Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f6d57ed-d724-3da8-bf55-dd7805ff32db.roa
File: 3f6d57ed-d724-3da8-bf55-dd7805ff32db.roa (raw, json)
Hash identifier: RI502no41lHvx14rcRZE+nvyPg6UBJHKQCC+lUSAJaU=
Subject key identifier: 47:CE:A0:C9:E2:21:46:56:5C:E6:A9:68:0C:96:46:C5:AE:E7:48:5D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143C563E4E486F3553B48C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f6d57ed-d724-3da8-bf55-dd7805ff32db.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.196.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:56:3e:4e:48:6f:35:53:b4:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=63ee52e6-8265-4a3f-9e8f-da27a31bb05f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c7:88:ff:5a:61:39:ee:12:c2:64:b7:f1:16:
6d:f5:60:05:db:68:ad:c3:0e:5e:56:37:c4:7f:74:
24:f8:6e:5a:e5:b3:b3:62:fa:62:25:a7:45:87:e9:
57:23:36:2b:0e:5b:e2:00:a2:51:ed:25:40:cc:c7:
6f:ac:82:f6:cd:7c:8a:0f:3a:36:c0:ce:f9:e7:4f:
57:04:3f:c4:60:58:aa:a0:2d:28:bb:43:1d:ee:8d:
fb:26:c3:71:fe:0a:41:44:ea:1e:0b:0a:fa:db:8f:
33:6e:f2:55:60:56:04:29:4e:2c:0e:15:db:da:1e:
a1:78:3a:ed:5d:bc:76:ea:b7:ee:c3:b0:80:44:8a:
3b:1d:ad:79:83:dd:bd:05:5c:5e:0b:11:4c:07:15:
75:9b:7e:f4:5f:21:a3:93:74:6c:0a:a0:b5:a2:ec:
eb:42:65:9d:e4:82:c9:98:cc:3f:d2:b9:da:b6:e8:
a2:0e:52:0b:b9:38:55:d5:4b:a8:b6:c2:72:59:33:
07:93:7f:ae:58:67:64:57:fe:44:0a:3d:57:45:33:
09:36:2d:f4:80:a7:2b:77:25:e2:e9:f1:ca:49:b3:
0b:a1:de:96:61:cb:64:b9:41:43:55:fe:8b:90:d2:
2f:55:79:36:f6:c9:78:4c:c5:cc:b1:f7:2c:a4:dd:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CE:A0:C9:E2:21:46:56:5C:E6:A9:68:0C:96:46:C5:AE:E7:48:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f6d57ed-d724-3da8-bf55-dd7805ff32db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.196.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:2f:87:3b:aa:23:ed:06:8c:93:cc:ac:81:e7:6f:6f:34:f0:
42:fa:99:d2:6e:ab:19:79:7a:9f:50:b3:54:93:cc:9f:c6:de:
b8:ee:48:b0:70:80:9d:76:75:b5:b4:ff:d6:e7:a8:5c:4a:dc:
85:1e:2d:cc:bd:46:4e:03:ee:25:47:b2:58:24:d4:90:81:bd:
29:7d:c6:78:cd:59:58:6a:5b:eb:c9:12:0c:f6:84:d2:7d:ef:
07:88:cd:09:e0:36:a6:ec:e7:10:cf:48:67:38:01:ab:98:20:
06:f7:b4:a6:6b:41:32:81:8a:00:bb:75:d9:49:ea:1e:2a:e1:
9e:18:8d:92:d6:55:ff:13:7d:14:17:87:88:18:24:84:50:8d:
93:18:82:1e:90:ae:c2:22:3c:8c:d5:d0:78:8e:99:50:cb:5d:
70:d4:7e:07:ed:38:3b:cb:2d:57:f0:fd:2f:35:81:2b:e1:fb:
78:fd:10:a9:ad:ea:27:2c:36:56:59:b6:f7:8d:33:47:e7:20:
7a:c7:36:d7:b3:f2:1a:44:3a:55:de:e9:52:c8:cc:1b:52:fa:
7e:05:dc:3f:98:a4:33:8f:9f:fc:ba:02:57:f0:f8:80:b7:e4:
0e:b9:72:bf:0c:55:f2:6f:f9:b0:04:21:00:b7:fd:93:ca:fd:
f9:83:dd:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPFY+TkhvNVO0jAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NjNlZTUyZTYtODI2NS00YTNmLTllOGYtZGEyN2EzMWJiMDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8eI/1phOe4SwmS38RZt9WAF22itww5eVjfE
f3Qk+G5a5bOzYvpiJadFh+lXIzYrDlviAKJR7SVAzMdvrIL2zXyKDzo2wM75509X
BD/EYFiqoC0ou0Md7o37JsNx/gpBROoeCwr6248zbvJVYFYEKU4sDhXb2h6heDrt
Xbx26rfuw7CARIo7Ha15g929BVxeCxFMBxV1m370XyGjk3RsCqC1ouzrQmWd5ILJ
mMw/0rnatuiiDlILuThV1UuotsJyWTMHk3+uWGdkV/5ECj1XRTMJNi30gKcrdyXi
6fHKSbMLod6WYctkuUFDVf6LkNIvVXk29sl4TMXMsfcspN1M0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEfOoMniIUZWXOapaAyWRsWu50hdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y2ZDU3ZWQtZDcyNC0z
ZGE4LWJmNTUtZGQ3ODA1ZmYzMmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsR4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANUvhzuqI+0GjJPMrIHnb2808EL6mdJuqxl5ep9Qs1STzJ/G3rjuSLBw
gJ12dbW0/9bnqFxK3IUeLcy9Rk4D7iVHslgk1JCBvSl9xnjNWVhqW+vJEgz2hNJ9
7weIzQngNqbs5xDPSGc4AauYIAb3tKZrQTKBigC7ddlJ6h4q4Z4YjZLWVf8TfRQX
h4gYJIRQjZMYgh6QrsIiPIzV0HiOmVDLXXDUfgftODvLLVfw/S81gSvh+3j9EKmt
6icsNlZZtveNM0fnIHrHNtez8hpEOlXe6VLIzBtS+n4F3D+YpDOPn/y6Alfw+IC3
5A65cr8MVfJv+bAEIQC3/ZPK/fmD3TQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:46:15 2025 by rpki-client