Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd1319d6-b0c6-3523-b941-efee2a2f8e66.roa
File: bd1319d6-b0c6-3523-b941-efee2a2f8e66.roa (raw, json)
Hash identifier: GBSl0weKymuaPD37hDUnFj5baWX9ygHs2CD4Az+I5Rk=
Subject key identifier: 3A:5C:3A:A1:92:5F:D5:CA:78:0C:30:76:81:D7:45:A2:8D:AE:1E:E3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6D828145B309F9764D5C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd1319d6-b0c6-3523-b941-efee2a2f8e66.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33660
IP address blocks: 98.202.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6d:82:81:45:b3:09:f9:76:4d:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=8c3d43d0-739c-4e76-b4c6-d98b69275a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3f:90:ae:2e:52:6c:e5:ab:0e:0b:f3:c3:4f:
ba:7a:34:4a:7d:ce:4e:10:4b:b5:38:74:8b:6b:d8:
cf:ce:0b:4f:95:7c:2d:55:51:35:2d:5b:50:06:db:
22:e7:1b:e8:c7:11:1a:86:b7:b4:f3:bd:fe:85:ac:
f2:ef:28:9b:17:0a:9e:dd:16:36:bc:47:f9:7c:3b:
bc:79:6e:66:cf:d8:39:c4:34:2f:04:44:81:38:e6:
a6:0b:84:d2:e0:7b:29:c3:11:f5:0e:7c:bb:39:8f:
7d:17:7a:d9:9d:d1:02:83:67:66:18:0f:21:aa:b6:
fb:9f:3e:b8:de:4e:48:cc:34:80:d2:a7:c2:ec:db:
b7:a9:da:16:6e:64:64:e9:3d:94:08:9a:bf:46:30:
8e:3e:1c:f8:1b:dd:2b:cb:c3:6b:e8:75:32:5b:6c:
50:6c:ee:81:7d:2d:69:c5:95:3d:57:9c:15:0a:98:
5a:17:98:b4:c1:ee:b9:ae:6c:23:49:65:48:56:6a:
ff:3c:dc:db:9e:b4:c7:e9:ac:b6:6d:49:cb:25:ba:
a0:43:18:a1:71:1f:1b:38:70:92:8e:d3:c4:6c:2c:
d5:a7:a6:9a:2a:9b:ca:ae:b8:a9:64:0d:c0:eb:70:
e6:e6:9c:3e:37:bb:31:de:91:29:39:0e:fe:34:3f:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5C:3A:A1:92:5F:D5:CA:78:0C:30:76:81:D7:45:A2:8D:AE:1E:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd1319d6-b0c6-3523-b941-efee2a2f8e66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.202.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:65:fc:69:48:46:d6:9d:8c:e5:e4:7f:96:db:c5:f8:b0:46:
ad:f3:c2:25:a0:91:22:64:df:f3:bb:42:54:db:f0:d6:94:de:
4e:d3:99:af:43:21:e4:e0:0c:77:75:e7:0b:50:f6:ce:fd:45:
1b:c0:2d:ec:d7:68:b7:95:66:41:aa:a2:d9:97:8b:55:83:2e:
25:22:f2:0d:23:3f:cd:5b:37:3c:b1:bd:58:e2:22:14:c9:7d:
5e:96:8a:f1:28:60:96:b7:05:f4:05:0c:10:3a:3e:2e:61:ec:
21:1a:19:6f:81:19:e2:ff:19:61:1e:d2:63:4b:a3:35:f1:be:
83:34:8e:05:9e:82:f7:3c:20:4f:22:bc:51:2e:21:fc:c7:5a:
dc:ed:e8:cc:88:18:6d:42:b0:90:1d:0b:8b:35:37:d7:40:d4:
ca:d6:58:ee:84:25:66:58:a9:86:79:96:94:00:81:ce:27:7a:
e0:8b:a4:e5:3f:23:98:93:b2:c0:fd:0d:01:1e:de:63:b9:64:
08:07:cb:21:ed:c9:a8:cd:62:86:3d:86:e2:5e:26:4b:18:d2:
cd:10:01:cc:a7:de:2f:11:48:7e:cb:d6:43:62:0b:f7:c2:e9:
07:f0:79:e8:c9:99:83:dd:8f:0d:2f:52:99:b4:f9:4e:b0:db:
51:48:4b:a0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiebYKBRbMJ+XZNXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
OGMzZDQzZDAtNzM5Yy00ZTc2LWI0YzYtZDk4YjY5Mjc1YTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j+Qri5SbOWrDgvzw0+6ejRKfc5OEEu1OHSL
a9jPzgtPlXwtVVE1LVtQBtsi5xvoxxEahre0873+hazy7yibFwqe3RY2vEf5fDu8
eW5mz9g5xDQvBESBOOamC4TS4HspwxH1Dny7OY99F3rZndECg2dmGA8hqrb7nz64
3k5IzDSA0qfC7Nu3qdoWbmRk6T2UCJq/RjCOPhz4G90ry8Nr6HUyW2xQbO6BfS1p
xZU9V5wVCphaF5i0we65rmwjSWVIVmr/PNzbnrTH6ay2bUnLJbqgQxihcR8bOHCS
jtPEbCzVp6aaKpvKrripZA3A63Dm5pw+N7sx3pEpOQ7+ND8JSwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDpcOqGSX9XKeAwwdoHXRaKNrh7jMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQxMzE5ZDYtYjBjNi0z
NTIzLWI5NDEtZWZlZTJhMmY4ZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYsowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEArGX8aUhG1p2M5eR/ltvF+LBGrfPCJaCRImTf87tCVNvw1pTeTtOZr0Mh
5OAMd3XnC1D2zv1FG8At7Ndot5VmQaqi2ZeLVYMuJSLyDSM/zVs3PLG9WOIiFMl9
XpaK8ShglrcF9AUMEDo+LmHsIRoZb4EZ4v8ZYR7SY0ujNfG+gzSOBZ6C9zwgTyK8
US4h/Mda3O3ozIgYbUKwkB0LizU310DUytZY7oQlZliphnmWlACBzid64Iuk5T8j
mJOywP0NAR7eY7lkCAfLIe3JqM1ihj2G4l4mSxjSzRABzKfeLxFIfsvWQ2IL98Lp
B/B56MmZg92PDS9SmbT5TrDbUUhLoA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 09:38:45 2025 by rpki-client