Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b84cf85f-05e8-3761-869c-d65282b9d5be.roa
File: b84cf85f-05e8-3761-869c-d65282b9d5be.roa (raw, json)
Hash identifier: XoiaPN/KpsQvM+aUbX5pIC0tkOrhO7u7CUzjXZhhu3Q=
Subject key identifier: 29:7E:E1:71:50:D3:65:5C:47:32:1C:87:63:D9:FB:93:B3:F9:29:16
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C11C3C78E3E96DF93768940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b84cf85f-05e8-3761-869c-d65282b9d5be.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33651
IP address blocks: 98.37.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:11:c3:c7:8e:3e:96:df:93:76:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=0f5ee7e9-6eca-4676-8110-40186c7434cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:12:4f:d7:3a:cf:27:34:36:4c:18:1b:c3:14:
95:96:9e:a4:99:56:5d:8b:e7:c9:63:c0:61:53:d1:
4f:fe:46:47:78:54:cf:03:d8:dc:f8:e1:d4:99:89:
d5:34:4e:ce:ca:31:ad:52:9e:d8:04:8f:8e:dd:a4:
a3:60:a8:92:e9:13:22:10:c4:5f:41:02:d9:05:e9:
cc:64:02:c4:33:be:ed:18:23:1f:0e:f3:bb:6f:1b:
c2:b2:87:29:8f:bf:3a:fd:a2:e8:81:54:e4:d9:91:
a4:bb:26:25:3e:ca:8d:37:5a:97:a5:fa:fa:e3:57:
d5:d5:f9:51:85:57:82:6a:cd:a0:21:e9:e9:1b:ba:
32:8a:7d:aa:9e:c1:6a:af:0f:4d:3f:f5:7e:5c:87:
aa:e7:53:d5:4a:f4:ce:3d:97:4a:fe:df:86:1b:e2:
82:95:47:b3:f2:93:1f:3c:5d:3f:24:cf:20:5e:58:
09:28:fd:78:68:ad:41:2e:7b:37:12:ae:32:de:29:
63:d3:e3:ea:71:c7:ff:03:7d:08:d2:52:9c:fe:6d:
41:3a:a1:d1:e8:82:4a:67:d6:08:53:c8:f3:fc:52:
04:be:ec:f4:57:03:a8:ab:0b:e7:58:f4:83:47:2e:
9a:32:14:5d:1f:ce:b8:da:72:e9:f3:53:54:77:97:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7E:E1:71:50:D3:65:5C:47:32:1C:87:63:D9:FB:93:B3:F9:29:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b84cf85f-05e8-3761-869c-d65282b9d5be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.37.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:7e:f3:be:77:07:db:06:c4:7c:a8:df:d7:0e:4d:89:47:c7:
6c:f1:f2:08:c7:a0:6f:db:62:a5:c7:a1:a4:b1:49:06:46:5e:
db:f7:4e:96:70:f5:8c:1a:d7:ae:a9:9d:1a:62:21:fc:41:46:
eb:25:62:d2:55:20:ea:05:28:ae:17:2e:6e:ab:ec:41:8d:dd:
b9:fa:9c:c4:f1:b6:b3:cc:25:ed:94:0c:6a:35:b3:3c:fe:b4:
e5:e8:ff:84:c5:6f:1e:73:21:63:5a:13:21:d7:25:c6:ba:72:
cb:63:67:2b:e0:84:50:f7:3e:d8:c7:1f:7c:0d:e2:41:e6:2e:
31:13:ac:31:96:81:f7:69:c6:33:02:b4:5e:ac:6c:80:41:ea:
af:49:2d:31:85:f3:97:3e:8d:8e:c2:02:a4:d4:7a:0f:ed:58:
b4:88:31:a9:f8:7d:64:03:55:85:ed:1f:6c:38:1e:f6:2e:67:
4f:00:75:d2:04:12:54:cf:4f:20:75:fc:c9:f4:ac:8c:0c:cc:
0e:9f:b1:fc:a2:d6:09:75:38:1c:1d:4e:21:e6:df:5f:e0:a9:
34:57:39:0b:7b:ca:b8:85:75:e8:04:03:90:31:cf:d7:a0:d1:
e8:47:ec:1a:5c:54:f2:50:e5:d7:3f:66:8b:4e:f8:4f:4d:50:
b1:34:83:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEcPHjj6W35N2iUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
MGY1ZWU3ZTktNmVjYS00Njc2LTgxMTAtNDAxODZjNzQzNGNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xJP1zrPJzQ2TBgbwxSVlp6kmVZdi+fJY8Bh
U9FP/kZHeFTPA9jc+OHUmYnVNE7OyjGtUp7YBI+O3aSjYKiS6RMiEMRfQQLZBenM
ZALEM77tGCMfDvO7bxvCsocpj786/aLogVTk2ZGkuyYlPsqNN1qXpfr641fV1flR
hVeCas2gIenpG7oyin2qnsFqrw9NP/V+XIeq51PVSvTOPZdK/t+GG+KClUez8pMf
PF0/JM8gXlgJKP14aK1BLns3Eq4y3ilj0+Pqccf/A30I0lKc/m1BOqHR6IJKZ9YI
U8jz/FIEvuz0VwOoqwvnWPSDRy6aMhRdH8642nLp81NUd5dHqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCl+4XFQ02VcRzIch2PZ+5Oz+SkWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjg0Y2Y4NWYtMDVlOC0z
NzYxLTg2OWMtZDY1MjgyYjlkNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiWEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKF+8753B9sGxHyo39cOTYlHx2zx8gjHoG/bYqXHoaSxSQZGXtv3TpZw
9Ywa166pnRpiIfxBRuslYtJVIOoFKK4XLm6r7EGN3bn6nMTxtrPMJe2UDGo1szz+
tOXo/4TFbx5zIWNaEyHXJca6cstjZyvghFD3PtjHH3wN4kHmLjETrDGWgfdpxjMC
tF6sbIBB6q9JLTGF85c+jY7CAqTUeg/tWLSIMan4fWQDVYXtH2w4HvYuZ08AddIE
ElTPTyB1/Mn0rIwMzA6fsfyi1gl1OBwdTiHm31/gqTRXOQt7yriFdegEA5Axz9eg
0ehH7BpcVPJQ5dc/ZotO+E9NULE0g6A=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:48:02 2025 by rpki-client