Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be6c6e92-c185-37ce-bf52-171aa0ac6e1e.roa
File: be6c6e92-c185-37ce-bf52-171aa0ac6e1e.roa (raw, json)
Hash identifier: rrDC5YrniN/Um1eCWVyWUATTSpq95UmleChpH1ReEqo=
Subject key identifier: 3F:C8:72:87:B6:6B:A1:1B:70:76:3B:C9:E3:87:17:5E:77:60:A8:31
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CAEB936D439E6DEFAF27B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be6c6e92-c185-37ce-bf52-171aa0ac6e1e.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33660
IP address blocks: 98.33.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:ae:b9:36:d4:39:e6:de:fa:f2:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=43e01917-b164-4767-b588-e120019f6d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:65:84:88:ae:3e:f9:7b:d1:e0:55:48:ca:6b:
32:25:dc:e1:76:0c:85:83:42:1e:61:a4:2f:6e:2d:
0b:9d:ef:f9:60:96:80:16:fb:f0:9a:ef:7e:b3:c8:
3e:7a:7f:37:cb:1e:24:be:7c:5a:60:9c:95:ac:6b:
63:30:60:f6:cf:4d:b0:17:50:d4:6e:78:3c:32:d6:
04:e8:85:87:fd:63:e6:cd:55:b4:0a:9b:16:d5:67:
54:36:37:7f:71:20:12:cc:46:0e:04:5d:95:34:cf:
32:b5:8e:eb:f1:5d:56:5b:5d:e9:e6:7c:46:23:a0:
0f:b4:4e:75:f8:15:b5:b9:53:29:36:82:81:6f:0c:
14:20:16:d8:2f:a6:2a:6c:56:58:46:af:d0:04:48:
28:d1:50:e5:da:3a:c9:48:04:98:1e:7e:ba:f7:f3:
da:55:4e:68:04:73:3e:65:26:9f:61:d0:e6:b4:34:
65:cd:5d:76:01:16:a7:9e:93:d1:4b:5d:13:b8:71:
01:bd:85:78:53:14:cc:e0:ae:60:54:4f:39:6a:de:
df:cd:ce:19:50:50:05:d6:66:10:f8:2d:d1:4c:0e:
b4:1f:1e:cb:9b:48:15:9c:8b:48:9f:27:76:53:2b:
04:e8:05:55:76:8a:55:1f:04:85:24:05:de:b9:8a:
ef:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C8:72:87:B6:6B:A1:1B:70:76:3B:C9:E3:87:17:5E:77:60:A8:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be6c6e92-c185-37ce-bf52-171aa0ac6e1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.33.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:e8:cc:35:3d:51:55:f3:b0:2e:2a:97:12:21:04:7f:0a:6a:
fb:63:3d:4a:25:2e:9d:7c:16:87:a5:ae:6b:69:51:cd:41:f5:
a9:5b:2b:ee:ea:f4:06:de:29:70:22:78:b9:d5:d5:e0:1b:c3:
ec:c6:fd:fa:5a:3f:af:2a:f4:41:9a:f0:13:bc:6a:44:ff:6d:
5e:72:01:fd:08:fd:44:e3:47:fc:0e:5b:c1:2d:a1:d7:8b:1b:
ad:8a:c9:99:a7:69:d7:8d:0e:0d:84:09:5d:ce:b2:58:81:ae:
40:a7:b2:8b:94:b5:e4:d5:b0:f9:1b:77:0e:fd:52:82:ba:4e:
78:6e:84:00:45:f2:44:70:0d:0f:ef:b5:8a:1f:1f:3f:49:9e:
d1:d6:66:32:af:66:44:8f:8e:e2:94:7e:83:c5:bd:a1:ca:49:
ad:03:35:11:d8:bd:32:14:79:86:05:46:e8:8d:95:5a:a3:05:
69:98:5a:15:cb:6c:2e:3d:ea:73:36:98:2a:00:7c:99:5b:cf:
5f:b9:c6:cd:20:29:f3:a6:d9:55:3a:5a:9b:b7:c8:8e:a3:2c:
ff:c9:35:a2:a0:9e:07:8f:5c:5e:8a:44:06:44:54:19:5f:08:
aa:de:54:48:cd:2c:37:cf:d1:ac:34:16:71:3b:6f:bb:41:05:
2e:df:8a:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksrrk21Dnm3vryewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
NDNlMDE5MTctYjE2NC00NzY3LWI1ODgtZTEyMDAxOWY2ZDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimWEiK4++XvR4FVIymsyJdzhdgyFg0IeYaQv
bi0Lne/5YJaAFvvwmu9+s8g+en83yx4kvnxaYJyVrGtjMGD2z02wF1DUbng8MtYE
6IWH/WPmzVW0CpsW1WdUNjd/cSASzEYOBF2VNM8ytY7r8V1WW13p5nxGI6APtE51
+BW1uVMpNoKBbwwUIBbYL6YqbFZYRq/QBEgo0VDl2jrJSASYHn669/PaVU5oBHM+
ZSafYdDmtDRlzV12ARannpPRS10TuHEBvYV4UxTM4K5gVE85at7fzc4ZUFAF1mYQ
+C3RTA60Hx7Lm0gVnItInyd2UysE6AVVdopVHwSFJAXeuYrvJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/Icoe2a6EbcHY7yeOHF153YKgxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmU2YzZlOTItYzE4NS0z
N2NlLWJmNTItMTcxYWEwYWM2ZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYiH8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALnozDU9UVXzsC4qlxIhBH8KavtjPUolLp18FoelrmtpUc1B9albK+7q
9AbeKXAieLnV1eAbw+zG/fpaP68q9EGa8BO8akT/bV5yAf0I/UTjR/wOW8EtodeL
G62KyZmnadeNDg2ECV3OsliBrkCnsouUteTVsPkbdw79UoK6TnhuhABF8kRwDQ/v
tYofHz9JntHWZjKvZkSPjuKUfoPFvaHKSa0DNRHYvTIUeYYFRuiNlVqjBWmYWhXL
bC496nM2mCoAfJlbz1+5xs0gKfOm2VU6Wpu3yI6jLP/JNaKgngePXF6KRAZEVBlf
CKreVEjNLDfP0aw0FnE7b7tBBS7fioA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:18:22 2025 by rpki-client