Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efcdbac6-f859-3b32-b1bb-539a366601d6.roa
File: efcdbac6-f859-3b32-b1bb-539a366601d6.roa (raw, json)
Hash identifier: fTy54swW1n9fpy85uSex0s+HK+w+VvT9UHArAet6Sbs=
Subject key identifier: EB:63:61:D3:C8:C4:EE:FF:1B:E0:18:B6:7B:75:74:5A:2D:6C:42:60
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143CA658E4646E0A2CFC5700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efcdbac6-f859-3b32-b1bb-539a366601d6.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33662
IP address blocks: 98.34.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3c:a6:58:e4:64:6e:0a:2c:fc:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=4195fb34-589c-4142-a2ff-92c161b2cbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:30:87:52:47:14:d7:f3:c1:16:c6:8f:e5:04:
11:ed:6d:30:7e:48:91:8a:8b:05:e3:dc:10:aa:36:
da:89:4c:99:b2:d3:a1:cc:d0:4f:58:71:dd:64:75:
96:cf:0d:63:c0:af:dd:d2:6e:39:b0:e5:21:d4:75:
ea:aa:29:8c:f4:54:89:da:f7:5f:c6:31:7b:9e:0f:
5c:61:39:b5:63:c4:4a:4d:53:aa:92:bb:c4:7f:2a:
e7:7a:fe:78:b2:c2:3e:46:04:d4:be:29:50:63:87:
78:95:5c:25:82:52:3d:c7:cd:77:a8:b0:21:a0:fa:
2b:6e:55:fa:dd:8d:cf:d7:5a:ef:dd:e2:4b:09:b6:
b7:90:a6:b5:02:75:70:05:bd:63:27:8f:80:50:c3:
1c:58:ee:0d:a7:50:49:04:d0:c1:98:a2:0a:d2:92:
53:f8:b7:5a:38:19:1c:b6:68:d8:9e:ca:dd:be:43:
cc:f0:04:f1:23:26:88:33:c2:96:fa:95:86:c4:3f:
17:a0:8c:1c:92:c7:b7:a9:2b:e3:91:ce:82:3b:b8:
df:70:dc:43:74:96:56:bc:ac:6e:ec:34:42:0b:7e:
ba:47:da:21:3a:25:37:ea:e6:ae:38:9b:4d:54:6b:
0e:48:26:ac:f8:9e:81:21:52:7f:d6:bb:77:0b:4c:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:63:61:D3:C8:C4:EE:FF:1B:E0:18:B6:7B:75:74:5A:2D:6C:42:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efcdbac6-f859-3b32-b1bb-539a366601d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.34.186.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:32:a3:6f:48:0c:3a:e3:82:61:37:5d:0f:ef:8c:72:d3:0d:
7b:e0:71:fb:ba:08:75:5e:6c:5d:31:af:ef:8b:90:bd:82:e9:
93:ae:73:f8:93:78:9c:35:2e:22:bc:1b:3b:fe:3b:f4:f0:99:
f5:43:e1:b5:64:ea:76:95:a8:6b:46:ae:1a:dd:fc:3e:af:0d:
86:1a:4b:7a:d7:3e:5e:5b:1d:8c:57:d5:17:2b:db:9a:0f:a1:
74:3e:e9:e3:2f:e9:49:b3:d5:ce:17:f9:46:85:ec:f6:9a:3e:
fa:4f:01:20:74:42:9b:b6:be:ad:67:3f:bd:83:38:34:96:06:
5b:a0:5f:41:e7:5e:be:c1:23:42:27:dc:be:ea:67:42:e4:ef:
46:4f:6a:8c:b0:9b:a3:01:4d:a9:27:30:06:91:fb:5f:33:ce:
62:3c:04:62:18:75:9e:ed:7a:d3:0f:b5:7c:5a:64:18:08:68:
69:bc:cc:86:f2:c6:5f:ef:f0:c7:ba:69:29:c9:84:7c:cf:aa:
5c:50:1c:75:bd:4f:c6:38:0c:cf:e2:48:f8:e2:2a:2e:e3:51:
0e:c3:14:ad:21:e1:67:e7:77:2a:07:cb:cf:58:f6:f6:f0:d8:
a0:44:c9:9a:c7:04:29:4a:6c:2a:b5:77:f0:7a:91:3c:07:9c:
45:83:c7:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUPKZY5GRuCiz8VwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
NDE5NWZiMzQtNTg5Yy00MTQyLWEyZmYtOTJjMTYxYjJjYmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTCHUkcU1/PBFsaP5QQR7W0wfkiRiosF49wQ
qjbaiUyZstOhzNBPWHHdZHWWzw1jwK/d0m45sOUh1HXqqimM9FSJ2vdfxjF7ng9c
YTm1Y8RKTVOqkrvEfyrnev54ssI+RgTUvilQY4d4lVwlglI9x813qLAhoPorblX6
3Y3P11rv3eJLCba3kKa1AnVwBb1jJ4+AUMMcWO4Np1BJBNDBmKIK0pJT+LdaOBkc
tmjYnsrdvkPM8ATxIyaIM8KW+pWGxD8XoIwckse3qSvjkc6CO7jfcNxDdJZWvKxu
7DRCC366R9ohOiU36uauOJtNVGsOSCas+J6BIVJ/1rt3C0zC9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOtjYdPIxO7/G+AYtnt1dFotbEJgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWZjZGJhYzYtZjg1OS0z
YjMyLWIxYmItNTM5YTM2NjYwMWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYiK6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEMyo29IDDrjgmE3XQ/vjHLTDXvgcfu6CHVebF0xr++LkL2C6ZOuc/iT
eJw1LiK8Gzv+O/TwmfVD4bVk6naVqGtGrhrd/D6vDYYaS3rXPl5bHYxX1Rcr25oP
oXQ+6eMv6Umz1c4X+UaF7PaaPvpPASB0Qpu2vq1nP72DODSWBlugX0HnXr7BI0In
3L7qZ0Lk70ZPaoywm6MBTaknMAaR+18zzmI8BGIYdZ7tetMPtXxaZBgIaGm8zIby
xl/v8Me6aSnJhHzPqlxQHHW9T8Y4DM/iSPjiKi7jUQ7DFK0h4WfndyoHy89Y9vbw
2KBEyZrHBClKbCq1d/B6kTwHnEWDx5s=
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:02:56 2025 by rpki-client