Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f264d0a-fe5d-3a9c-ac15-0e6f4cde9355.roa
File: 0f264d0a-fe5d-3a9c-ac15-0e6f4cde9355.roa (raw, json)
Hash identifier: Cq9kXOKBuk6wwcQ4YSoIKvCOF539Mnit1VCbAs8/BLE=
Subject key identifier: 37:44:B9:BC:D6:64:3A:1D:40:9C:A5:7B:66:82:2D:7A:8A:FE:6A:AE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F81BED2A43E47B5FE0DC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f264d0a-fe5d-3a9c-ac15-0e6f4cde9355.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 98.57.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:1b:ed:2a:43:e4:7b:5f:e0:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=e8d46128-46ba-4314-9624-72f4326d55b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:67:05:2b:a4:be:16:a3:05:5c:90:73:53:
27:2a:62:b1:7b:06:d5:68:aa:60:4c:fc:3d:e3:03:
bb:d6:dc:ad:f3:99:f8:c1:fa:6e:31:e9:d8:fb:1c:
10:d0:cb:15:6c:ca:cd:ef:c9:51:08:48:6b:6f:44:
ee:2e:fd:7c:d3:7e:33:c2:5d:c2:ba:bc:b0:f2:28:
ae:b0:c6:8c:08:33:be:0d:94:04:9e:a5:00:a6:3d:
70:e0:1d:c6:b3:fc:73:d1:e6:da:dc:14:29:5a:8e:
e7:78:2d:a5:a3:61:c0:3a:96:1d:f3:22:d7:80:da:
53:17:aa:df:de:a1:0e:0e:76:37:d4:75:0a:5a:cf:
7c:fc:b6:ae:a1:a4:aa:90:fe:cb:48:6e:41:18:32:
7e:91:a3:11:ce:13:23:a9:b4:95:cc:ba:1b:f8:b1:
60:17:cd:c2:f5:46:13:6d:7d:fe:75:fe:66:19:ab:
15:cb:d9:a8:2a:49:d5:5e:34:3e:f8:f3:ce:c4:7c:
69:d2:86:c9:7b:30:be:d7:ae:95:3b:9d:ab:78:02:
99:da:ce:9e:05:cb:f0:e6:e7:43:4d:79:57:c8:b9:
51:7f:99:82:50:e9:62:2e:d7:2b:bd:9b:69:35:c0:
b8:e5:0e:78:45:a8:24:f3:71:70:49:b1:87:a8:57:
62:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:44:B9:BC:D6:64:3A:1D:40:9C:A5:7B:66:82:2D:7A:8A:FE:6A:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f264d0a-fe5d-3a9c-ac15-0e6f4cde9355.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.57.208.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:8d:fe:3a:93:03:5a:da:36:d8:13:3d:19:77:44:3f:fd:98:
68:b3:92:62:dc:1e:73:06:81:2e:63:73:42:b4:be:43:00:83:
75:b9:58:7f:06:ff:4c:06:76:aa:3b:20:9e:4c:48:94:2a:40:
9a:20:c7:86:42:72:b0:ea:f7:fc:2c:c3:d9:14:a5:3c:0f:d3:
fd:de:cb:18:11:7a:b8:9b:58:62:00:36:d4:5c:7b:1a:2d:92:
7f:92:f1:8e:e7:68:8d:93:80:09:91:92:95:72:32:46:19:2c:
44:a7:7e:1f:95:a5:13:f6:c2:3a:aa:af:d9:62:95:8b:79:f0:
b0:b0:4b:39:54:04:45:b8:4c:e2:b9:45:95:db:29:73:9f:d0:
6f:9e:b7:df:cb:cb:bd:2b:cb:94:65:af:50:6d:79:fd:a9:a8:
73:fb:40:7d:11:b0:c3:a2:fd:d9:0f:97:75:9a:bd:40:57:88:
27:f8:2c:6c:05:42:03:2f:72:fe:c6:6b:9f:ff:1c:34:06:0e:
a4:20:ed:75:11:34:01:7a:a6:5e:1c:f6:06:e0:fe:fb:70:e0:
f1:e4:f0:a6:92:1c:08:26:83:bd:29:9a:d9:e7:57:2d:22:66:
aa:dd:e4:93:6d:fb:bd:9c:44:a3:2b:d0:a1:6c:73:ea:00:89:
25:34:2f:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+BvtKkPke1/g3AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
ZThkNDYxMjgtNDZiYS00MzE0LTk2MjQtNzJmNDMyNmQ1NWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE9nBSukvhajBVyQc1MnKmKxewbVaKpgTPw9
4wO71tyt85n4wfpuMenY+xwQ0MsVbMrN78lRCEhrb0TuLv18034zwl3Curyw8iiu
sMaMCDO+DZQEnqUApj1w4B3Gs/xz0eba3BQpWo7neC2lo2HAOpYd8yLXgNpTF6rf
3qEODnY31HUKWs98/LauoaSqkP7LSG5BGDJ+kaMRzhMjqbSVzLob+LFgF83C9UYT
bX3+df5mGasVy9moKknVXjQ++PPOxHxp0obJezC+166VO52reAKZ2s6eBcvw5udD
TXlXyLlRf5mCUOliLtcrvZtpNcC45Q54Ragk83FwSbGHqFdiCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdEubzWZDodQJyle2aCLXqK/mquMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGYyNjRkMGEtZmU1ZC0z
YTljLWFjMTUtMGU2ZjRjZGU5MzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYjnQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAION/jqTA1raNtgTPRl3RD/9mGizkmLcHnMGgS5jc0K0vkMAg3W5WH8G
/0wGdqo7IJ5MSJQqQJogx4ZCcrDq9/wsw9kUpTwP0/3eyxgReribWGIANtRcexot
kn+S8Y7naI2TgAmRkpVyMkYZLESnfh+VpRP2wjqqr9lilYt58LCwSzlUBEW4TOK5
RZXbKXOf0G+et9/Ly70ry5Rlr1Btef2pqHP7QH0RsMOi/dkPl3WavUBXiCf4LGwF
QgMvcv7Ga5//HDQGDqQg7XURNAF6pl4c9gbg/vtw4PHk8KaSHAgmg70pmtnnVy0i
Zqrd5JNt+72cRKMr0KFsc+oAiSU0L6o=
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:51:01 2025 by rpki-client