Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8763a52-3f4b-30e3-a0b8-7e6d745b99e0.roa
File: a8763a52-3f4b-30e3-a0b8-7e6d745b99e0.roa (raw, json)
Hash identifier: 5fj+S7IOAS5+5aXFXdo5ooSGYws2ZzLHFwYf2IH2QUo=
Subject key identifier: 89:F3:54:B8:2C:79:75:74:EE:E8:82:58:E4:D2:77:A1:30:0C:24:F6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C1538ECB8E0BA60A73A3E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8763a52-3f4b-30e3-a0b8-7e6d745b99e0.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.42.6.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:15:38:ec:b8:e0:ba:60:a7:3a:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=2e9d2673-8ef8-47f4-927a-cf12e73aca3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:d9:c2:65:27:61:e8:ef:9c:a1:de:b6:63:
eb:6d:25:f2:5c:a4:c0:0a:49:25:ec:87:a3:29:70:
f2:15:5e:bd:4d:8d:d5:70:e9:2e:32:af:49:c4:01:
23:03:62:15:e2:a4:65:21:d5:8c:12:42:3c:20:90:
87:49:0f:22:cf:d1:5d:bd:0b:48:9a:a6:dd:08:f4:
0b:e2:b7:70:ce:0b:e3:7b:dd:d7:df:14:44:03:21:
61:6a:19:61:a6:9c:f8:ba:58:db:f2:53:00:22:28:
c4:95:8f:30:c7:88:e7:ee:5a:aa:37:fb:54:84:2c:
0a:29:d2:33:89:b8:9c:d8:ed:c0:c1:70:ba:16:e8:
dd:fe:e3:ee:a1:0d:72:04:87:72:57:35:97:19:e2:
30:fc:e2:c1:55:ff:d7:e7:6a:c6:3e:54:11:4b:d3:
9c:4c:41:44:de:46:f1:7c:68:33:88:e8:2b:69:35:
3a:47:09:e7:e7:85:7d:60:42:b2:ea:01:cd:17:d1:
af:19:a2:49:52:73:61:37:fc:cd:0f:41:9a:ad:3d:
90:ad:d1:89:bf:2b:3d:19:20:e6:62:32:d2:d9:0b:
4e:18:7c:8a:0c:3b:10:3f:a5:02:f9:1a:48:a1:00:
c3:b3:a2:fd:a3:06:52:f9:74:a9:74:e2:a5:62:c3:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F3:54:B8:2C:79:75:74:EE:E8:82:58:E4:D2:77:A1:30:0C:24:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8763a52-3f4b-30e3-a0b8-7e6d745b99e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.42.6.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:fa:84:8c:1b:52:3c:96:f6:79:47:9b:68:f7:04:7c:0c:b0:
45:3d:ca:e7:30:06:ec:14:aa:59:3b:07:7f:83:6e:0a:eb:92:
ff:c3:4b:9c:10:1f:54:8a:3f:c7:ec:81:31:a8:8a:6d:62:77:
9e:f5:7f:fe:fe:84:82:68:de:a0:af:97:50:13:3f:9f:c5:01:
ad:d0:45:3a:26:80:80:8a:9d:8f:03:49:16:fc:15:e3:bc:f4:
0a:44:39:61:eb:75:90:79:9c:2e:13:7c:9e:5f:6b:b5:19:10:
83:2f:45:39:62:3e:7b:65:19:f6:44:7a:df:46:09:d9:f2:54:
59:e6:e7:df:15:d7:f0:ff:5a:95:28:f0:9c:57:ed:b0:12:de:
5f:78:56:f6:3e:92:ee:09:33:54:ec:43:02:f6:11:c6:2f:e6:
6a:30:1a:bc:30:21:34:35:90:ea:05:ac:fb:a4:e4:5f:00:61:
ef:61:f4:f5:64:49:05:2e:52:ce:3d:c6:1d:d2:8f:c3:b3:c6:
43:ce:5e:7e:0b:f5:04:96:83:c3:74:18:99:7b:da:74:bc:7b:
a5:e7:ed:0e:cd:3d:a6:98:7b:8f:e6:a2:e1:67:a7:84:d9:44:
36:cc:41:01:1d:e5:f3:f9:1c:c2:74:7c:66:61:74:9a:78:36:
ce:1a:1a:fb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMFTjsuOC6YKc6PoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MmU5ZDI2NzMtOGVmOC00N2Y0LTkyN2EtY2YxMmU3M2FjYTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT7ZwmUnYejvnKHetmPrbSXyXKTACkkl7Iej
KXDyFV69TY3VcOkuMq9JxAEjA2IV4qRlIdWMEkI8IJCHSQ8iz9FdvQtImqbdCPQL
4rdwzgvje93X3xREAyFhahlhppz4uljb8lMAIijElY8wx4jn7lqqN/tUhCwKKdIz
ibic2O3AwXC6Fujd/uPuoQ1yBIdyVzWXGeIw/OLBVf/X52rGPlQRS9OcTEFE3kbx
fGgziOgraTU6Rwnn54V9YEKy6gHNF9GvGaJJUnNhN/zND0GarT2QrdGJvys9GSDm
YjLS2QtOGHyKDDsQP6UC+RpIoQDDs6L9owZS+XSpdOKlYsOEpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFInzVLgseXV07uiCWOTSd6EwDCT2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTg3NjNhNTItM2Y0Yi0z
MGUzLWEwYjgtN2U2ZDc0NWI5OWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYioGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALr6hIwbUjyW9nlHm2j3BHwMsEU9yucwBuwUqlk7B3+Dbgrrkv/DS5wQ
H1SKP8fsgTGoim1id571f/7+hIJo3qCvl1ATP5/FAa3QRTomgICKnY8DSRb8FeO8
9ApEOWHrdZB5nC4TfJ5fa7UZEIMvRTliPntlGfZEet9GCdnyVFnm598V1/D/WpUo
8JxX7bAS3l94VvY+ku4JM1TsQwL2EcYv5mowGrwwITQ1kOoFrPuk5F8AYe9h9PVk
SQUuUs49xh3Sj8OzxkPOXn4L9QSWg8N0GJl72nS8e6Xn7Q7NPaaYe4/mouFnp4TZ
RDbMQQEd5fP5HMJ0fGZhdJp4Ns4aGvs=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:49:50 2025 by rpki-client