Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e1cbc72-5947-3b92-b851-82a388730cd8.roa
File: 1e1cbc72-5947-3b92-b851-82a388730cd8.roa (raw, json)
Hash identifier: +ulGfmtJQ8E0bPJAXtIh9LtP2XSZrwIsfCNGpDeex6k=
Subject key identifier: 82:4B:5C:F8:66:7D:64:56:FA:FC:0D:DA:BE:D1:43:5F:0D:6D:54:C3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAFCFC4FB4582BF9ECD8500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e1cbc72-5947-3b92-b851-82a388730cd8.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33491
IP address blocks: 98.32.212.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:af:cf:c4:fb:45:82:bf:9e:cd:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=f7545cb5-921d-42b2-a1ef-cc21acc2a33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:54:8d:79:cf:6f:f6:2b:ac:27:fa:50:7b:
79:95:8e:60:fc:b7:d8:ee:e9:93:85:9b:e3:af:79:
9c:21:63:db:e2:04:8a:af:16:82:99:6a:a2:bc:40:
b4:05:96:48:38:69:ea:42:47:04:a2:a7:93:85:25:
33:ca:73:26:ab:48:cd:72:c8:b1:20:8a:7e:ff:1c:
b5:e2:23:64:8d:8c:e7:66:7c:38:7f:54:fc:5e:0f:
76:37:1d:1e:b4:1d:1e:1a:92:45:8d:e7:f5:42:41:
e7:f8:92:e6:42:24:42:3a:ef:c7:d0:be:24:2d:a6:
c0:84:1b:7d:62:ad:4b:d3:86:f3:b5:19:93:a9:3f:
37:fd:ba:29:02:2c:50:d1:03:e8:bc:99:95:79:76:
1a:1f:fd:8e:d6:8c:02:05:04:44:b6:c1:5b:98:e6:
04:fb:b2:1d:eb:9a:11:e1:02:cc:06:f6:ba:cf:de:
15:ff:d4:03:76:f3:a0:f6:33:eb:ba:cd:98:a9:42:
7b:25:9c:34:d1:0f:95:6d:28:96:e1:bf:17:f8:8b:
82:11:e9:81:89:e2:09:64:9b:24:b5:51:62:c0:a9:
78:96:d2:d8:31:e6:ed:a9:91:59:15:93:90:4c:af:
d2:a6:a3:ee:fd:3e:e4:74:11:fe:bc:2d:b3:33:c7:
77:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4B:5C:F8:66:7D:64:56:FA:FC:0D:DA:BE:D1:43:5F:0D:6D:54:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e1cbc72-5947-3b92-b851-82a388730cd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.32.212.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:ca:4b:00:c3:2a:57:99:4b:a2:e7:40:83:7b:0c:65:4c:81:
e8:06:c3:be:98:4f:b0:d3:c6:fc:09:84:24:d2:46:02:dd:65:
86:ba:b9:a8:3e:04:5e:df:fe:d1:54:44:7e:4b:96:f1:08:18:
e3:45:f8:2c:29:fc:7b:6d:8d:11:da:60:20:79:11:c1:52:36:
b7:f9:d1:38:e7:0f:a4:08:24:f8:1d:74:af:10:76:89:a1:3d:
53:ef:ab:c6:7f:ec:ca:df:9e:fc:d2:27:2a:72:98:b4:1b:1a:
6c:da:24:a6:78:14:6d:2f:ea:b9:64:37:07:e4:3e:42:16:bd:
5c:8c:6a:b2:19:89:2b:e8:92:1f:6a:73:27:df:e4:22:ea:7c:
94:ce:0d:83:1f:ad:28:49:cb:5f:60:7f:b0:ac:aa:31:93:de:
2d:ee:52:a0:1b:94:ea:06:7f:13:67:b9:14:5f:b6:8a:62:33:
a9:98:b7:dc:51:73:b2:cc:bc:a1:e5:e0:67:36:4c:a1:21:62:
e0:40:03:d5:79:78:a1:30:91:e3:1c:fe:a6:86:03:29:93:eb:
18:e6:e7:db:7f:0a:81:09:b1:fe:d0:b0:3b:e9:ae:71:31:37:
74:b5:1a:0c:09:c6:bc:f4:98:60:08:3c:f6:69:62:d7:8d:fb:
4a:a2:56:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr8/E+0WCv57NhQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
Zjc1NDVjYjUtOTIxZC00MmIyLWExZWYtY2MyMWFjYzJhMzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNdUjXnPb/YrrCf6UHt5lY5g/LfY7umThZvj
r3mcIWPb4gSKrxaCmWqivEC0BZZIOGnqQkcEoqeThSUzynMmq0jNcsixIIp+/xy1
4iNkjYznZnw4f1T8Xg92Nx0etB0eGpJFjef1QkHn+JLmQiRCOu/H0L4kLabAhBt9
Yq1L04bztRmTqT83/bopAixQ0QPovJmVeXYaH/2O1owCBQREtsFbmOYE+7Id65oR
4QLMBva6z94V/9QDdvOg9jPrus2YqUJ7JZw00Q+VbSiW4b8X+IuCEemBieIJZJsk
tVFiwKl4ltLYMebtqZFZFZOQTK/SpqPu/T7kdBH+vC2zM8d34QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIJLXPhmfWRW+vwN2r7RQ18NbVTDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWUxY2JjNzItNTk0Ny0z
YjkyLWI4NTEtODJhMzg4NzMwY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiDUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvKSwDDKleZS6LnQIN7DGVMgegGw76YT7DTxvwJhCTSRgLdZYa6uag+
BF7f/tFURH5LlvEIGONF+Cwp/HttjRHaYCB5EcFSNrf50TjnD6QIJPgddK8Qdomh
PVPvq8Z/7MrfnvzSJypymLQbGmzaJKZ4FG0v6rlkNwfkPkIWvVyMarIZiSvokh9q
cyff5CLqfJTODYMfrShJy19gf7CsqjGT3i3uUqAblOoGfxNnuRRftopiM6mYt9xR
c7LMvKHl4Gc2TKEhYuBAA9V5eKEwkeMc/qaGAymT6xjm59t/CoEJsf7QsDvprnEx
N3S1GgwJxrz0mGAIPPZpYteN+0qiVqU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:34:18 2025 by rpki-client