Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c44e0ef1-b9a5-314c-8f02-6dbd92d3f070.roa
File: c44e0ef1-b9a5-314c-8f02-6dbd92d3f070.roa (raw, json)
Hash identifier: qhMiqUtk59znKi5YMsQPVDXwQLXRz0CP/e/NcB5AeUc=
Subject key identifier: CE:92:72:E1:61:88:CA:45:B0:B7:B3:1F:A6:A5:FD:1D:B7:93:1D:BA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143D741430F049655CA28980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c44e0ef1-b9a5-314c-8f02-6dbd92d3f070.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33490
IP address blocks: 98.246.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3d:74:14:30:f0:49:65:5c:a2:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=904d4494-7eb4-427c-8f12-5c541183c55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d3:d0:63:6b:e4:c0:37:c5:d1:cd:32:d0:f9:
e7:5f:25:b6:92:fa:dc:ef:91:c0:be:39:14:a9:68:
20:4f:41:73:54:e0:41:c6:0c:e9:66:7d:08:d3:eb:
11:39:62:24:8c:7e:80:4e:a0:40:84:43:f4:ed:15:
cb:dd:68:30:84:03:d6:c2:7c:ee:d6:8d:0f:ea:34:
b2:b7:53:07:8e:bc:c6:fa:df:2b:d8:1e:26:9a:31:
09:10:60:7f:c1:e0:f7:90:fa:d4:72:4f:0f:33:07:
18:31:d0:10:4c:74:72:4c:b7:cb:89:96:68:45:cb:
79:bb:a6:9f:54:09:ce:f6:f5:5e:87:4c:13:0c:12:
74:0f:c5:c5:4d:85:d1:0e:ad:36:76:2d:4e:3e:de:
ad:d5:b3:c3:8a:13:bd:34:37:9d:1c:71:c1:13:42:
23:22:dd:9c:98:8b:13:cc:b1:32:5a:0c:ba:cd:7e:
f1:58:0e:74:a0:f8:7c:1f:08:61:a8:d9:54:22:a3:
29:f0:bb:2c:e5:ff:50:94:f4:49:7c:3d:79:0c:75:
68:31:be:30:93:dd:e2:8c:96:e8:4d:7d:a1:41:72:
cc:12:1c:ca:be:8f:9d:1d:ee:da:49:ff:b4:39:08:
4c:dc:75:fa:fb:4a:93:7c:ed:ad:0b:06:ae:32:23:
80:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:92:72:E1:61:88:CA:45:B0:B7:B3:1F:A6:A5:FD:1D:B7:93:1D:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c44e0ef1-b9a5-314c-8f02-6dbd92d3f070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.246.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:7e:11:98:0d:e7:ef:19:7a:b8:e2:e6:f6:9d:dc:76:9c:12:
93:90:55:27:b0:7d:7c:83:5c:57:e6:d0:70:e5:32:ce:c3:bb:
76:8d:37:e0:69:2f:c6:1f:f3:dc:68:31:b1:3a:98:09:a1:bd:
da:05:e0:af:90:c7:d7:78:9f:97:db:be:d6:41:93:59:07:44:
2c:35:50:07:e5:17:b6:3d:88:50:d7:fe:51:e8:96:ff:03:ec:
e7:a5:45:04:f3:f4:89:da:f7:1c:ee:8f:d9:e7:1d:f1:18:1b:
b1:3c:7e:8d:df:39:cc:c2:57:22:ea:83:37:bd:e5:aa:88:9a:
3b:7d:93:62:83:1f:cf:a6:ed:35:9d:c6:ed:87:d7:92:10:f6:
bd:a7:80:14:b9:60:89:d3:59:e1:9c:b6:04:ba:f0:92:62:d1:
93:3c:8b:d5:a2:34:d2:b8:da:77:c0:bd:24:a0:5e:9e:1d:85:
c8:62:e5:01:7f:7a:3e:4d:bb:ca:6f:5f:89:01:aa:20:be:f2:
d0:66:d2:26:4f:71:69:51:2e:cb:2c:b8:3f:5d:af:22:2a:7c:
e7:1d:31:03:cc:47:ee:a8:44:cd:b2:e5:9f:99:2e:4f:2f:1d:
6e:97:dc:1a:9a:6b:1b:93:80:a7:1f:73:d6:ef:63:e7:5e:bb:
fd:a0:fc:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPXQUMPBJZVyiiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
OTA0ZDQ0OTQtN2ViNC00MjdjLThmMTItNWM1NDExODNjNTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtPQY2vkwDfF0c0y0PnnXyW2kvrc75HAvjkU
qWggT0FzVOBBxgzpZn0I0+sROWIkjH6ATqBAhEP07RXL3WgwhAPWwnzu1o0P6jSy
t1MHjrzG+t8r2B4mmjEJEGB/weD3kPrUck8PMwcYMdAQTHRyTLfLiZZoRct5u6af
VAnO9vVeh0wTDBJ0D8XFTYXRDq02di1OPt6t1bPDihO9NDedHHHBE0IjIt2cmIsT
zLEyWgy6zX7xWA50oPh8HwhhqNlUIqMp8Lss5f9QlPRJfD15DHVoMb4wk93ijJbo
TX2hQXLMEhzKvo+dHe7aSf+0OQhM3HX6+0qTfO2tCwauMiOA4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM6ScuFhiMpFsLezH6al/R23kx26MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzQ0ZTBlZjEtYjlhNS0z
MTRjLThmMDItNmRiZDkyZDNmMDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYvYsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAB+EZgN5+8Zerji5vad3HacEpOQVSewfXyDXFfm0HDlMs7Du3aNN+Bp
L8Yf89xoMbE6mAmhvdoF4K+Qx9d4n5fbvtZBk1kHRCw1UAflF7Y9iFDX/lHolv8D
7OelRQTz9Ina9xzuj9nnHfEYG7E8fo3fOczCVyLqgze95aqImjt9k2KDH8+m7TWd
xu2H15IQ9r2ngBS5YInTWeGctgS68JJi0ZM8i9WiNNK42nfAvSSgXp4dhchi5QF/
ej5Nu8pvX4kBqiC+8tBm0iZPcWlRLsssuD9dryIqfOcdMQPMR+6oRM2y5Z+ZLk8v
HW6X3BqaaxuTgKcfc9bvY+deu/2g/E0=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:15:18 2025 by rpki-client