Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4e44f3c-ed41-35b4-afcd-74470f9e5c55.roa
File: c4e44f3c-ed41-35b4-afcd-74470f9e5c55.roa (raw, json)
Hash identifier: 2s8XajXNIDD/QPbmOfRbs8kC9U3Nil5aBskS6Rqk7Qo=
Subject key identifier: 44:8A:5C:BC:69:5D:FC:34:CB:0B:EC:2F:6D:34:35:0E:4A:C7:23:C3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CCA1E0C31E29FAEB3EC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4e44f3c-ed41-35b4-afcd-74470f9e5c55.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.57.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:ca:1e:0c:31:e2:9f:ae:b3:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=575a899a-f4c1-4415-a64a-dc811236b756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0e:40:7c:b2:36:05:fa:75:35:1c:b0:28:4d:
43:ce:e9:a6:af:67:05:be:54:94:07:51:2b:56:2e:
8c:77:23:f1:3a:32:5c:49:72:ff:3e:6b:f6:06:86:
82:ad:eb:ba:3a:b5:18:44:c6:14:7a:15:29:4b:72:
ba:1d:9e:05:b7:d0:09:fd:3a:fa:32:04:0e:02:08:
4a:f7:6e:b0:a1:40:95:dc:29:db:26:3e:9e:15:d9:
6a:8b:fa:b1:4c:c7:67:65:18:79:5b:3b:68:6e:93:
71:57:10:bf:e9:c2:71:87:eb:fe:0b:99:bb:29:dd:
9e:90:22:f9:51:b1:59:4c:4c:8d:49:9f:0e:eb:4e:
88:c8:78:f7:d4:98:0d:56:03:61:f8:4a:86:ec:a8:
9d:8c:78:d4:18:86:b2:33:c2:66:40:c6:d1:74:e4:
d4:ad:5a:53:44:d6:f5:e0:47:d3:1a:f7:c8:22:0c:
43:fa:01:3b:ad:49:52:91:75:45:dd:88:02:f0:af:
ca:50:89:4c:85:ee:dd:ab:1e:c7:ec:c4:a3:60:7f:
3c:7b:ea:35:54:40:95:d9:9c:46:a4:56:bf:73:6b:
be:76:95:cf:f8:7d:37:a2:66:b3:94:1b:d1:36:ba:
95:82:39:65:b1:c4:c1:66:7c:f2:2c:dc:89:fc:91:
bc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8A:5C:BC:69:5D:FC:34:CB:0B:EC:2F:6D:34:35:0E:4A:C7:23:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4e44f3c-ed41-35b4-afcd-74470f9e5c55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.57.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:5f:92:79:aa:f3:8e:71:6b:46:5b:8e:e8:40:f8:87:2f:74:
57:22:d3:25:82:ae:37:19:3c:25:65:64:8e:b8:1b:c1:3a:e8:
1b:1d:da:bb:03:78:4d:ce:df:5a:bd:dc:7b:6c:fd:70:c7:14:
63:04:44:ce:06:9c:a9:e8:d1:15:d7:46:8b:e4:80:1b:57:37:
ca:a6:54:fb:58:57:81:aa:46:44:d6:c4:5d:14:6e:04:a1:e5:
2b:af:1b:ac:97:30:10:15:0f:3a:c6:38:66:d8:58:05:0e:4a:
f2:90:85:03:c4:f8:52:91:6a:71:0a:5a:9b:be:e6:03:4b:c8:
60:a7:31:4c:89:b7:33:9f:cb:46:7e:5b:e1:98:42:67:29:a4:
81:64:20:5d:26:69:51:e3:41:e4:41:5a:b5:3a:91:87:0b:a3:
1a:6f:b8:ca:4c:3f:ff:1f:8b:15:ba:b0:a6:16:58:a0:33:56:
d1:a4:4c:ae:3f:7d:b2:bb:81:f7:52:55:d9:98:2a:8c:e1:9b:
87:f4:76:c4:46:68:40:1d:50:ba:9b:e6:21:1a:23:38:e8:e2:
9f:fc:67:b2:62:17:74:e8:b5:b7:fd:f1:58:06:3a:c6:40:ff:
a3:39:5a:1d:6b:1f:2b:ee:e6:bd:5d:cc:e4:68:07:55:72:72:
f2:4c:07:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPMoeDDHin66z7AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NTc1YTg5OWEtZjRjMS00NDE1LWE2NGEtZGM4MTEyMzZiNzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw5AfLI2Bfp1NRywKE1Dzummr2cFvlSUB1Er
Vi6MdyPxOjJcSXL/Pmv2BoaCreu6OrUYRMYUehUpS3K6HZ4Ft9AJ/Tr6MgQOAghK
926woUCV3CnbJj6eFdlqi/qxTMdnZRh5WztobpNxVxC/6cJxh+v+C5m7Kd2ekCL5
UbFZTEyNSZ8O606IyHj31JgNVgNh+EqG7KidjHjUGIayM8JmQMbRdOTUrVpTRNb1
4EfTGvfIIgxD+gE7rUlSkXVF3YgC8K/KUIlMhe7dqx7H7MSjYH88e+o1VECV2ZxG
pFa/c2u+dpXP+H03omazlBvRNrqVgjllscTBZnzyLNyJ/JG8UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESKXLxpXfw0ywvsL200NQ5KxyPDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzRlNDRmM2MtZWQ0MS0z
NWI0LWFmY2QtNzQ0NzBmOWU1YzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjmAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHlfknmq845xa0ZbjuhA+IcvdFci0yWCrjcZPCVlZI64G8E66Bsd2rsD
eE3O31q93Hts/XDHFGMERM4GnKno0RXXRovkgBtXN8qmVPtYV4GqRkTWxF0UbgSh
5SuvG6yXMBAVDzrGOGbYWAUOSvKQhQPE+FKRanEKWpu+5gNLyGCnMUyJtzOfy0Z+
W+GYQmcppIFkIF0maVHjQeRBWrU6kYcLoxpvuMpMP/8fixW6sKYWWKAzVtGkTK4/
fbK7gfdSVdmYKozhm4f0dsRGaEAdULqb5iEaIzjo4p/8Z7JiF3Totbf98VgGOsZA
/6M5Wh1rHyvu5r1dzORoB1VycvJMB58=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:26:36 2025 by rpki-client