Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa
File: 3708b2e2-b1f4-3516-a6cc-623967a05732.roa (raw, json)
Hash identifier: gY5LajP0xfJwYzkpRrVUJqRri49TYAvhBjWdfhGYr9I=
Subject key identifier: FC:5E:41:A0:C4:D2:5C:9E:F3:44:DF:8B:1A:96:C2:12:89:8A:F6:B6
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584832F04D2F15876B8AB86D0300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa
Signing time: Sat 14 Dec 2024 02:00:39 +0000
ROA not before: Sat 14 Dec 2024 02:00:39 +0000
ROA not after: Fri 14 Mar 2025 01:00:39 +0000
asID: 701
IP address blocks: 98.117.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:32:f0:4d:2f:15:87:6b:8a:b8:6d:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Dec 14 02:00:39 2024 GMT
Not After : Mar 14 01:00:39 2025 GMT
Subject: CN=487d4bbc-bceb-477c-8c1a-21a677680075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:55:06:7a:69:dd:3b:6e:c2:21:2d:ac:48:
58:37:a6:bd:3e:99:57:82:e1:8f:2f:ad:d3:f5:65:
c4:db:04:3c:98:d8:c3:f8:83:fc:96:56:a0:ae:4f:
39:46:ae:d2:3b:27:a6:75:5b:1a:ea:f7:6a:1e:e1:
2e:45:f3:cb:cf:d8:8d:e7:fa:83:61:fa:d6:c4:4a:
c0:03:b4:79:c2:93:40:a2:b1:a1:a0:72:8a:3a:b5:
ee:9a:51:c4:83:f7:6b:76:be:c2:cb:b1:fe:83:23:
ca:55:9a:ad:c6:34:d2:94:6c:7c:3d:5f:c8:d3:d9:
49:82:b8:ef:d5:33:25:26:e4:fb:61:e7:b2:61:38:
a7:cf:81:1e:e9:01:8f:fb:04:00:de:0c:d1:95:04:
15:bd:49:a3:70:1a:73:a1:1d:23:3c:62:40:4f:d1:
6a:8e:da:36:c3:5e:1f:cc:f4:7b:d4:24:fe:a4:7b:
52:03:ab:5e:ab:11:8b:c9:0f:8f:98:10:c2:45:6c:
9f:d7:f7:9e:57:f8:e5:ad:fb:72:ae:92:d1:a2:09:
28:49:4c:c8:18:4e:9c:0b:b4:b8:99:79:25:22:14:
1f:fb:0b:35:35:f9:23:03:ee:33:b3:f0:75:a1:96:
df:a4:99:a1:b8:32:54:7e:ff:62:8b:e9:56:a9:44:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5E:41:A0:C4:D2:5C:9E:F3:44:DF:8B:1A:96:C2:12:89:8A:F6:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3708b2e2-b1f4-3516-a6cc-623967a05732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
98.117.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:8b:8a:98:0a:09:3b:6c:65:f2:bc:c6:54:1f:4c:f2:f7:08:
2f:10:81:84:79:76:39:8d:e8:e0:74:57:2e:d9:90:c2:1b:0c:
6a:1c:4a:2c:72:5a:e8:0a:d5:b3:7d:c4:9e:58:8a:99:d5:19:
e1:7b:14:8b:29:02:92:de:57:65:02:8c:64:54:e9:ec:0d:3b:
f1:4c:98:ff:b9:42:57:e3:5f:a1:6e:84:34:f3:c5:2c:4b:8c:
c1:6e:c4:32:59:8a:2a:22:2b:95:99:ba:4a:10:d5:c8:dd:d4:
f6:7f:c4:b0:1d:98:d3:32:89:d9:e0:e5:11:ca:12:e2:f2:00:
3a:c3:ce:64:93:5f:37:93:be:86:8a:a0:4e:9d:9d:62:70:1f:
02:fa:ae:75:f1:67:94:03:22:c8:19:47:fe:1b:3c:bb:6c:5f:
c1:13:c5:3d:73:7f:48:29:2d:a3:1d:f7:ac:31:ba:a2:ee:c1:
ea:e5:d4:e8:c3:39:63:9f:11:23:2c:c7:e0:11:12:87:35:f8:
db:a9:1c:82:c6:71:50:de:51:9d:13:45:2a:cb:d3:77:74:c8:
c0:29:49:a3:ce:c4:f7:a6:c7:82:12:28:c7:c3:94:bb:df:cc:
2e:94:59:ab:02:7e:08:71:ad:1a:7a:e1:2a:68:76:b5:c7:a2:
c0:9a:d3:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8E0vFYdrirhtAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDg3ZDRiYmMtYmNlYi00NzdjLThjMWEtMjFhNjc3NjgwMDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGZVBnpp3TtuwiEtrEhYN6a9PplXguGPL63T
9WXE2wQ8mNjD+IP8llagrk85Rq7SOyemdVsa6vdqHuEuRfPLz9iN5/qDYfrWxErA
A7R5wpNAorGhoHKKOrXumlHEg/drdr7Cy7H+gyPKVZqtxjTSlGx8PV/I09lJgrjv
1TMlJuT7YeeyYTinz4Ee6QGP+wQA3gzRlQQVvUmjcBpzoR0jPGJAT9Fqjto2w14f
zPR71CT+pHtSA6teqxGLyQ+PmBDCRWyf1/eeV/jlrftyrpLRogkoSUzIGE6cC7S4
mXklIhQf+ws1NfkjA+4zs/B1oZbfpJmhuDJUfv9ii+lWqUQo6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxeQaDE0lye80TfixqWwhKJiva2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzcwOGIyZTItYjFmNC0z
NTE2LWE2Y2MtNjIzOTY3YTA1NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYnXgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6LipgKCTtsZfK8xlQfTPL3CC8QgYR5djmN6OB0Vy7ZkMIbDGocSixy
WugK1bN9xJ5YipnVGeF7FIspApLeV2UCjGRU6ewNO/FMmP+5QlfjX6FuhDTzxSxL
jMFuxDJZiioiK5WZukoQ1cjd1PZ/xLAdmNMyidng5RHKEuLyADrDzmSTXzeTvoaK
oE6dnWJwHwL6rnXxZ5QDIsgZR/4bPLtsX8ETxT1zf0gpLaMd96wxuqLuwerl1OjD
OWOfESMsx+AREoc1+NupHILGcVDeUZ0TRSrL03d0yMApSaPOxPemx4ISKMfDlLvf
zC6UWasCfghxrRp64SpodrXHosCa0zg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 00:04:03 2025 by rpki-client