Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c04c53d-8a96-33e0-97ef-865be50bb14a.roa
File: 6c04c53d-8a96-33e0-97ef-865be50bb14a.roa (raw, json)
Hash identifier: mAKJ9WxTL+DFHdaE50+Opti93QiezbxLR6woJ7OW6zU=
Subject key identifier: 15:C0:90:2E:6F:A2:4F:01:2C:1A:F4:2D:21:A1:84:FE:6D:65:AB:02
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584840E61AD8D65F3E66820ACD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c04c53d-8a96-33e0-97ef-865be50bb14a.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 33659
IP address blocks: 98.221.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e6:1a:d8:d6:5f:3e:66:82:0a:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=d1783d2a-86de-4491-a112-a24b19f12310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:05:55:73:94:da:19:3b:6d:41:00:a5:c3:48:
b2:a9:31:d4:b1:18:59:a9:54:05:de:c3:36:00:ac:
ad:d0:e9:eb:82:b3:48:15:67:e2:e1:1b:34:ed:11:
eb:ba:27:78:a0:da:80:4b:b5:b5:f9:67:bb:86:18:
0d:bf:00:ed:bd:54:d6:1c:90:fc:ec:c8:8c:a8:84:
8b:e0:5a:58:4d:b2:86:53:d4:04:10:8b:83:1d:00:
a2:ab:72:d5:c0:76:1e:e2:91:97:7f:68:2e:c4:ce:
23:e4:ec:85:79:70:ae:1e:ea:eb:25:85:84:e6:5d:
29:c0:f1:f7:d1:6d:cc:9e:14:ee:ea:2d:e2:99:32:
88:cd:50:43:a1:e0:bc:39:dd:13:6e:9d:e2:fc:d7:
18:f6:06:fb:c8:e2:23:d0:f4:76:5f:c2:07:a1:5b:
63:aa:29:ef:f2:03:62:29:78:2e:aa:9a:de:88:8c:
1a:2d:54:33:39:71:da:db:71:ff:7f:7e:4f:bd:d8:
88:7b:33:cc:b0:6c:b4:80:e6:86:61:ca:57:aa:93:
24:ad:d5:42:50:cb:6c:6d:55:c7:99:d6:57:78:88:
fa:2d:54:b7:5b:0e:02:03:e7:05:48:73:52:ee:23:
3e:43:8a:cd:38:b9:c6:25:0c:ac:c1:4b:16:58:ad:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C0:90:2E:6F:A2:4F:01:2C:1A:F4:2D:21:A1:84:FE:6D:65:AB:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c04c53d-8a96-33e0-97ef-865be50bb14a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.221.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:8b:27:01:45:9a:4f:7f:85:c7:19:5a:fe:e4:a7:0b:de:05:
57:0f:1a:83:01:77:68:e9:ab:16:f2:f3:50:e8:09:36:e2:5e:
5f:7e:97:03:c0:f9:57:ea:4d:e1:b4:b3:29:4d:e4:87:1b:24:
d6:74:77:91:31:2d:65:f3:e0:7e:d7:b1:e2:64:9c:f7:b8:8c:
fa:c3:b6:35:cf:28:d7:11:af:f0:4f:5f:d8:26:af:f5:52:91:
53:08:48:de:2f:0b:bb:f3:c8:99:9f:ed:be:c9:0a:87:af:f1:
de:f9:3d:77:71:ce:62:75:28:77:85:9f:c1:17:a7:a0:3f:ac:
4f:4e:89:17:d1:e8:49:78:7c:bb:9f:95:84:a8:83:db:e3:1b:
97:fe:3f:5e:03:f3:77:20:d1:ab:68:35:f7:89:bb:38:50:e9:
6e:cb:e5:a8:4f:77:83:20:1b:c5:b5:43:0f:7f:d3:9e:cc:61:
f7:d6:54:c1:02:b2:85:03:f1:7b:dd:d4:ff:a7:bd:fd:d9:7a:
e1:ee:56:9a:e2:71:8a:b8:27:b6:a9:95:1d:ec:1b:8d:98:ab:
bb:aa:07:62:5d:47:dc:2a:4b:d6:9c:28:43:05:32:cf:eb:8f:
76:77:55:9f:c7:ed:66:a4:47:e0:bd:c3:46:eb:87:65:99:f3:
cc:f7:8f:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5hrY1l8+ZoIKzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZDE3ODNkMmEtODZkZS00NDkxLWExMTItYTI0YjE5ZjEyMzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgVVc5TaGTttQQClw0iyqTHUsRhZqVQF3sM2
AKyt0OnrgrNIFWfi4Rs07RHruid4oNqAS7W1+We7hhgNvwDtvVTWHJD87MiMqISL
4FpYTbKGU9QEEIuDHQCiq3LVwHYe4pGXf2guxM4j5OyFeXCuHurrJYWE5l0pwPH3
0W3MnhTu6i3imTKIzVBDoeC8Od0Tbp3i/NcY9gb7yOIj0PR2X8IHoVtjqinv8gNi
KXguqpreiIwaLVQzOXHa23H/f35PvdiIezPMsGy0gOaGYcpXqpMkrdVCUMtsbVXH
mdZXeIj6LVS3Ww4CA+cFSHNS7iM+Q4rNOLnGJQyswUsWWK3RBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBXAkC5vok8BLBr0LSGhhP5tZasCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmMwNGM1M2QtOGE5Ni0z
M2UwLTk3ZWYtODY1YmU1MGJiMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYt2IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALeLJwFFmk9/hccZWv7kpwveBVcPGoMBd2jpqxby81DoCTbiXl9+lwPA
+VfqTeG0sylN5IcbJNZ0d5ExLWXz4H7XseJknPe4jPrDtjXPKNcRr/BPX9gmr/VS
kVMISN4vC7vzyJmf7b7JCoev8d75PXdxzmJ1KHeFn8EXp6A/rE9OiRfR6El4fLuf
lYSog9vjG5f+P14D83cg0atoNfeJuzhQ6W7L5ahPd4MgG8W1Qw9/057MYffWVMEC
soUD8Xvd1P+nvf3ZeuHuVpricYq4J7aplR3sG42Yq7uqB2JdR9wqS9acKEMFMs/r
j3Z3VZ/H7WakR+C9w0brh2WZ88z3j8o=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:02:54 2025 by rpki-client