Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a1f0853-4b70-3e5a-b08d-d368422805c2.roa
File: 5a1f0853-4b70-3e5a-b08d-d368422805c2.roa (raw, json)
Hash identifier: ZLkADJZTgBXDgSeyS9mKca8+73e1iCUHimftwZIeXD4=
Subject key identifier: DE:A9:F7:BF:C3:DA:13:08:B8:C8:11:01:CD:0D:D2:B3:1A:5C:21:12
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11C9F8AC880BFAB0CF8380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a1f0853-4b70-3e5a-b08d-d368422805c2.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.47.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:c9:f8:ac:88:0b:fa:b0:cf:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=88d13934-f406-4a21-91fd-3b41bbe5dfeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:b4:45:4a:a5:93:98:7a:98:7e:a1:fa:06:
6d:2f:d4:e7:72:04:8c:b6:f0:9c:1e:4e:48:07:11:
8c:66:b5:7c:db:79:16:29:08:76:bb:2a:4a:08:9c:
55:00:fd:a5:d3:95:cc:85:f4:64:b9:11:a7:4b:33:
91:1f:6c:21:a8:10:ca:36:51:19:d3:3a:35:87:9d:
a6:79:75:96:2a:f4:8f:ae:72:d8:43:bd:94:62:d7:
87:1a:24:68:73:c6:35:74:29:0f:34:83:5b:72:7c:
90:7f:25:58:44:3c:bf:57:f2:8b:2b:5f:cf:ad:c1:
11:e2:df:17:32:53:76:63:e4:d1:88:85:ff:b0:b5:
ef:0d:e2:36:2d:3f:4d:ff:42:a4:9c:fe:b7:4f:99:
55:d8:df:a6:b3:49:c2:b6:c6:94:39:e4:2a:0b:01:
bf:84:0f:63:99:1a:90:79:64:c1:23:43:5f:8d:6d:
d0:7a:20:8d:9f:28:6e:32:e6:f6:14:d6:f9:9c:49:
5c:2d:d0:a8:e7:cc:bb:4e:6b:ab:5c:8a:69:44:89:
af:d2:58:95:ae:bc:de:c3:2e:37:db:7d:7e:35:72:
be:85:d4:65:f3:94:30:1f:27:9b:c7:ae:ad:4b:dd:
d1:aa:45:b7:6f:a4:51:64:65:4b:4c:5b:9f:1b:49:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A9:F7:BF:C3:DA:13:08:B8:C8:11:01:CD:0D:D2:B3:1A:5C:21:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a1f0853-4b70-3e5a-b08d-d368422805c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.47.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:66:f1:22:da:f1:e8:c8:ea:6f:ce:55:12:ca:70:90:7b:94:
0f:9f:d6:5b:96:e6:e4:84:19:a9:f1:0d:9d:24:25:6d:85:28:
90:de:24:b0:ea:c5:16:46:0d:2c:9f:cc:1a:ee:68:4e:7e:1f:
8b:b1:74:f7:8a:d6:01:c1:d7:72:cf:36:21:c1:10:ef:0f:1c:
19:d3:20:a5:72:3b:ad:9c:d3:eb:51:88:f3:dc:b3:06:c2:6f:
0f:67:d0:48:19:ea:fe:fa:bb:c1:6f:df:88:d9:7c:82:4c:3a:
f1:a6:0f:ce:06:55:2e:62:b3:11:1a:ba:d6:90:1d:69:91:1b:
2c:4d:f1:60:ce:3c:96:a6:88:14:bc:57:31:42:80:ae:08:15:
37:2d:e4:b6:23:a5:5f:14:a3:8a:ff:31:52:a7:8d:1f:0f:2d:
ee:aa:9f:46:73:37:72:3f:6f:a1:fa:2d:4f:3f:fb:d1:12:8d:
bb:ee:12:f9:55:6b:ff:1b:ee:f6:5b:97:dd:c7:3a:29:51:8a:
56:ce:69:b5:f8:6b:16:7b:bc:73:67:ba:a1:22:d7:cc:bc:8f:
03:dc:ef:0f:c8:48:23:31:a0:a5:c4:43:2e:b4:1e:e2:9d:79:
a2:ba:28:82:8d:4d:48:8d:a8:90:d6:dc:36:28:af:e7:f6:e2:
32:1e:24:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEcn4rIgL+rDPg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ODhkMTM5MzQtZjQwNi00YTIxLTkxZmQtM2I0MWJiZTVkZmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/u0RUqlk5h6mH6h+gZtL9TncgSMtvCcHk5I
BxGMZrV823kWKQh2uypKCJxVAP2l05XMhfRkuRGnSzORH2whqBDKNlEZ0zo1h52m
eXWWKvSPrnLYQ72UYteHGiRoc8Y1dCkPNINbcnyQfyVYRDy/V/KLK1/PrcER4t8X
MlN2Y+TRiIX/sLXvDeI2LT9N/0KknP63T5lV2N+ms0nCtsaUOeQqCwG/hA9jmRqQ
eWTBI0NfjW3QeiCNnyhuMub2FNb5nElcLdCo58y7TmurXIppRImv0liVrrzewy43
231+NXK+hdRl85QwHyebx66tS93RqkW3b6RRZGVLTFufG0n3HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6p97/D2hMIuMgRAc0N0rMaXCESMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWExZjA4NTMtNGI3MC0z
ZTVhLWIwOGQtZDM2ODQyMjgwNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYi/EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5m8SLa8ejI6m/OVRLKcJB7lA+f1luW5uSEGanxDZ0kJW2FKJDeJLDq
xRZGDSyfzBruaE5+H4uxdPeK1gHB13LPNiHBEO8PHBnTIKVyO62c0+tRiPPcswbC
bw9n0EgZ6v76u8Fv34jZfIJMOvGmD84GVS5isxEautaQHWmRGyxN8WDOPJamiBS8
VzFCgK4IFTct5LYjpV8Uo4r/MVKnjR8PLe6qn0ZzN3I/b6H6LU8/+9ESjbvuEvlV
a/8b7vZbl93HOilRilbOabX4axZ7vHNnuqEi18y8jwPc7w/ISCMxoKXEQy60HuKd
eaK6KIKNTUiNqJDW3DYor+f24jIeJOc=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:57:58 2025 by rpki-client