Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f393e79-4f7b-3233-871a-2c1b3c37fc30.roa
File: 8f393e79-4f7b-3233-871a-2c1b3c37fc30.roa (raw, json)
Hash identifier: vZgFt0jT/MGsFaa98lQI2iK8XYjUcCbivt7z10ZUY5o=
Subject key identifier: 1E:B3:0D:50:01:A3:98:CB:0C:A2:B4:09:FC:F7:99:BC:E7:53:83:EF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285849203C64189A168C1E3B5F2500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f393e79-4f7b-3233-871a-2c1b3c37fc30.roa
Signing time: Sun 09 Mar 2025 02:00:39 +0000
ROA not before: Sun 09 Mar 2025 02:00:39 +0000
ROA not after: Sat 07 Jun 2025 01:00:39 +0000
asID: 7725
IP address blocks: 98.219.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:20:3c:64:18:9a:16:8c:1e:3b:5f:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 9 02:00:39 2025 GMT
Not After : Jun 7 01:00:39 2025 GMT
Subject: CN=e4d85407-f63a-44a4-9333-050f55474318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:b2:f9:f9:9d:53:ca:a5:98:8c:d4:f4:98:
a1:6e:1e:f3:3f:42:71:80:f3:b4:de:9f:ab:9e:f2:
9a:31:3f:8f:fa:34:b4:27:57:de:b3:d2:ce:d2:a0:
18:cf:2d:64:b4:15:f9:17:b9:88:49:dd:4e:d2:b7:
5b:62:ea:46:85:b7:e0:f0:6f:7c:fb:40:fc:95:4a:
3f:6f:c4:68:e4:1a:15:b3:ea:76:cd:25:f7:6a:10:
24:d5:04:29:0b:68:0f:60:ee:be:4b:93:3d:c4:7f:
95:46:8e:f2:a7:b0:99:6c:f8:83:33:51:cd:9c:6a:
9e:15:1a:31:72:46:d2:1e:a2:77:c0:1a:35:31:53:
93:8a:06:f6:36:71:53:e8:11:7e:af:de:46:0c:6f:
49:76:e6:bd:4d:8d:92:6d:d2:e4:d8:55:0f:87:35:
d9:20:38:f1:30:63:39:06:c5:32:9d:af:39:54:d6:
ee:26:a4:ed:ad:6c:b0:e6:a2:78:54:09:ce:ac:8f:
f5:a7:17:f4:54:a8:0b:d1:57:66:08:c9:24:fd:ba:
0d:fe:8e:1b:ad:7d:04:58:3d:95:59:dc:7d:3b:79:
c4:6f:a4:a8:cb:e8:b4:c7:7f:c5:4f:52:40:a4:45:
f4:62:92:f6:8c:f9:53:3b:df:31:57:7c:53:54:f9:
50:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B3:0D:50:01:A3:98:CB:0C:A2:B4:09:FC:F7:99:BC:E7:53:83:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f393e79-4f7b-3233-871a-2c1b3c37fc30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.219.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:d3:35:8e:3e:a6:32:42:44:f5:43:4b:8a:d3:57:cd:64:69:
6d:3c:5e:3d:b8:2c:88:b9:93:79:ce:3d:ad:0d:cf:34:3a:64:
31:06:20:6c:53:18:25:51:bb:e1:8b:31:47:2b:b2:c2:30:fe:
57:b4:f0:76:5d:c7:46:fc:8a:d1:c4:af:15:cf:2b:1c:46:4b:
b6:10:32:86:bd:40:40:31:ae:c1:c4:6e:42:e0:b8:1b:ab:46:
e0:5b:f5:20:9e:ee:20:e2:dd:a7:f3:38:8e:05:41:01:e1:89:
26:af:10:8c:7f:a5:f6:f1:a8:1c:5e:69:54:ce:8f:00:fc:ed:
ef:3c:9a:0e:8b:71:b8:b0:b4:b9:dd:71:bf:ce:ae:5d:19:9c:
50:b9:74:b7:10:44:a6:e3:db:dd:f8:88:60:03:5a:50:4a:17:
61:e1:45:a5:2a:08:4e:9f:78:49:98:21:cc:75:15:3c:bc:62:
39:8b:39:f1:5a:ef:2d:1a:ba:14:45:f6:7c:9a:dd:d8:b8:39:
e0:df:2d:7f:a9:f9:a9:a9:f6:c7:01:b9:5d:d1:7a:17:36:31:
f4:ce:0d:49:90:8b:a5:85:4f:f6:34:c6:12:99:1f:93:fd:42:
39:01:4d:10:a2:1e:c7:1e:12:e2:23:09:37:d6:b3:db:21:d9:
44:2b:26:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPGQYmhaMHjtfJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZTRkODU0MDctZjYzYS00NGE0LTkzMzMtMDUwZjU1NDc0MzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5uy+fmdU8qlmIzU9Jihbh7zP0JxgPO03p+r
nvKaMT+P+jS0J1fes9LO0qAYzy1ktBX5F7mISd1O0rdbYupGhbfg8G98+0D8lUo/
b8Ro5BoVs+p2zSX3ahAk1QQpC2gPYO6+S5M9xH+VRo7yp7CZbPiDM1HNnGqeFRox
ckbSHqJ3wBo1MVOTigb2NnFT6BF+r95GDG9Jdua9TY2SbdLk2FUPhzXZIDjxMGM5
BsUyna85VNbuJqTtrWyw5qJ4VAnOrI/1pxf0VKgL0VdmCMkk/boN/o4brX0EWD2V
Wdx9O3nEb6Soy+i0x3/FT1JApEX0YpL2jPlTO98xV3xTVPlQ9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6zDVABo5jLDKK0Cfz3mbznU4PvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYzOTNlNzktNGY3Yi0z
MjMzLTg3MWEtMmMxYjNjMzdmYzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtsAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErTNY4+pjJCRPVDS4rTV81kaW08Xj24LIi5k3nOPa0NzzQ6ZDEGIGxT
GCVRu+GLMUcrssIw/le08HZdx0b8itHErxXPKxxGS7YQMoa9QEAxrsHEbkLguBur
RuBb9SCe7iDi3afzOI4FQQHhiSavEIx/pfbxqBxeaVTOjwD87e88mg6LcbiwtLnd
cb/Orl0ZnFC5dLcQRKbj2934iGADWlBKF2HhRaUqCE6feEmYIcx1FTy8YjmLOfFa
7y0auhRF9nya3di4OeDfLX+p+amp9scBuV3Rehc2MfTODUmQi6WFT/Y0xhKZH5P9
QjkBTRCiHsceEuIjCTfWs9sh2UQrJn4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:12:51 2025 by rpki-client