0f:a8:25:48:89:50:7b:02:f1:06:
1d:5d:01:63:a7:fc:a0:b8:9f:d7:d8:fc:4d:44:57:
e8:d6:6b:84:5d:39:df:c3:96:bb:80:9e:60:ea:87:
55:6f:86:df:e0:1d:3b:1a:a7:ec:27:97:55:a6:11:
f0:1c:ac:2f:f5:dc:61:83:2f:7a:8d:34:46:c3:46:
17:ad:6b:00:4b:e7:da:4b:97:8e:2f:60:81:b0:32:
9b:a3:21:aa:83:6e:e9:0d:87:42:40:b6:d2:52:55:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E5:04:39:81:B1:4E:14:EC:E5:47:3C:90:1D:0B:F3:7D:1D:25:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e4230c0-3b78-37c0-a10f-4caaf83663a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.222.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:ba:25:00:07:64:95:1c:2d:d1:c2:bb:fe:68:1a:a1:b0:1e:
06:14:a7:c8:1b:fe:8b:cb:d3:88:de:82:e5:f5:58:00:ca:2d:
da:91:f9:e9:87:34:0c:41:2e:45:81:99:0f:f9:d9:f8:09:1e:
bc:74:48:b8:69:7c:7f:da:34:be:ce:b2:74:d1:4b:de:d3:d4:
13:9d:a4:9d:8c:fb:47:dd:e1:49:d0:43:06:6b:a1:9c:65:c1:
78:ff:d7:4b:0c:4d:52:e5:93:95:e4:7e:51:54:a6:5a:f6:c8:
81:98:41:4b:3f:d8:eb:29:43:c3:df:b9:d9:44:5f:47:b1:1c:
94:5d:fe:75:fd:06:44:1f:ed:35:6b:9b:73:30:86:a4:a4:91:
cb:ea:d4:63:c9:a9:8f:75:cc:1d:2a:c1:9f:82:1e:be:79:aa:
eb:6c:f1:30:f8:a0:7e:02:df:72:a9:ba:42:a9:78:c1:26:8a:
92:8e:90:36:9d:15:46:2a:bf:14:41:48:5c:82:0a:b3:c9:72:
a0:18:1a:8a:c0:05:ce:e4:5e:cf:13:ef:59:d2:09:50:95:79:
1e:e7:99:c5:ab:8e:49:dd:49:76:c9:62:f7:b6:42:b6:49:8e:
0f:d2:63:6f:5e:7d:ea:de:c5:c9:57:d5:78:6f:5e:18:96:22:
65:48:68:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEVZdxBozTPRsgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NGU1NDdlNjktYmNmMi00Y2ExLTg5MDctMWNlNjA4YTIyOGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFNMvq50HPKP6A3G9NyWDp1kjzy5N4Pq8dzS
e9a7DLnobKrkV/yXkUCCsPwB8fa7tGdek1DpA6iru0/rOSkqxI8SFBFBcwvJurp1
J1mQjKChNfaI4n+ctsM/v5rowSIHE3L4+Aphk0F8PqncHK340ycGKRCp7kBEoQJs
vs8q7JvL6/YTxNcRGw5BShAKBeQC/JHEQg6tBQ1Qwg+oJUiJUHsC8QYdXQFjp/yg
uJ/X2PxNRFfo1muEXTnfw5a7gJ5g6odVb4bf4B07GqfsJ5dVphHwHKwv9dxhgy96
jTRGw0YXrWsAS+faS5eOL2CBsDKboyGqg27pDYdCQLbSUlWesQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDblBDmBsU4U7OVHPJAdC/N9HSX1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U0MjMwYzAtM2I3OC0z
N2MwLWExMGYtNGNhYWY4MzY2M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYt4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK26JQAHZJUcLdHCu/5oGqGwHgYUp8gb/ovL04jeguX1WADKLdqR+emH
NAxBLkWBmQ/52fgJHrx0SLhpfH/aNL7OsnTRS97T1BOdpJ2M+0fd4UnQQwZroZxl
wXj/10sMTVLlk5XkflFUplr2yIGYQUs/2OspQ8PfudlEX0exHJRd/nX9BkQf7TVr
m3MwhqSkkcvq1GPJqY91zB0qwZ+CHr55quts8TD4oH4C33KpukKpeMEmipKOkDad
FUYqvxRBSFyCCrPJcqAYGorABc7kXs8T71nSCVCVeR7nmcWrjkndSXbJYve2QrZJ
jg/SY29eferexclX1XhvXhiWImVIaAY=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:40 2025 by rpki-client