Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf630680-4b21-3a9d-868d-a8c72e35ba5c.roa
File: bf630680-4b21-3a9d-868d-a8c72e35ba5c.roa (raw, json)
Hash identifier: Uniz74rgaMjCrVWFseAUvUEtL1wX744/oDLqWE+VKcs=
Subject key identifier: 67:FE:D1:BC:6A:F8:F8:67:D0:0C:E0:A4:60:29:02:B3:E5:79:58:12
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858492CB1E26E64B8099744D26900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf630680-4b21-3a9d-868d-a8c72e35ba5c.roa
Signing time: Thu 13 Mar 2025 13:00:52 +0000
ROA not before: Thu 13 Mar 2025 13:00:52 +0000
ROA not after: Wed 11 Jun 2025 13:00:52 +0000
asID: 33651
IP address blocks: 98.33.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:2c:b1:e2:6e:64:b8:09:97:44:d2:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 13 13:00:52 2025 GMT
Not After : Jun 11 13:00:52 2025 GMT
Subject: CN=b10f33ad-a3f8-490d-ac9f-05d60ed0053f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:c6:6c:19:31:5c:dd:12:0c:de:a6:a0:28:
06:da:68:e0:ea:5f:bc:51:25:f6:dd:bd:db:cd:95:
b0:b8:6b:43:64:40:0c:fd:86:22:c5:5e:dc:8c:ea:
91:89:60:3a:5c:35:70:e2:a0:54:e5:6c:02:85:95:
c0:3f:e6:62:7a:e5:e6:69:fe:42:8a:49:95:d1:ce:
3d:c9:fe:48:a6:a9:44:de:e5:72:3f:35:d9:5f:a8:
6e:31:82:d7:b1:f4:8a:58:86:84:98:b7:84:08:f2:
96:5f:4e:d1:09:c5:fe:67:44:40:92:b2:ff:b6:65:
15:28:8f:b3:61:a7:25:95:ba:41:01:03:e9:ca:2f:
f8:27:1a:8b:4e:5c:9b:82:74:97:8b:44:19:96:fe:
44:33:9b:7f:03:a3:7c:0f:50:80:29:73:c1:82:84:
4a:b1:3b:bd:d4:62:e6:dd:c4:c9:92:76:82:fd:90:
11:32:3a:59:9d:1d:54:6c:ea:24:23:bc:fa:1b:e1:
8c:c0:3d:9b:81:b7:88:1a:df:3b:83:5f:fe:65:5d:
5b:d1:09:ca:1e:81:df:0c:d7:d8:39:25:89:9e:92:
6a:7f:7c:73:92:0e:9a:d4:50:b7:1e:2a:bd:cb:6c:
76:e6:d6:82:4f:f9:2f:0a:f5:21:ef:81:93:d8:e1:
c4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FE:D1:BC:6A:F8:F8:67:D0:0C:E0:A4:60:29:02:B3:E5:79:58:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf630680-4b21-3a9d-868d-a8c72e35ba5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.33.76.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:e1:38:b4:5e:49:80:32:e5:a4:26:6f:97:0b:ad:a4:2b:b8:
fc:0b:a0:ac:38:cd:af:cc:12:64:03:9d:a7:15:32:a3:33:d1:
62:80:60:c9:ba:2c:f5:f0:94:81:7f:62:b9:f8:1f:e8:77:da:
a2:d7:bd:15:0e:04:bd:cb:7b:42:19:41:e4:5d:b3:a3:66:2b:
09:27:93:86:d4:c4:a4:7d:01:01:9f:19:cc:95:bd:33:fe:9e:
66:7c:01:78:73:b1:41:f4:0b:c9:c0:4b:60:b7:ee:5b:53:d8:
46:d2:be:d9:54:68:38:ac:01:83:57:36:a4:be:a6:e5:f5:49:
d2:2b:55:f6:33:3c:bf:13:e7:8f:1c:0d:0b:3b:ea:4e:92:ce:
2d:de:24:b7:84:16:b9:29:6d:82:a2:85:21:98:ff:4a:84:41:
63:00:3b:da:cd:10:4e:61:b9:8d:b6:37:3c:b5:99:64:3d:dc:
d9:1d:2e:86:97:36:d8:15:09:5c:41:33:de:86:4a:d3:e5:ed:
22:63:66:52:1e:65:a6:e7:73:46:2d:e4:c2:f6:0d:b5:aa:bb:
8f:a1:31:15:37:d1:5b:70:8b:a1:34:f8:14:bf:64:2a:54:96:
4a:6e:e8:3b:09:29:cb:9e:0e:e6:0c:6c:e5:f1:cb:4d:bc:e2:
87:0b:7e:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksseJuZLgJl0TSaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YjEwZjMzYWQtYTNmOC00OTBkLWFjOWYtMDVkNjBlZDAwNTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02XGbBkxXN0SDN6moCgG2mjg6l+8USX23b3b
zZWwuGtDZEAM/YYixV7cjOqRiWA6XDVw4qBU5WwChZXAP+ZieuXmaf5CikmV0c49
yf5IpqlE3uVyPzXZX6huMYLXsfSKWIaEmLeECPKWX07RCcX+Z0RAkrL/tmUVKI+z
YacllbpBAQPpyi/4JxqLTlybgnSXi0QZlv5EM5t/A6N8D1CAKXPBgoRKsTu91GLm
3cTJknaC/ZARMjpZnR1UbOokI7z6G+GMwD2bgbeIGt87g1/+ZV1b0QnKHoHfDNfY
OSWJnpJqf3xzkg6a1FC3Hiq9y2x25taCT/kvCvUh74GT2OHEpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGf+0bxq+Phn0AzgpGApArPleVgSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY2MzA2ODAtNGIyMS0z
YTlkLTg2OGQtYThjNzJlMzViYTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiFMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAfhOLReSYAy5aQmb5cLraQruPwLoKw4za/MEmQDnacVMqMz0WKAYMm6
LPXwlIF/Yrn4H+h32qLXvRUOBL3Le0IZQeRds6NmKwknk4bUxKR9AQGfGcyVvTP+
nmZ8AXhzsUH0C8nAS2C37ltT2EbSvtlUaDisAYNXNqS+puX1SdIrVfYzPL8T548c
DQs76k6Szi3eJLeEFrkpbYKihSGY/0qEQWMAO9rNEE5huY22Nzy1mWQ93NkdLoaX
NtgVCVxBM96GStPl7SJjZlIeZabnc0Yt5ML2DbWqu4+hMRU30Vtwi6E0+BS/ZCpU
lkpu6DsJKcueDuYMbOXxy0284ocLfgo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:00:47 2025 by rpki-client