Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ccef7d0-897d-36fd-9601-c0260d44764b.roa
File: 1ccef7d0-897d-36fd-9601-c0260d44764b.roa (raw, json)
Hash identifier: 5HZeiY28rgYVbMW+PG8s7NFlIn8m2Lc3El7lXBQx3Qo=
Subject key identifier: 9E:A6:43:3C:23:42:BF:82:2C:49:0D:75:28:08:DF:FA:A3:FD:E1:7E
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F43285847DC64ABD9ABF5E74110A64F00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ccef7d0-897d-36fd-9601-c0260d44764b.roa
Signing time: Wed 13 Nov 2024 02:00:28 +0000
ROA not before: Wed 13 Nov 2024 02:00:28 +0000
ROA not after: Tue 11 Feb 2025 02:00:28 +0000
asID: 21859
IP address blocks: 98.98.60.0/24 maxlen: 24
98.98.61.0/24 maxlen: 24
98.98.62.0/24 maxlen: 24
98.98.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:dc:64:ab:d9:ab:f5:e7:41:10:a6:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Nov 13 02:00:28 2024 GMT
Not After : Feb 11 02:00:28 2025 GMT
Subject: CN=9766a7e1-72b8-4bea-ba63-18ffeb12f0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:72:32:14:4e:28:ec:49:1c:05:63:2f:c9:
6d:10:bd:d2:0e:81:a5:9f:a1:dd:d0:76:3c:ec:35:
cb:cc:46:66:67:d7:d2:ed:2e:32:f7:cb:82:31:85:
32:23:23:83:12:24:e2:16:cf:d6:7f:2b:eb:b6:55:
f4:ee:f4:bc:1e:0f:e1:16:c3:17:93:12:7a:a1:6b:
86:07:1a:db:34:04:07:7f:6a:6c:1b:e8:7f:3f:de:
5c:86:85:a9:f2:e0:25:f3:52:3d:45:56:8a:4b:27:
9f:d4:d9:a9:54:f2:11:c3:09:e3:a7:ab:a2:cc:00:
19:d9:f1:2e:e9:ad:3c:e3:8b:48:9b:c0:00:56:e3:
84:3a:3e:48:db:91:ad:8c:23:46:a2:ab:71:91:92:
6f:bb:d1:3b:43:3a:23:c8:e6:87:2c:7c:ac:79:c8:
19:30:02:48:65:27:e5:26:bd:05:ec:84:b6:3e:ef:
b2:4b:3f:87:ea:dd:67:84:ea:7f:b7:d4:58:f0:5f:
e5:97:22:d2:69:c6:93:f7:94:ab:e5:2d:42:46:67:
bd:7b:c0:23:da:0f:6e:0a:f0:96:6c:57:16:8a:5a:
a0:fb:06:d9:de:fb:e7:e4:97:eb:c4:e8:d5:fb:bc:
7f:a0:e2:7d:29:d9:65:de:03:c4:60:ff:32:3e:52:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A6:43:3C:23:42:BF:82:2C:49:0D:75:28:08:DF:FA:A3:FD:E1:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/1ccef7d0-897d-36fd-9601-c0260d44764b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
98.98.60.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:26:b8:a2:95:49:17:27:3d:23:ce:b9:99:7d:12:5c:ca:09:
3a:20:66:70:c4:15:56:2f:f9:93:fa:c2:54:5e:eb:6e:74:6e:
a5:37:8c:f4:0c:65:a2:a7:61:b1:04:bc:bc:68:55:94:1a:6f:
2f:95:1f:da:10:b3:8f:9e:27:22:a9:05:fd:09:98:a5:97:02:
4c:17:86:e8:58:03:53:6b:56:78:10:b2:c2:5c:c2:44:9f:8d:
b0:dc:bd:5c:fa:47:43:8d:0a:9c:60:36:06:4d:02:29:c7:8e:
17:94:cd:4b:70:d3:7e:58:b4:44:89:c7:16:24:c1:73:6f:08:
8a:71:15:15:e6:20:7e:7e:11:a4:39:e6:23:0b:bc:e5:0e:f7:
8e:5a:a2:d7:3f:3d:46:0c:44:ea:a0:8f:1a:6e:1c:9c:2a:17:
df:ed:a2:d3:c6:e2:b3:e1:be:33:07:17:88:24:27:24:9b:3b:
89:01:d0:7a:8d:0d:ec:8a:47:c6:53:d4:3c:2a:40:63:f9:8c:
87:23:3a:41:c9:24:eb:7b:36:b6:76:63:b6:de:36:69:bf:09:
5f:0e:a3:aa:be:e6:3f:39:fd:6d:14:c8:65:a9:ab:21:de:73:
fe:7f:81:dd:1e:77:98:4d:65:a5:48:34:de:e9:3d:f3:fe:fe:
8b:09:07:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfcZKvZq/XnQRCmTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI0MTExMzAyMDAyOFoXDTI1MDIxMTAyMDAyOFowLzEtMCsGA1UEAxMk
OTc2NmE3ZTEtNzJiOC00YmVhLWJhNjMtMThmZmViMTJmMGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxtyMhROKOxJHAVjL8ltEL3SDoGln6Hd0HY8
7DXLzEZmZ9fS7S4y98uCMYUyIyODEiTiFs/WfyvrtlX07vS8Hg/hFsMXkxJ6oWuG
BxrbNAQHf2psG+h/P95choWp8uAl81I9RVaKSyef1NmpVPIRwwnjp6uizAAZ2fEu
6a0844tIm8AAVuOEOj5I25GtjCNGoqtxkZJvu9E7QzojyOaHLHysecgZMAJIZSfl
Jr0F7IS2Pu+ySz+H6t1nhOp/t9RY8F/llyLSacaT95Sr5S1CRme9e8Aj2g9uCvCW
bFcWilqg+wbZ3vvn5JfrxOjV+7x/oOJ9Kdll3gPEYP8yPlLN5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6mQzwjQr+CLEkNdSgI3/qj/eF+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMWNjZWY3ZDAtODk3ZC0z
NmZkLTk2MDEtYzAyNjBkNDQ3NjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYmI8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFomuKKVSRcnPSPOuZl9ElzKCTogZnDEFVYv+ZP6wlRe6250bqU3jPQM
ZaKnYbEEvLxoVZQaby+VH9oQs4+eJyKpBf0JmKWXAkwXhuhYA1NrVngQssJcwkSf
jbDcvVz6R0ONCpxgNgZNAinHjheUzUtw035YtESJxxYkwXNvCIpxFRXmIH5+EaQ5
5iMLvOUO945aotc/PUYMROqgjxpuHJwqF9/totPG4rPhvjMHF4gkJySbO4kB0HqN
DeyKR8ZT1DwqQGP5jIcjOkHJJOt7NrZ2Y7beNmm/CV8Oo6q+5j85/W0UyGWpqyHe
c/5/gd0ed5hNZaVINN7pPfP+/osJB+k=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:41:58 2025 by rpki-client