Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2ff6555-94b0-3a90-a4c2-fbf130a37513.roa
File: f2ff6555-94b0-3a90-a4c2-fbf130a37513.roa (raw, json)
Hash identifier: R7pTOLQWZoVeRSZ+KZKv8BFYKmEbcu6JuniFj/gV+Qg=
Subject key identifier: 1B:E3:A7:90:0D:C2:C2:8D:9B:8F:D5:F6:A0:97:1E:6E:CC:BC:5F:42
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848143F9EA084934E64397AB840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2ff6555-94b0-3a90-a4c2-fbf130a37513.roa
Signing time: Tue 03 Dec 2024 02:00:40 +0000
ROA not before: Tue 03 Dec 2024 02:00:40 +0000
ROA not after: Mon 03 Mar 2025 02:00:40 +0000
asID: 33668
IP address blocks: 98.224.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:3f:9e:a0:84:93:4e:64:39:7a:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 3 02:00:40 2024 GMT
Not After : Mar 3 02:00:40 2025 GMT
Subject: CN=17cf06b2-dd39-4948-b8cf-a159a892cc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:33:d6:00:bb:4a:8f:93:ea:c0:ea:a9:76:
33:73:5b:03:f2:bd:43:b4:86:93:c4:99:6b:95:90:
f7:bb:02:9b:b8:31:45:22:25:6c:ea:4f:01:4c:fa:
5b:4f:cc:97:7c:25:85:95:32:09:0f:ad:ec:33:46:
e6:d8:99:5f:d6:0b:18:21:79:bf:43:1b:03:35:eb:
2a:d7:07:ca:f1:77:62:7a:f4:75:c8:0c:11:f1:71:
4a:51:63:1b:0e:03:2d:71:33:5b:95:22:04:01:c2:
c2:d0:1b:1b:57:ae:f2:1a:0d:59:43:70:f4:3f:78:
a9:e0:95:7c:56:c0:7c:c0:bb:3c:ff:1e:34:c2:95:
dd:3d:fb:0c:df:6a:16:a8:9e:b2:58:e0:ed:80:4f:
da:f5:0e:30:39:15:e3:51:60:fe:aa:03:d2:3f:1d:
88:47:8a:92:5f:cb:2e:a3:4e:ce:4e:97:f3:f4:47:
0f:e6:20:90:52:fc:a1:16:ad:eb:e3:30:86:59:ac:
39:93:f0:66:b0:dc:b9:ac:41:68:e9:bf:ba:ec:d7:
13:6e:d9:60:64:6f:2e:c8:86:16:5d:25:cd:28:05:
12:2c:9f:b4:eb:e5:5c:a6:77:45:dc:fe:00:61:83:
24:37:86:9e:cb:75:91:6c:f0:0d:3b:69:22:f5:73:
c0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E3:A7:90:0D:C2:C2:8D:9B:8F:D5:F6:A0:97:1E:6E:CC:BC:5F:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2ff6555-94b0-3a90-a4c2-fbf130a37513.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.224.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:7c:ab:38:48:f2:39:0e:9e:f4:bb:09:f2:3a:39:0c:f6:e0:
f5:30:b7:eb:96:cd:8b:81:44:37:ba:b7:69:8c:e5:46:e6:6a:
b3:23:70:07:4b:62:78:42:58:95:f4:5c:91:9e:39:fa:65:14:
5d:1a:aa:c0:de:f8:58:51:e7:3e:1d:31:f8:04:9a:90:52:73:
b5:26:ac:b3:bf:1d:53:d2:56:fb:57:23:ba:69:30:cf:57:2b:
9b:1d:d5:8b:a5:b7:46:de:58:94:14:ab:0c:0e:8e:54:4f:cc:
ef:94:4a:30:c3:6f:41:0b:5d:b5:e6:75:d6:2d:ec:04:8a:0e:
4c:b9:9d:30:6f:a2:6c:7a:07:d9:5d:3f:f6:3f:2a:81:e4:2f:
67:71:25:25:ce:a3:7b:5a:ca:af:dc:5e:bd:91:22:71:02:45:
9a:f8:7e:74:fc:c2:0d:22:12:eb:b4:6d:33:c5:e4:4c:84:71:
d9:fe:f2:4c:a4:38:b8:7d:ac:5f:8a:09:4c:b1:fb:4c:64:b9:
c2:22:06:b8:16:72:97:33:07:d0:6d:a1:10:18:5e:d3:f4:21:
2e:db:3e:1e:a4:1d:c5:f9:5a:fa:17:bf:9d:73:92:9a:48:94:
5c:2f:2d:d0:1e:4f:81:12:dc:b8:19:95:f4:70:e2:13:f1:81:
92:0a:d6:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUP56ghJNOZDl6uEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk
MTdjZjA2YjItZGQzOS00OTQ4LWI4Y2YtYTE1OWE4OTJjYzRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMUz1gC7So+T6sDqqXYzc1sD8r1DtIaTxJlr
lZD3uwKbuDFFIiVs6k8BTPpbT8yXfCWFlTIJD63sM0bm2Jlf1gsYIXm/QxsDNesq
1wfK8XdievR1yAwR8XFKUWMbDgMtcTNblSIEAcLC0BsbV67yGg1ZQ3D0P3ip4JV8
VsB8wLs8/x40wpXdPfsM32oWqJ6yWODtgE/a9Q4wORXjUWD+qgPSPx2IR4qSX8su
o07OTpfz9EcP5iCQUvyhFq3r4zCGWaw5k/BmsNy5rEFo6b+67NcTbtlgZG8uyIYW
XSXNKAUSLJ+06+VcpndF3P4AYYMkN4aey3WRbPANO2ki9XPAZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBvjp5ANwsKNm4/V9qCXHm7MvF9CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjJmZjY1NTUtOTRiMC0z
YTkwLWE0YzItZmJmMTMwYTM3NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuCQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGd8qzhI8jkOnvS7CfI6OQz24PUwt+uWzYuBRDe6t2mM5UbmarMjcAdL
YnhCWJX0XJGeOfplFF0aqsDe+FhR5z4dMfgEmpBSc7UmrLO/HVPSVvtXI7ppMM9X
K5sd1Yult0beWJQUqwwOjlRPzO+USjDDb0ELXbXmddYt7ASKDky5nTBvomx6B9ld
P/Y/KoHkL2dxJSXOo3tayq/cXr2RInECRZr4fnT8wg0iEuu0bTPF5EyEcdn+8kyk
OLh9rF+KCUyx+0xkucIiBrgWcpczB9BtoRAYXtP0IS7bPh6kHcX5WvoXv51zkppI
lFwvLdAeT4ES3LgZlfRw4hPxgZIK1gY=
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:47:13 2025 by rpki-client