Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/423892ea-4d88-3ae1-b068-c7ddfee5e296.roa
File: 423892ea-4d88-3ae1-b068-c7ddfee5e296.roa (raw, json)
Hash identifier: qA4v8b/u6syvH4T4E5kr02Z2BznamY0FxEzeHdF0JQ0=
Subject key identifier: 1B:C1:53:DC:F4:75:87:BE:AA:22:99:30:3E:77:88:2D:35:67:A2:54
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12FBFDD6E8C756E4390CE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/423892ea-4d88-3ae1-b068-c7ddfee5e296.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 76.29.98.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:fb:fd:d6:e8:c7:56:e4:39:0c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=9f939d0d-8053-433c-af69-d0d41ce541f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a8:4d:24:f7:6f:f0:e4:c4:54:af:e1:98:6b:
54:f2:7b:bf:2f:32:de:a7:b7:78:85:32:5f:19:f2:
2d:1d:03:63:7d:58:e6:0a:fa:a9:d4:1d:67:85:07:
e0:1b:8d:1f:65:fe:77:8b:a7:f9:f5:67:5d:bb:ba:
8a:73:62:6f:80:06:d4:ef:fd:89:41:52:e2:8d:77:
ff:de:b4:13:b7:3b:3b:7b:02:f6:3d:b4:51:53:60:
db:57:c3:27:dc:ef:2a:7d:2a:5c:7c:57:83:49:5f:
bb:b0:05:1b:66:e8:7d:69:1d:e7:eb:6b:18:d2:03:
e5:04:87:85:8a:2f:64:69:ab:16:d4:13:d4:0c:5e:
a3:33:4e:be:e4:73:53:20:71:db:52:17:eb:6c:ec:
53:b4:65:fd:1c:74:d1:98:d8:33:4c:fa:a9:91:6a:
b5:da:51:90:72:31:f6:bc:d2:a4:5e:2a:b7:79:6e:
f4:a9:34:34:9c:fa:23:bf:0a:33:0e:4c:90:26:c5:
d8:ec:bf:97:b7:c5:3b:ef:47:76:53:36:53:39:dc:
87:3e:49:d2:8d:9b:b1:69:04:53:d7:88:44:ea:b9:
9a:ea:48:c6:1d:66:67:f9:b8:e6:7e:3c:1e:e1:c5:
91:f5:35:81:16:ea:ea:ca:48:24:4b:2b:6e:e1:7a:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C1:53:DC:F4:75:87:BE:AA:22:99:30:3E:77:88:2D:35:67:A2:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/423892ea-4d88-3ae1-b068-c7ddfee5e296.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.29.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:97:4b:0a:d6:13:04:45:91:5c:85:5b:a5:f3:90:51:b8:08:
23:a7:5b:ba:9b:80:14:63:72:65:b0:ef:ab:9b:28:c1:5b:e9:
da:3d:ca:97:42:91:96:13:b1:cc:bb:48:08:51:1f:f3:e4:8e:
c4:2e:ec:fb:68:5d:fa:7d:87:94:63:d4:2d:1a:60:6f:d4:4c:
b2:37:01:33:9a:d1:13:10:9e:68:73:e2:31:b4:ed:98:ed:dd:
2f:dc:5d:1b:4d:4d:52:4c:07:31:f4:bb:36:4a:16:c8:94:50:
21:e7:c9:84:d6:5a:fb:85:29:f5:02:a9:0a:bd:f6:aa:fe:30:
6b:6d:3f:f2:73:0a:bb:61:df:53:e8:53:71:f5:fb:ab:52:59:
fe:1d:5b:2a:09:65:1e:3d:4f:96:0c:84:ba:15:f3:09:da:d4:
cd:ae:ec:2d:22:97:d6:4c:b4:e2:29:c7:f7:d1:47:71:50:81:
29:62:a1:22:f0:2b:50:fd:5d:c6:07:18:87:51:27:eb:e0:c9:
20:4c:a9:13:63:22:06:29:2d:ac:d7:c8:65:0c:f9:05:4d:44:
70:f4:06:2f:b1:74:18:db:f2:0c:eb:c7:88:46:23:fd:4a:40:
07:1c:3a:41:17:8b:0f:67:6a:55:78:ea:53:62:92:41:cc:ea:
ca:fc:e5:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEvv91ujHVuQ5DOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
OWY5MzlkMGQtODA1My00MzNjLWFmNjktZDBkNDFjZTU0MWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqhNJPdv8OTEVK/hmGtU8nu/LzLep7d4hTJf
GfItHQNjfVjmCvqp1B1nhQfgG40fZf53i6f59Wddu7qKc2JvgAbU7/2JQVLijXf/
3rQTtzs7ewL2PbRRU2DbV8Mn3O8qfSpcfFeDSV+7sAUbZuh9aR3n62sY0gPlBIeF
ii9kaasW1BPUDF6jM06+5HNTIHHbUhfrbOxTtGX9HHTRmNgzTPqpkWq12lGQcjH2
vNKkXiq3eW70qTQ0nPojvwozDkyQJsXY7L+Xt8U770d2UzZTOdyHPknSjZuxaQRT
14hE6rma6kjGHWZn+bjmfjwe4cWR9TWBFurqykgkSytu4XrDkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBvBU9z0dYe+qiKZMD53iC01Z6JUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDIzODkyZWEtNGQ4OC0z
YWUxLWIwNjgtYzdkZGZlZTVlMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTB1iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALKXSwrWEwRFkVyFW6XzkFG4CCOnW7qbgBRjcmWw76ubKMFb6do9ypdC
kZYTscy7SAhRH/PkjsQu7PtoXfp9h5Rj1C0aYG/UTLI3ATOa0RMQnmhz4jG07Zjt
3S/cXRtNTVJMBzH0uzZKFsiUUCHnyYTWWvuFKfUCqQq99qr+MGttP/JzCrth31Po
U3H1+6tSWf4dWyoJZR49T5YMhLoV8wna1M2u7C0il9ZMtOIpx/fRR3FQgSlioSLw
K1D9XcYHGIdRJ+vgySBMqRNjIgYpLazXyGUM+QVNRHD0Bi+xdBjb8gzrx4hGI/1K
QAccOkEXiw9nalV46lNikkHM6sr85es=
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:12:53 2025 by rpki-client