Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7ff28ae-098b-3855-9b1d-fa792d597028.roa
File: f7ff28ae-098b-3855-9b1d-fa792d597028.roa (raw, json)
Hash identifier: hIur2NLhfphJQD22ZJOnih2FA1UEZDUP5thUCU66Vfc=
Subject key identifier: E0:CB:D1:89:A9:45:6D:1B:5C:EB:8F:89:DA:F7:0D:BC:08:FD:97:49
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858484C130901991C456781115520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7ff28ae-098b-3855-9b1d-fa792d597028.roa
Signing time: Mon 23 Dec 2024 02:00:40 +0000
ROA not before: Mon 23 Dec 2024 02:00:40 +0000
ROA not after: Sun 23 Mar 2025 01:00:40 +0000
asID: 33491
IP address blocks: 98.228.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:4c:13:09:01:99:1c:45:67:81:11:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Dec 23 02:00:40 2024 GMT
Not After : Mar 23 01:00:40 2025 GMT
Subject: CN=56fce8f5-9fdd-43fd-955c-62ad6fca91e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ce:7f:3b:fd:37:6a:7f:4a:dc:b5:a1:b3:40:
8c:8b:69:18:1d:5d:19:48:64:8b:4e:a4:ab:b2:e9:
cf:28:6b:45:21:3f:b5:5a:d4:4b:ee:6d:35:96:7f:
cb:bc:28:13:42:69:89:18:01:f4:5c:20:3a:d6:7b:
f1:e4:32:61:4a:67:96:22:98:0a:72:31:3d:16:f9:
34:67:cb:4c:bc:fc:57:5e:50:7c:4b:c6:f6:19:5b:
fe:b4:26:cb:91:bd:8f:f7:2b:4e:d1:36:c5:6e:a4:
37:b6:29:5f:a9:e4:19:4e:23:a5:73:81:2c:e1:2d:
05:7d:bf:24:d1:32:32:59:e9:a4:2d:02:d6:26:02:
0e:8b:08:70:0e:5d:7b:c4:70:05:e1:26:df:78:24:
14:cb:de:f7:96:5a:8c:99:db:c7:67:f8:cc:fb:8c:
bc:f7:be:f3:d3:96:bf:81:35:48:74:9d:3f:69:8e:
15:7a:a2:62:d4:32:b1:ef:69:66:55:1a:ad:20:5a:
24:f5:68:49:0a:bb:61:84:19:62:35:e3:d5:a1:8f:
17:4e:b5:9f:ac:6f:22:e3:2c:4d:c6:1d:8b:a4:f6:
79:f6:ec:e7:8f:67:7e:6c:f4:fe:1b:51:e1:67:32:
f9:5d:5a:e6:7e:47:83:97:46:24:0f:36:a3:f2:1c:
ca:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:CB:D1:89:A9:45:6D:1B:5C:EB:8F:89:DA:F7:0D:BC:08:FD:97:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f7ff28ae-098b-3855-9b1d-fa792d597028.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.228.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:0f:80:90:f5:ad:50:38:0c:6a:7a:5f:4b:b4:16:44:e0:6d:
14:64:08:e7:56:8d:88:06:16:b5:c1:7c:ec:a5:cd:e2:1b:a4:
e7:6d:0f:f0:55:8d:b5:03:a5:e4:e1:67:04:ad:14:bd:95:fa:
a0:12:26:3d:a2:3d:3c:2b:27:4e:78:e1:71:bd:98:f5:8d:74:
74:a8:dd:9a:ca:83:a6:db:9c:c1:f4:f6:20:d6:90:ea:b2:6b:
ba:63:5c:9f:32:1b:e6:ad:cd:65:a2:65:4f:4f:38:b8:27:c5:
4f:4d:2e:50:94:9d:6a:df:b7:fc:1f:10:64:e1:1d:dd:07:81:
6c:81:2c:00:8d:79:3a:09:14:72:f2:21:db:5b:56:05:89:fc:
64:ee:cc:32:e6:92:69:ae:e6:22:99:d6:68:cc:74:d0:1e:84:
ba:aa:d4:81:39:c1:20:40:1c:d9:93:46:de:89:47:46:e0:54:
93:f2:fa:d3:e4:f3:c6:c3:d2:05:eb:e4:4a:3f:e0:f2:48:44:
e4:f0:8a:c0:24:41:17:98:04:ae:3f:0c:44:fb:b1:ae:7c:29:
11:3d:e5:be:18:e3:3c:8c:f9:62:52:97:bd:20:91:7a:17:b4:
ba:c9:42:e0:c6:ce:92:3d:63:e5:94:7f:bd:77:40:15:a4:b1:
f3:4d:6c:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhMEwkBmRxFZ4ERVSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI0MTIyMzAyMDA0MFoXDTI1MDMyMzAxMDA0MFowLzEtMCsGA1UEAxMk
NTZmY2U4ZjUtOWZkZC00M2ZkLTk1NWMtNjJhZDZmY2E5MWU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls5/O/03an9K3LWhs0CMi2kYHV0ZSGSLTqSr
sunPKGtFIT+1WtRL7m01ln/LvCgTQmmJGAH0XCA61nvx5DJhSmeWIpgKcjE9Fvk0
Z8tMvPxXXlB8S8b2GVv+tCbLkb2P9ytO0TbFbqQ3tilfqeQZTiOlc4Es4S0Ffb8k
0TIyWemkLQLWJgIOiwhwDl17xHAF4SbfeCQUy973llqMmdvHZ/jM+4y8977z05a/
gTVIdJ0/aY4VeqJi1DKx72lmVRqtIFok9WhJCrthhBliNePVoY8XTrWfrG8i4yxN
xh2LpPZ59uznj2d+bPT+G1HhZzL5XVrmfkeDl0YkDzaj8hzKNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFODL0YmpRW0bXOuPidr3DbwI/ZdJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjdmZjI4YWUtMDk4Yi0z
ODU1LTliMWQtZmE3OTJkNTk3MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYuRWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGkPgJD1rVA4DGp6X0u0FkTgbRRkCOdWjYgGFrXBfOylzeIbpOdtD/BV
jbUDpeThZwStFL2V+qASJj2iPTwrJ0544XG9mPWNdHSo3ZrKg6bbnMH09iDWkOqy
a7pjXJ8yG+atzWWiZU9POLgnxU9NLlCUnWrft/wfEGThHd0HgWyBLACNeToJFHLy
IdtbVgWJ/GTuzDLmkmmu5iKZ1mjMdNAehLqq1IE5wSBAHNmTRt6JR0bgVJPy+tPk
88bD0gXr5Eo/4PJIROTwisAkQReYBK4/DET7sa58KRE95b4Y4zyM+WJSl70gkXoX
tLrJQuDGzpI9Y+WUf713QBWksfNNbDU=
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:08:34 2025 by rpki-client