Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4923db70-c81a-34e2-a88f-f0e2426017c0.roa
File: 4923db70-c81a-34e2-a88f-f0e2426017c0.roa (raw, json)
Hash identifier: kOBGvc1LjEZnZY+f+vqKe4xQd+29Znm8ruUG3aWAsAA=
Subject key identifier: 5A:33:4D:3A:33:79:05:C0:D1:D9:24:FC:D6:CA:72:27:C8:8E:D0:00
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858483CB570F849F88E00B0055D00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4923db70-c81a-34e2-a88f-f0e2426017c0.roa
Signing time: Tue 17 Dec 2024 14:00:52 +0000
ROA not before: Tue 17 Dec 2024 14:00:52 +0000
ROA not after: Mon 17 Mar 2025 13:00:52 +0000
asID: 7029
IP address blocks: 98.22.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:3c:b5:70:f8:49:f8:8e:00:b0:05:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Dec 17 14:00:52 2024 GMT
Not After : Mar 17 13:00:52 2025 GMT
Subject: CN=43c6a22f-681e-4fba-aa64-377d33149996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5e:8c:c2:af:b8:0e:f0:d6:95:da:60:c8:2a:
ca:df:37:93:6a:4f:e5:35:4d:ba:a7:75:80:dc:68:
1e:ca:8f:13:68:5d:33:e6:e4:bd:55:a5:b4:19:81:
f8:52:fb:d0:b7:4e:97:c4:b1:57:ff:22:a9:60:17:
78:20:ff:69:22:2c:81:23:07:a8:97:22:15:67:b3:
60:96:42:6d:ca:bb:8d:f7:97:ec:f8:6a:cb:f6:f0:
79:40:11:af:4d:ea:cc:e4:5e:80:dd:43:9a:ee:1f:
3a:ee:bd:d2:d2:5a:c8:91:ff:a2:a7:36:f4:9b:bc:
40:43:bd:0c:b1:be:0d:3f:ea:4b:95:46:06:9d:48:
c6:cb:fd:d9:61:ca:04:84:73:75:6b:dc:17:5b:c4:
e6:c0:4d:37:f1:de:3c:3a:f9:b4:62:de:62:d2:f6:
af:04:0f:9b:a2:83:57:3a:42:12:84:46:05:99:b1:
15:4d:22:15:70:20:50:82:d3:3b:31:3e:59:8e:2e:
ca:bd:38:53:27:90:11:d5:22:dd:ee:c4:28:6d:ee:
25:9a:91:34:14:64:1b:3c:72:8a:bf:f7:d3:c1:a4:
a4:94:91:06:2b:bc:0d:d6:cf:51:d5:a3:41:67:cf:
44:21:00:18:ef:f3:d4:b8:39:a3:93:ca:ad:46:54:
c0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:33:4D:3A:33:79:05:C0:D1:D9:24:FC:D6:CA:72:27:C8:8E:D0:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4923db70-c81a-34e2-a88f-f0e2426017c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:d1:c6:9e:ba:ad:e9:b7:25:26:a4:cb:c4:95:f0:1c:0f:01:
c7:2f:16:cc:5d:9d:82:5b:58:e9:e9:22:20:0a:b5:a0:28:05:
8f:29:7e:9d:93:f3:6c:69:44:4a:d2:6c:be:4c:33:64:18:dd:
f3:bd:37:f8:55:08:3d:de:51:05:cd:5e:8f:7d:40:36:7b:cf:
46:8c:ab:fe:17:19:2f:4d:fc:b4:95:6c:57:8c:35:78:61:72:
82:88:cd:7d:ac:41:13:c1:99:6e:6f:84:10:8a:88:d7:f0:74:
56:3b:7d:dc:76:f8:90:fb:19:96:df:9a:78:13:4b:1b:02:c9:
c1:5c:f4:35:ec:ff:41:0f:d9:37:80:7d:70:29:c4:ef:3a:fe:
75:ab:44:bf:84:11:fe:31:3e:9c:53:5e:8b:b4:e4:89:a4:e9:
f7:0f:00:5d:32:ca:8e:eb:bc:3e:2b:c3:2b:56:12:6a:d9:8b:
e4:e2:e9:08:e0:b1:84:f1:a2:65:32:49:9a:ec:2a:b6:a5:65:
03:2b:c1:5b:6f:f0:30:af:43:f6:83:0c:10:27:d5:95:3f:66:
58:f4:bb:cc:5c:2a:9c:5b:cd:75:79:bc:5a:be:2e:70:8f:9a:
0c:32:e0:38:4a:d6:b5:af:7f:10:07:df:26:bf:b1:60:0d:82:
89:d0:05:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXD4SfiOALAFXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk
NDNjNmEyMmYtNjgxZS00ZmJhLWFhNjQtMzc3ZDMzMTQ5OTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi16Mwq+4DvDWldpgyCrK3zeTak/lNU26p3WA
3Ggeyo8TaF0z5uS9VaW0GYH4UvvQt06XxLFX/yKpYBd4IP9pIiyBIweolyIVZ7Ng
lkJtyruN95fs+GrL9vB5QBGvTerM5F6A3UOa7h867r3S0lrIkf+ipzb0m7xAQ70M
sb4NP+pLlUYGnUjGy/3ZYcoEhHN1a9wXW8TmwE038d48Ovm0Yt5i0vavBA+booNX
OkIShEYFmbEVTSIVcCBQgtM7MT5Zji7KvThTJ5AR1SLd7sQobe4lmpE0FGQbPHKK
v/fTwaSklJEGK7wN1s9R1aNBZ89EIQAY7/PUuDmjk8qtRlTAvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFozTTozeQXA0dkk/NbKcifIjtAAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDkyM2RiNzAtYzgxYS0z
NGUyLWE4OGYtZjBlMjQyNjAxN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG/Rxp66rem3JSaky8SV8BwPAccvFsxdnYJbWOnpIiAKtaAoBY8pfp2T
82xpRErSbL5MM2QY3fO9N/hVCD3eUQXNXo99QDZ7z0aMq/4XGS9N/LSVbFeMNXhh
coKIzX2sQRPBmW5vhBCKiNfwdFY7fdx2+JD7GZbfmngTSxsCycFc9DXs/0EP2TeA
fXApxO86/nWrRL+EEf4xPpxTXou05Imk6fcPAF0yyo7rvD4rwytWEmrZi+Ti6Qjg
sYTxomUySZrsKralZQMrwVtv8DCvQ/aDDBAn1ZU/Zlj0u8xcKpxbzXV5vFq+LnCP
mgwy4DhK1rWvfxAH3ya/sWANgonQBUc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:35 2025 by rpki-client