Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7a5a744-1d16-3c31-8e98-9c9952e2a7f2.roa
File: b7a5a744-1d16-3c31-8e98-9c9952e2a7f2.roa (raw, json)
Hash identifier: Heo9ArHEA0Hf3CP+2nsD/cs3zk4njHODFMO2lICWjXg=
Subject key identifier: EB:59:EA:C8:3A:50:B2:D8:E9:60:A2:42:20:15:F1:5A:4E:47:A6:12
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584840E61ABECBA1A433C2292900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7a5a744-1d16-3c31-8e98-9c9952e2a7f2.roa
Signing time: Thu 19 Dec 2024 02:00:39 +0000
ROA not before: Thu 19 Dec 2024 02:00:39 +0000
ROA not after: Wed 19 Mar 2025 01:00:39 +0000
asID: 33659
IP address blocks: 98.221.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:40:e6:1a:be:cb:a1:a4:33:c2:29:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 19 02:00:39 2024 GMT
Not After : Mar 19 01:00:39 2025 GMT
Subject: CN=14b42e62-80cd-4ac3-aeeb-deb134c30499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:cc:64:19:f4:39:d7:39:77:9d:e2:51:16:
e5:df:ca:48:e9:d8:04:c7:b5:f2:04:10:7a:f3:f4:
9d:c1:fa:99:d8:b2:6e:61:fa:bb:17:c8:88:73:98:
71:08:50:17:c2:31:f6:cd:41:b1:a5:3d:0c:9f:a8:
45:f0:e3:23:02:1c:f1:03:a0:f8:f2:a8:7f:c7:bd:
22:5a:5d:1e:6f:fa:7f:7b:46:51:5b:fc:56:5f:7f:
84:f4:af:21:1b:cf:61:74:2a:b4:08:f9:4d:b1:eb:
54:2a:6e:0d:99:2d:aa:13:c5:47:7f:6c:09:91:e2:
d0:c4:f0:b0:08:1b:20:9b:71:7e:5d:18:e1:d2:44:
44:24:e9:ad:56:41:5d:45:09:c8:c5:02:2a:72:1d:
2e:1b:72:9d:91:68:38:0c:e0:e3:26:d7:16:9d:f9:
92:0c:dc:6e:c8:1f:ce:13:80:ce:7b:e8:81:53:1e:
4f:2a:dd:79:f4:e1:66:32:cd:94:01:ec:cc:3a:fc:
4d:56:44:9d:73:17:6b:5d:20:c9:86:ab:91:60:ed:
31:cc:90:ea:a8:35:26:23:e6:5a:45:bb:f4:56:12:
18:af:fa:73:1b:10:9c:da:96:db:87:3a:1e:55:41:
4d:0f:a4:f9:42:fb:56:50:00:75:07:4d:6d:c8:48:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:59:EA:C8:3A:50:B2:D8:E9:60:A2:42:20:15:F1:5A:4E:47:A6:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b7a5a744-1d16-3c31-8e98-9c9952e2a7f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.221.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:4b:ad:69:0b:3b:e2:1a:41:49:7c:d1:83:25:58:a4:7c:8c:
e6:69:66:09:d0:1e:8c:d6:06:50:21:c6:08:f4:8a:6c:70:11:
57:84:76:c8:42:ac:73:8e:c2:4d:3d:5f:2a:fb:30:1d:1e:b0:
44:e8:29:4c:a4:2c:cb:69:87:9a:42:ab:f7:9a:ef:9b:9a:35:
22:23:e2:95:be:2e:4c:59:0d:06:9a:78:9f:76:5b:27:4e:07:
a7:47:5c:5b:d8:4e:63:56:98:c1:f8:15:3f:72:96:1f:ce:f4:
7a:48:7a:a0:81:d2:19:92:45:86:f3:14:f9:3d:a6:0b:74:38:
77:19:08:97:7a:86:76:b7:e2:ec:cb:0b:b2:85:90:0a:0b:f4:
8c:04:15:fc:8f:d8:0b:88:f2:57:4d:4c:40:27:dc:c0:22:fd:
5d:62:19:6b:7d:77:f1:81:7e:36:bb:e7:bd:5e:de:b8:82:4c:
7b:05:55:65:72:53:2e:be:67:99:d4:ca:63:f7:73:e6:d6:69:
03:e6:d6:a8:ec:12:1b:e5:b9:6c:b5:50:7f:22:e5:3e:ec:40:
4d:1b:66:d8:22:23:ef:27:4b:94:cf:e6:c5:0c:00:5d:7d:e4:
07:b6:16:45:4a:e9:1e:53:b4:fb:a7:73:de:bb:49:18:e7:1c:
5a:8b:35:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhA5hq+y6GkM8IpKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk
MTRiNDJlNjItODBjZC00YWMzLWFlZWItZGViMTM0YzMwNDk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk43MZBn0Odc5d53iURbl38pI6dgEx7XyBBB6
8/SdwfqZ2LJuYfq7F8iIc5hxCFAXwjH2zUGxpT0Mn6hF8OMjAhzxA6D48qh/x70i
Wl0eb/p/e0ZRW/xWX3+E9K8hG89hdCq0CPlNsetUKm4NmS2qE8VHf2wJkeLQxPCw
CBsgm3F+XRjh0kREJOmtVkFdRQnIxQIqch0uG3KdkWg4DODjJtcWnfmSDNxuyB/O
E4DOe+iBUx5PKt159OFmMs2UAezMOvxNVkSdcxdrXSDJhquRYO0xzJDqqDUmI+Za
Rbv0VhIYr/pzGxCc2pbbhzoeVUFND6T5QvtWUAB1B01tyEgCtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtZ6sg6ULLY6WCiQiAV8VpOR6YSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjdhNWE3NDQtMWQxNi0z
YzMxLThlOTgtOWM5OTUyZTJhN2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYt1sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdLrWkLO+IaQUl80YMlWKR8jOZpZgnQHozWBlAhxgj0imxwEVeEdshC
rHOOwk09Xyr7MB0esEToKUykLMtph5pCq/ea75uaNSIj4pW+LkxZDQaaeJ92WydO
B6dHXFvYTmNWmMH4FT9ylh/O9HpIeqCB0hmSRYbzFPk9pgt0OHcZCJd6hna34uzL
C7KFkAoL9IwEFfyP2AuI8ldNTEAn3MAi/V1iGWt9d/GBfja7571e3riCTHsFVWVy
Uy6+Z5nUymP3c+bWaQPm1qjsEhvluWy1UH8i5T7sQE0bZtgiI+8nS5TP5sUMAF19
5Ae2FkVK6R5TtPunc967SRjnHFqLNUQ=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:50:17 2025 by rpki-client