Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63189500-44c1-3be1-b7cd-398110773615.roa
File: 63189500-44c1-3be1-b7cd-398110773615.roa (raw, json)
Hash identifier: w6qxzDQES2ryScuXSAc27Fk9Fw5KKINJNq52qAWyc+s=
Subject key identifier: AC:D2:2E:88:92:48:CE:92:30:46:2F:AD:3A:2D:0E:31:B0:51:D3:DB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C12FCDFE548797976898700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63189500-44c1-3be1-b7cd-398110773615.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.193.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:12:fc:df:e5:48:79:79:76:89:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=85e2eea6-7985-4913-9fa1-bb86c803d09e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:88:27:08:e9:17:b6:ee:6a:2e:67:ed:09:
f0:0c:03:80:60:17:6d:7c:5f:6b:b3:3a:cd:ce:1d:
67:48:9e:08:3d:cd:c2:74:8a:e3:da:31:bc:44:53:
a9:2b:e4:b2:aa:6f:f8:1d:f9:57:a5:63:6e:c1:d1:
41:69:15:b0:7b:cb:72:6b:a3:c5:93:59:cb:d8:d2:
af:8a:0d:95:78:37:b8:2a:be:2a:a4:e1:37:42:0d:
2b:70:a1:96:fb:a4:6d:5b:5f:f3:53:0d:f2:c9:ad:
a1:0a:cc:11:d7:1c:32:76:66:b1:87:89:5a:d0:78:
ef:76:93:ee:b0:04:1e:69:26:fa:52:3f:c1:0b:0e:
07:66:1c:08:2c:bd:bb:d0:7b:a7:eb:43:3b:a9:2d:
6d:0c:f4:32:28:61:23:03:1a:f0:b0:15:f0:64:f0:
ab:e1:71:51:be:5d:af:d3:6b:fd:73:eb:df:f1:63:
26:33:d1:34:97:0f:25:40:7d:97:f9:2a:37:2c:94:
3b:c6:fe:a4:78:6f:53:ef:99:68:88:e2:2a:e3:9d:
22:70:fe:83:fc:4e:3b:b3:60:71:4b:ad:f3:15:69:
db:26:f4:a7:6d:35:9a:94:89:1d:02:31:1f:dd:48:
e7:75:5e:cd:99:43:9f:85:1f:c6:b5:2a:62:e4:9d:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D2:2E:88:92:48:CE:92:30:46:2F:AD:3A:2D:0E:31:B0:51:D3:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63189500-44c1-3be1-b7cd-398110773615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.193.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:36:5f:29:4c:9d:2c:f9:8c:29:16:ae:08:6a:2c:04:61:32:
7c:43:52:73:c3:c9:ed:47:d3:9b:cc:6e:cc:bc:99:98:f4:1d:
f9:7e:ac:a7:2f:f9:7e:e7:07:cd:53:c5:8a:78:30:b7:6a:92:
10:1f:5c:e6:1b:a4:65:ef:9f:2b:a7:a3:36:f8:1c:54:69:8a:
11:39:aa:64:32:39:4d:47:95:94:2b:1a:19:ed:5e:6d:a0:f0:
2e:ed:c2:ce:04:ac:30:35:d5:b1:2a:d1:5a:bd:8a:7d:d9:c2:
c9:8c:27:ae:14:72:df:ce:c5:5d:9f:05:f9:7e:00:28:74:4e:
87:43:72:49:7d:61:e5:fc:16:c5:6d:d7:f3:bf:49:fa:bd:d9:
66:c7:92:42:f2:59:f0:b6:e4:63:55:1d:62:b4:73:7c:40:47:
10:e0:8c:51:ed:43:7f:cf:3a:26:1b:1b:15:84:a4:76:d1:29:
55:19:65:89:92:0e:c9:f0:ab:88:7e:ba:7d:78:1d:d8:06:9b:
e2:7a:6c:00:68:61:92:97:ae:77:f5:31:a3:d2:52:a3:0b:94:
26:ec:ce:67:f3:46:a4:e2:c5:cf:0b:84:f9:be:86:16:6c:aa:
a9:14:58:0e:19:6a:a8:3f:4f:30:e6:8c:32:bd:e1:ff:2f:a7:
b4:1d:a0:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEvzf5Uh5eXaJhwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ODVlMmVlYTYtNzk4NS00OTEzLTlmYTEtYmI4NmM4MDNkMDllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IOIJwjpF7buai5n7QnwDAOAYBdtfF9rszrN
zh1nSJ4IPc3CdIrj2jG8RFOpK+Syqm/4HflXpWNuwdFBaRWwe8tya6PFk1nL2NKv
ig2VeDe4Kr4qpOE3Qg0rcKGW+6RtW1/zUw3yya2hCswR1xwydmaxh4la0HjvdpPu
sAQeaSb6Uj/BCw4HZhwILL270Hun60M7qS1tDPQyKGEjAxrwsBXwZPCr4XFRvl2v
02v9c+vf8WMmM9E0lw8lQH2X+So3LJQ7xv6keG9T75loiOIq450icP6D/E47s2Bx
S63zFWnbJvSnbTWalIkdAjEf3UjndV7NmUOfhR/GtSpi5J3lfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKzSLoiSSM6SMEYvrTotDjGwUdPbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjMxODk1MDAtNDRjMS0z
YmUxLWI3Y2QtMzk4MTEwNzczNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYsFEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADo2XylMnSz5jCkWrghqLARhMnxDUnPDye1H05vMbsy8mZj0Hfl+rKcv
+X7nB81TxYp4MLdqkhAfXOYbpGXvnyunozb4HFRpihE5qmQyOU1HlZQrGhntXm2g
8C7tws4ErDA11bEq0Vq9in3ZwsmMJ64Uct/OxV2fBfl+ACh0TodDckl9YeX8FsVt
1/O/Sfq92WbHkkLyWfC25GNVHWK0c3xARxDgjFHtQ3/POiYbGxWEpHbRKVUZZYmS
Dsnwq4h+un14HdgGm+J6bABoYZKXrnf1MaPSUqMLlCbszmfzRqTixc8LhPm+hhZs
qqkUWA4Zaqg/TzDmjDK94f8vp7QdoCo=
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:45:19 2025 by rpki-client