Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d596dcd6-abb0-370d-a1de-a563266404c5.roa
File: d596dcd6-abb0-370d-a1de-a563266404c5.roa (raw, json)
Hash identifier: xiP26TNDQVI8v7ACvqxRSN/wpSNY8D1TtQ9u1EzvsE0=
Subject key identifier: 9C:40:56:71:DE:DC:B8:E1:64:82:23:C8:64:6E:C6:51:11:75:38:04
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C13071D85245471A12AE980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d596dcd6-abb0-370d-a1de-a563266404c5.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.227.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:07:1d:85:24:54:71:a1:2a:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=d100b633-bdf1-408d-803e-a05bfab96785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:00:83:19:f2:41:1e:8b:df:a0:bd:0e:58:97:
11:13:ef:e5:3a:0d:eb:49:77:0b:7c:15:a5:9e:ec:
d2:c6:78:7c:d1:63:13:1d:4a:c8:86:3e:e7:eb:cf:
f3:1c:c8:f8:7d:7d:80:3c:e1:16:2f:b7:99:08:e3:
5e:08:54:da:22:08:86:92:e8:44:6b:76:a5:a1:f5:
68:3c:e6:14:e6:f4:3f:04:5a:6a:6a:05:d9:09:a7:
81:d8:f6:c7:26:33:6f:bd:0e:0d:4e:f5:2c:12:c8:
f2:55:30:19:35:f7:b5:bd:67:cb:be:14:02:94:85:
61:13:f4:82:d7:29:a1:82:0e:76:f0:0d:c7:f5:12:
16:ec:c6:34:4a:ba:9d:29:d3:dc:bb:15:73:eb:71:
6a:cd:91:78:07:08:05:f4:ad:e3:57:b0:d3:af:ae:
51:80:52:32:e5:ba:f9:3b:7b:b5:ce:51:d7:b2:4c:
cb:3f:fe:a3:0e:ef:61:be:52:19:ff:b4:fb:25:50:
91:a6:87:5e:5a:6e:57:78:7b:f6:56:c5:a8:ad:65:
db:f4:02:bd:5f:bd:4c:84:e7:0b:0b:7e:c1:b9:b5:
61:1a:65:30:38:bc:16:7d:bd:4f:bb:24:ca:f3:73:
01:27:b8:33:5e:87:d5:cb:6d:df:ce:3b:37:f7:2e:
16:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:56:71:DE:DC:B8:E1:64:82:23:C8:64:6E:C6:51:11:75:38:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d596dcd6-abb0-370d-a1de-a563266404c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.227.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:98:64:d7:bb:bd:e6:d2:99:21:3f:6e:5b:82:55:d7:e9:50:
91:9e:dd:20:68:52:c4:4e:39:1c:d6:26:e8:8c:ae:d7:dd:8e:
d4:03:a2:f0:b8:03:95:e3:b7:81:84:b1:95:c8:5e:d0:7a:49:
59:65:5d:0b:e9:56:18:77:52:e8:e0:f8:51:fd:71:77:d6:03:
70:73:4f:78:ac:d6:5f:31:a0:7b:93:b2:fb:9b:96:bd:4b:da:
82:3f:43:c9:e1:b4:af:f5:e6:d5:e5:c0:7d:1e:4c:73:82:43:
f6:da:c7:be:4e:f9:05:e4:02:fb:72:d5:80:75:bf:ba:5f:76:
d4:30:8b:e2:26:21:21:af:b8:22:89:ee:66:02:83:bb:46:4b:
e7:44:42:64:74:fa:60:8b:7c:c0:b4:35:e6:39:cd:a0:a5:c7:
3f:be:1f:03:1a:11:19:72:1d:7e:05:66:56:3c:a2:7b:b0:e9:
fd:c9:cc:cf:a9:4d:1e:2c:76:42:d9:ba:03:66:32:64:b8:3e:
12:13:d8:77:46:42:36:f8:ed:e2:d5:7c:96:38:1e:24:5e:67:
fb:6f:4b:e0:c9:8d:d8:65:c6:f4:c9:6d:c8:b1:6e:90:0b:45:
dd:9d:89:2f:14:da:c9:4b:f4:be:32:c7:6d:2a:1d:46:bd:8a:
c9:5b:4f:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEwcdhSRUcaEq6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
ZDEwMGI2MzMtYmRmMS00MDhkLTgwM2UtYTA1YmZhYjk2Nzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QCDGfJBHovfoL0OWJcRE+/lOg3rSXcLfBWl
nuzSxnh80WMTHUrIhj7n68/zHMj4fX2APOEWL7eZCONeCFTaIgiGkuhEa3alofVo
POYU5vQ/BFpqagXZCaeB2PbHJjNvvQ4NTvUsEsjyVTAZNfe1vWfLvhQClIVhE/SC
1ymhgg528A3H9RIW7MY0SrqdKdPcuxVz63FqzZF4BwgF9K3jV7DTr65RgFIy5br5
O3u1zlHXskzLP/6jDu9hvlIZ/7T7JVCRpodeWm5XeHv2VsWorWXb9AK9X71MhOcL
C37BubVhGmUwOLwWfb1PuyTK83MBJ7gzXofVy23fzjs39y4WtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJxAVnHe3LjhZIIjyGRuxlERdTgEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDU5NmRjZDYtYWJiMC0z
NzBkLWExZGUtYTU2MzI2NjQwNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuMcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOYZNe7vebSmSE/bluCVdfpUJGe3SBoUsROORzWJuiMrtfdjtQDovC4
A5Xjt4GEsZXIXtB6SVllXQvpVhh3Uujg+FH9cXfWA3BzT3is1l8xoHuTsvublr1L
2oI/Q8nhtK/15tXlwH0eTHOCQ/bax75O+QXkAvty1YB1v7pfdtQwi+ImISGvuCKJ
7mYCg7tGS+dEQmR0+mCLfMC0NeY5zaClxz++HwMaERlyHX4FZlY8onuw6f3JzM+p
TR4sdkLZugNmMmS4PhIT2HdGQjb47eLVfJY4HiReZ/tvS+DJjdhlxvTJbcixbpAL
Rd2diS8U2slL9L4yx20qHUa9islbT44=
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:33:24 2025 by rpki-client