Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43830d14-0746-34fc-8cfc-c6fa2fefda84.roa
File: 43830d14-0746-34fc-8cfc-c6fa2fefda84.roa (raw, json)
Hash identifier: jEqRfgijf9uicVWMepl2HGgJ4W9LS+zakj2V0IOS5zc=
Subject key identifier: 79:27:38:F5:BE:EA:A6:B8:15:16:21:E6:FB:97:E4:FD:A0:77:A5:49
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C131B11C33F03AE7CAA1E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43830d14-0746-34fc-8cfc-c6fa2fefda84.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.63.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:1b:11:c3:3f:03:ae:7c:aa:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=37bf9c0f-73d4-4dd1-b007-21a1691b8885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:5b:f6:ea:69:00:7c:2c:42:3c:e6:54:fa:
59:e2:34:1b:1f:b8:cc:ac:6e:a6:48:8f:05:43:7d:
f5:c6:cb:99:29:bb:25:27:01:79:3b:9f:77:f6:3d:
03:f1:d2:43:86:41:aa:3e:bd:20:9f:c5:4a:a7:d9:
2d:e9:18:52:e0:25:85:58:3b:1a:48:d0:39:82:0c:
25:d1:61:72:22:fd:d0:c8:c6:04:68:c3:c6:e9:ac:
7e:67:38:93:8b:26:bf:5d:31:7b:4e:8c:55:98:1f:
de:90:07:5d:66:f8:f9:32:eb:43:57:bb:8e:77:28:
d6:82:c3:64:bc:c1:00:dd:98:a7:77:fb:77:01:23:
e0:be:c6:b1:08:5c:2b:00:e2:f2:de:83:02:a5:b2:
3b:17:21:d0:7f:bd:9b:8f:ca:51:85:32:3c:3b:f1:
6d:8e:67:7a:c6:6e:75:0c:e6:4b:67:3f:8b:50:7a:
41:7b:ab:03:aa:44:5c:ab:78:64:7e:f6:38:21:da:
5f:7a:a8:dc:1a:cc:a1:5d:ec:ec:f8:87:8f:63:a1:
97:d7:65:ba:bb:52:09:9a:c5:3a:29:de:f4:28:94:
4d:77:af:23:dd:32:3b:ee:60:c4:36:28:22:96:33:
eb:fc:1f:9a:b4:e5:20:c0:8b:0b:05:9e:7e:e9:75:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:27:38:F5:BE:EA:A6:B8:15:16:21:E6:FB:97:E4:FD:A0:77:A5:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43830d14-0746-34fc-8cfc-c6fa2fefda84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.63.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:4e:12:e6:56:b6:18:91:12:48:65:4a:a7:aa:10:9f:e8:5f:
5c:be:71:f8:9c:f1:0d:6f:e0:d7:a3:07:a4:47:94:36:5b:77:
d6:16:8b:4a:69:01:13:76:35:58:94:d0:4d:eb:bd:33:6d:18:
cf:8c:3e:3c:85:41:f2:23:66:65:e4:35:09:e3:23:2f:33:fb:
55:28:5b:df:3a:03:c1:db:96:83:b5:9a:af:27:1c:98:24:3c:
34:14:c7:64:c4:27:df:24:12:e4:5f:fe:4b:4d:b5:ff:77:24:
93:f9:41:ed:32:85:4f:41:1e:61:7b:65:61:c9:6a:2f:d9:16:
e9:46:43:67:ac:80:f5:c6:31:0d:69:d0:7f:83:b2:37:93:04:
b4:f5:3d:fe:93:62:20:75:32:ed:44:b9:b8:7a:3b:b4:80:a1:
ae:f0:13:22:41:c7:0e:bf:7b:39:71:57:79:b4:d0:98:5f:46:
aa:7c:ef:d8:ad:4c:c4:fe:16:02:fc:d6:0e:a4:a9:ee:a4:07:
22:3e:3e:1e:9a:38:89:89:ef:3b:39:14:f9:ed:20:8a:76:31:
da:fa:2a:f1:63:5a:d6:16:87:99:87:44:53:d8:01:b4:37:53:
f2:f8:40:d0:fb:43:eb:f6:f8:88:58:ce:67:9a:74:2a:be:a0:
bf:36:2f:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMExsRwz8DrnyqHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MzdiZjljMGYtNzNkNC00ZGQxLWIwMDctMjFhMTY5MWI4ODg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSdb9uppAHwsQjzmVPpZ4jQbH7jMrG6mSI8F
Q331xsuZKbslJwF5O5939j0D8dJDhkGqPr0gn8VKp9kt6RhS4CWFWDsaSNA5ggwl
0WFyIv3QyMYEaMPG6ax+ZziTiya/XTF7ToxVmB/ekAddZvj5MutDV7uOdyjWgsNk
vMEA3Zind/t3ASPgvsaxCFwrAOLy3oMCpbI7FyHQf72bj8pRhTI8O/Ftjmd6xm51
DOZLZz+LUHpBe6sDqkRcq3hkfvY4IdpfeqjcGsyhXezs+IePY6GX12W6u1IJmsU6
Kd70KJRNd68j3TI77mDENigiljPr/B+atOUgwIsLBZ5+6XVL0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHknOPW+6qa4FRYh5vuX5P2gd6VJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM4MzBkMTQtMDc0Ni0z
NGZjLThjZmMtYzZmYTJmZWZkYTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYj/IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANNOEuZWthiREkhlSqeqEJ/oX1y+cfic8Q1v4NejB6RHlDZbd9YWi0pp
ARN2NViU0E3rvTNtGM+MPjyFQfIjZmXkNQnjIy8z+1UoW986A8HbloO1mq8nHJgk
PDQUx2TEJ98kEuRf/ktNtf93JJP5Qe0yhU9BHmF7ZWHJai/ZFulGQ2esgPXGMQ1p
0H+DsjeTBLT1Pf6TYiB1Mu1Eubh6O7SAoa7wEyJBxw6/ezlxV3m00JhfRqp879it
TMT+FgL81g6kqe6kByI+Ph6aOImJ7zs5FPntIIp2Mdr6KvFjWtYWh5mHRFPYAbQ3
U/L4QND7Q+v2+IhYzmeadCq+oL82Lxw=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:35:55 2025 by rpki-client