Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afc02356-e603-341c-8f11-c82f8b2ae5ec.roa
File: afc02356-e603-341c-8f11-c82f8b2ae5ec.roa (raw, json)
Hash identifier: 0qymclPJIo5Ee7yiEWIQfoYriAHKHYupwppvsz5FHQ8=
Subject key identifier: 87:9B:C2:18:DD:C5:DA:29:03:7B:7B:07:44:08:05:CA:86:B3:82:13
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11C785F817764978CFABA1
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afc02356-e603-341c-8f11-c82f8b2ae5ec.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.42.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:c7:85:f8:17:76:49:78:cf:ab:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=d050595f-e4f8-4bb6-b964-06becbeec61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:3d:4e:58:48:9e:b5:ca:3f:3f:34:2a:c4:
1d:cf:87:66:44:b6:b1:c5:97:8b:1c:e4:c0:9d:fc:
14:d8:d9:7a:1b:1d:ef:8e:34:4a:1c:35:62:7c:60:
6b:5a:0b:c8:59:47:22:3d:94:cd:e2:4e:f1:c0:98:
d8:66:be:b7:f9:cd:3e:f3:85:f9:91:3d:da:fe:af:
d3:98:1f:f5:cb:1b:49:56:21:30:bb:d6:05:0e:19:
ce:b5:cb:e9:d2:9c:c1:82:d1:94:ab:0e:60:c6:0c:
88:bc:16:a7:38:35:ae:b1:a4:cb:b5:0a:c1:3d:6b:
93:27:c2:2c:a8:b5:41:b4:c6:a5:f4:40:f3:6d:87:
6f:57:10:24:13:c3:b2:f0:8d:c0:eb:e8:47:5a:b4:
ef:dd:ed:c5:56:b8:6d:cc:d9:8c:85:b1:07:dd:5f:
c7:58:85:7f:bf:5b:4e:5d:68:64:6e:a7:3d:4c:9c:
32:55:aa:f8:cb:f3:3e:ba:7b:93:ad:99:ac:61:c3:
75:9b:a6:be:46:56:29:94:67:6d:db:60:6e:42:d5:
8d:05:4c:7f:03:d8:6a:a3:9b:eb:9b:ce:7a:d4:82:
f8:55:e1:b7:5d:52:71:fb:f3:d0:05:1d:e0:d5:e7:
7d:a1:8e:d0:b4:d8:b8:ca:3d:43:ca:d2:4e:76:07:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9B:C2:18:DD:C5:DA:29:03:7B:7B:07:44:08:05:CA:86:B3:82:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afc02356-e603-341c-8f11-c82f8b2ae5ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.42.252.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:68:1f:be:53:74:80:d9:b1:4b:01:60:f9:cb:c3:53:28:81:
3c:46:d0:38:4b:92:48:7e:e1:ff:f9:41:40:9c:22:c2:e4:5c:
fd:ae:a5:e7:f4:90:08:4c:52:64:0b:01:42:e4:ac:d3:ac:9b:
80:01:cb:6f:2e:4a:d4:b2:c4:66:3c:3e:e2:e0:4d:2a:2f:59:
87:9d:c4:49:e9:9d:4e:2e:ce:84:7e:de:4b:57:65:8a:03:95:
5f:8a:77:0f:b6:50:a1:80:e5:59:f4:39:d6:4f:2f:e9:79:6e:
b3:50:07:ed:44:37:fa:2a:f7:d9:a0:3f:03:2f:21:b8:d2:7c:
ae:e1:07:16:98:25:bf:70:51:9a:e1:de:29:19:f4:e3:15:e7:
ab:da:d7:23:1c:a7:de:ab:10:a1:e5:7f:2a:09:97:95:44:a1:
4a:24:c2:da:bc:13:35:d0:15:76:4a:ac:d9:e5:b0:a8:6c:a0:
fc:f6:dc:14:90:af:a2:40:53:15:c7:12:97:de:66:e4:fa:15:
62:32:25:21:f9:a8:c6:55:e9:5e:6a:18:c1:73:ce:17:cf:4a:
ef:a2:2a:e0:db:13:50:b9:fb:6f:a8:9b:38:fa:a1:e9:3e:1a:
fd:69:37:6b:21:b1:7c:9a:44:7b:ca:07:a7:bf:8b:43:bb:3e:
c9:d2:7a:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEceF+Bd2SXjPq6EwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZDA1MDU5NWYtZTRmOC00YmI2LWI5NjQtMDZiZWNiZWVjNjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHo9TlhInrXKPz80KsQdz4dmRLaxxZeLHOTA
nfwU2Nl6Gx3vjjRKHDVifGBrWgvIWUciPZTN4k7xwJjYZr63+c0+84X5kT3a/q/T
mB/1yxtJViEwu9YFDhnOtcvp0pzBgtGUqw5gxgyIvBanODWusaTLtQrBPWuTJ8Is
qLVBtMal9EDzbYdvVxAkE8Oy8I3A6+hHWrTv3e3FVrhtzNmMhbEH3V/HWIV/v1tO
XWhkbqc9TJwyVar4y/M+unuTrZmsYcN1m6a+RlYplGdt22BuQtWNBUx/A9hqo5vr
m8561IL4VeG3XVJx+/PQBR3g1ed9oY7QtNi4yj1DytJOdgdtpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIebwhjdxdopA3t7B0QIBcqGs4ITMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZjMDIzNTYtZTYwMy0z
NDFjLThmMTEtYzgyZjhiMmFlNWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYir8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJVoH75TdIDZsUsBYPnLw1MogTxG0DhLkkh+4f/5QUCcIsLkXP2upef0
kAhMUmQLAULkrNOsm4ABy28uStSyxGY8PuLgTSovWYedxEnpnU4uzoR+3ktXZYoD
lV+Kdw+2UKGA5Vn0OdZPL+l5brNQB+1EN/oq99mgPwMvIbjSfK7hBxaYJb9wUZrh
3ikZ9OMV56va1yMcp96rEKHlfyoJl5VEoUokwtq8EzXQFXZKrNnlsKhsoPz23BSQ
r6JAUxXHEpfeZuT6FWIyJSH5qMZV6V5qGMFzzhfPSu+iKuDbE1C5+2+omzj6oek+
Gv1pN2shsXyaRHvKB6e/i0O7PsnSeqA=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:35:16 2025 by rpki-client