Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/609130bf-67ba-3889-8c9d-8ca2a4f10583.roa
File: 609130bf-67ba-3889-8c9d-8ca2a4f10583.roa (raw, json)
Hash identifier: Q47pFbDoAVtTJc+q1di5RuqVUuz2x73xXidqhZ1G42E=
Subject key identifier: 5E:FE:A7:16:DE:CD:51:A5:90:6D:DF:04:6A:9C:75:B3:19:74:A7:64
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11CB81B67649D111E24100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/609130bf-67ba-3889-8c9d-8ca2a4f10583.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.51.150.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:cb:81:b6:76:49:d1:11:e2:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=da308c06-5fac-4c18-be3b-45aad5e5dc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:16:b9:52:55:ac:99:80:60:42:87:e3:2a:ec:
e6:34:06:ca:41:2b:f4:7f:62:30:ef:2d:35:33:9c:
cf:be:80:b5:8a:83:ea:72:0b:d4:60:88:21:5c:20:
a0:dd:35:b7:1f:09:26:a0:e4:ad:be:f1:b9:9a:fd:
99:7e:b9:4f:51:aa:c7:9c:8e:61:47:d8:e3:7c:23:
cb:c5:e4:32:32:66:cd:f2:0f:20:b5:89:78:ab:e7:
fb:c5:55:d7:a4:5f:6b:9a:ec:0f:03:c8:29:a3:42:
4f:bf:2e:d1:59:2c:f3:8e:f2:d7:b5:1c:49:5e:47:
a2:94:ac:04:58:88:ac:bd:84:01:43:50:90:09:7b:
93:e1:41:ac:ae:e2:8a:71:b1:21:32:17:5c:fe:1d:
26:79:29:a8:98:78:3b:23:d9:04:de:e5:c3:38:86:
c5:da:12:ad:a0:95:be:5f:3c:27:91:6c:d3:da:a3:
25:15:b4:09:39:6e:aa:77:98:c9:fb:a4:ce:36:01:
41:c6:5e:98:ac:62:a4:6e:f9:68:3c:b1:60:ef:07:
1e:36:26:99:83:f1:e3:2a:6a:d1:60:1d:8e:d3:0a:
95:9f:3d:69:a0:7f:97:a9:ba:2b:f1:2d:5f:92:4a:
23:a6:cb:50:e6:c2:a4:4c:9a:35:c2:1f:37:15:ae:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FE:A7:16:DE:CD:51:A5:90:6D:DF:04:6A:9C:75:B3:19:74:A7:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/609130bf-67ba-3889-8c9d-8ca2a4f10583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.51.150.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:53:17:30:3b:08:4a:b5:91:39:00:59:14:65:6a:2f:fc:91:
e0:72:f9:b8:3b:5d:45:bb:b5:96:ec:f5:7f:d6:10:89:52:fc:
2b:10:02:99:c3:86:9b:9d:c0:fc:92:79:11:92:a5:a4:35:c7:
e5:e0:b1:2e:e7:b9:e6:c1:ba:ec:12:61:b9:bc:c8:0c:29:c6:
09:09:d9:ee:0b:b7:88:3b:61:d6:f5:29:be:59:3c:fc:be:4b:
de:ed:03:fe:22:48:6d:67:4e:ef:fc:56:13:c2:51:48:0a:b8:
f8:87:23:01:1b:c7:6e:f1:85:58:3c:75:8e:a3:0a:04:99:d3:
46:ac:01:c5:b8:50:34:5d:af:34:b2:bb:5b:1c:14:01:ae:34:
f4:97:ab:09:d3:ad:3f:7b:8f:fe:53:dc:bb:04:6f:97:45:3d:
03:e8:27:63:1b:bb:ea:64:76:f9:4e:06:ae:eb:79:f8:47:d1:
c3:14:9e:5d:21:f6:00:39:bc:f6:fd:d3:d2:9d:6d:34:9e:9d:
8d:40:cc:8e:ce:cd:6f:ee:f4:d6:e8:44:33:56:7a:f7:a1:8f:
c1:68:50:c4:29:f5:d0:76:37:01:03:1f:52:0a:1a:a3:2c:94:
82:10:c1:df:c9:ae:de:58:c6:ac:5f:76:2f:b7:10:a0:3f:47:
c8:07:16:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEcuBtnZJ0RHiQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZGEzMDhjMDYtNWZhYy00YzE4LWJlM2ItNDVhYWQ1ZTVkYzc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixa5UlWsmYBgQofjKuzmNAbKQSv0f2Iw7y01
M5zPvoC1ioPqcgvUYIghXCCg3TW3HwkmoOStvvG5mv2ZfrlPUarHnI5hR9jjfCPL
xeQyMmbN8g8gtYl4q+f7xVXXpF9rmuwPA8gpo0JPvy7RWSzzjvLXtRxJXkeilKwE
WIisvYQBQ1CQCXuT4UGsruKKcbEhMhdc/h0meSmomHg7I9kE3uXDOIbF2hKtoJW+
XzwnkWzT2qMlFbQJOW6qd5jJ+6TONgFBxl6YrGKkbvloPLFg7wceNiaZg/HjKmrR
YB2O0wqVnz1poH+Xqbor8S1fkkojpstQ5sKkTJo1wh83Fa7wRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7+pxbezVGlkG3fBGqcdbMZdKdkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjA5MTMwYmYtNjdiYS0z
ODg5LThjOWQtOGNhMmE0ZjEwNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjOWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ9TFzA7CEq1kTkAWRRlai/8keBy+bg7XUW7tZbs9X/WEIlS/CsQApnD
hpudwPySeRGSpaQ1x+XgsS7nuebBuuwSYbm8yAwpxgkJ2e4Lt4g7Ydb1Kb5ZPPy+
S97tA/4iSG1nTu/8VhPCUUgKuPiHIwEbx27xhVg8dY6jCgSZ00asAcW4UDRdrzSy
u1scFAGuNPSXqwnTrT97j/5T3LsEb5dFPQPoJ2Mbu+pkdvlOBq7refhH0cMUnl0h
9gA5vPb909KdbTSenY1AzI7OzW/u9NboRDNWevehj8FoUMQp9dB2NwEDH1IKGqMs
lIIQwd/Jrt5Yxqxfdi+3EKA/R8gHFs8=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:48:49 2025 by rpki-client