Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d16d3f7-780e-3137-a9fc-ee762f01d911.roa
File: 7d16d3f7-780e-3137-a9fc-ee762f01d911.roa (raw, json)
Hash identifier: M1lpO6bxvwWTVCRXimt5qs74LE1tQbXziBUyqz9A3lQ=
Subject key identifier: A0:D3:1F:F4:C2:5C:F9:52:86:4C:CE:86:4A:D7:81:0E:40:FA:90:9A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1168557E8A145F17BCE180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d16d3f7-780e-3137-a9fc-ee762f01d911.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.253.166.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:68:55:7e:8a:14:5f:17:bc:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=f291821c-aff7-4d1e-b6b4-3a5582da420c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:77:9f:3d:de:8c:10:ae:59:b5:c8:f1:b9:
87:48:48:be:7a:70:db:47:05:95:5b:7f:23:79:1f:
23:9a:b4:59:b5:1f:ac:e0:fd:ca:4a:54:fc:39:7b:
53:a6:6e:02:d7:5a:ec:f0:a4:af:88:0b:db:5e:23:
90:f3:77:c2:75:57:8e:a8:50:0e:56:b9:5a:0a:94:
85:e7:88:d7:df:4c:34:ad:d1:cf:1c:09:61:b8:1d:
e3:94:24:9f:86:16:b9:0e:0c:70:88:25:26:d3:2b:
af:f2:25:48:ff:77:7c:9c:17:22:fe:de:a6:72:1e:
e7:b1:fe:6c:fa:6f:08:09:38:17:c2:0d:68:3e:35:
3e:51:df:c2:37:7c:4b:4e:a4:07:30:78:d1:13:d2:
02:34:52:f9:b4:d5:7d:78:82:85:89:dc:f3:b8:09:
2f:aa:f3:1b:13:2f:91:88:26:aa:04:65:bd:39:fa:
d4:06:5b:8d:99:45:d8:ad:48:dd:7e:a4:02:2f:5d:
91:87:ac:53:01:f5:d4:54:20:b7:90:c8:57:7b:72:
00:cd:d6:23:69:4f:ab:3c:3a:15:80:0e:bf:fa:15:
96:c4:0b:82:dd:52:b6:4a:5f:09:14:34:d6:b1:db:
09:9a:16:29:72:0c:aa:0b:3e:d2:5a:dc:7e:9e:87:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D3:1F:F4:C2:5C:F9:52:86:4C:CE:86:4A:D7:81:0E:40:FA:90:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d16d3f7-780e-3137-a9fc-ee762f01d911.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.253.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:2e:9e:18:20:fc:4b:6e:c0:19:31:e2:11:55:bf:e1:8a:5c:
52:a1:a8:d1:42:43:7e:d3:31:83:0e:ec:67:da:13:37:37:ec:
d2:69:9a:0d:3e:c8:38:d8:5d:8f:81:c7:99:3f:d2:af:1a:2d:
a0:93:dd:e8:54:4a:2a:83:74:8f:ec:3e:5c:c9:92:2f:dd:d9:
e8:99:44:ac:57:42:d1:6b:2b:8d:1c:58:35:21:4c:a8:2a:13:
06:17:aa:a7:1f:1f:00:93:69:14:08:33:ee:f6:08:ca:98:07:
7c:6e:4a:8a:fa:f7:3d:4e:85:15:ac:e5:e9:6c:f8:3e:86:dc:
19:90:a6:3d:a3:34:e1:ca:fc:a4:a5:de:0d:bb:fb:4c:69:92:
2e:30:b5:25:75:dd:b6:28:94:7e:4e:0c:2f:e3:56:02:39:3e:
bf:bd:7e:6d:2c:58:59:82:6e:d0:3c:e6:4f:0b:3c:a9:a0:fa:
e6:4e:79:9a:13:64:b9:bc:5d:81:1d:44:59:72:a6:c2:3e:01:
f9:a4:07:82:05:44:8d:ca:36:6a:f1:e9:f5:62:0e:de:59:cd:
b8:d4:6d:c4:6d:79:12:1e:97:9c:95:6f:62:ef:c6:64:10:51:
73:b0:46:6d:08:86:cd:c9:4f:c7:4f:8b:ff:20:22:95:bc:e9:
7c:e2:5c:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEWhVfooUXxe84YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZjI5MTgyMWMtYWZmNy00ZDFlLWI2YjQtM2E1NTgyZGE0MjBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGR3nz3ejBCuWbXI8bmHSEi+enDbRwWVW38j
eR8jmrRZtR+s4P3KSlT8OXtTpm4C11rs8KSviAvbXiOQ83fCdVeOqFAOVrlaCpSF
54jX30w0rdHPHAlhuB3jlCSfhha5DgxwiCUm0yuv8iVI/3d8nBci/t6mch7nsf5s
+m8ICTgXwg1oPjU+Ud/CN3xLTqQHMHjRE9ICNFL5tNV9eIKFidzzuAkvqvMbEy+R
iCaqBGW9OfrUBluNmUXYrUjdfqQCL12Rh6xTAfXUVCC3kMhXe3IAzdYjaU+rPDoV
gA6/+hWWxAuC3VK2Sl8JFDTWsdsJmhYpcgyqCz7SWtx+noc9nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKDTH/TCXPlShkzOhkrXgQ5A+pCaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2QxNmQzZjctNzgwZS0z
MTM3LWE5ZmMtZWU3NjJmMDFkOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYv2mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAN0unhgg/EtuwBkx4hFVv+GKXFKhqNFCQ37TMYMO7GfaEzc37NJpmg0+
yDjYXY+Bx5k/0q8aLaCT3ehUSiqDdI/sPlzJki/d2eiZRKxXQtFrK40cWDUhTKgq
EwYXqqcfHwCTaRQIM+72CMqYB3xuSor69z1OhRWs5els+D6G3BmQpj2jNOHK/KSl
3g27+0xpki4wtSV13bYolH5ODC/jVgI5Pr+9fm0sWFmCbtA85k8LPKmg+uZOeZoT
ZLm8XYEdRFlypsI+AfmkB4IFRI3KNmrx6fViDt5ZzbjUbcRteRIel5yVb2LvxmQQ
UXOwRm0Ihs3JT8dPi/8gIpW86XziXJo=
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:49:31 2025 by rpki-client