Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d733d43d-cd3d-392d-b502-73f709f9a143.roa
File: d733d43d-cd3d-392d-b502-73f709f9a143.roa (raw, json)
Hash identifier: qdtFfmpXh4i3WifriXhgT+A/kPxvRem70LXXrvEfbeU=
Subject key identifier: 6E:23:A6:21:F3:40:FB:23:6B:43:97:7C:9D:B3:0D:71:A7:9B:C0:63
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F43285848F4F8157A76DDD1E7F069AE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d733d43d-cd3d-392d-b502-73f709f9a143.roa
Signing time: Fri 21 Feb 2025 14:00:50 +0000
ROA not before: Fri 21 Feb 2025 14:00:50 +0000
ROA not after: Thu 22 May 2025 13:00:50 +0000
asID: 33662
IP address blocks: 98.39.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f4:f8:15:7a:76:dd:d1:e7:f0:69:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 21 14:00:50 2025 GMT
Not After : May 22 13:00:50 2025 GMT
Subject: CN=2bb856d7-6e92-4536-9011-3bec42f5dfd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:01:02:54:3e:01:d9:41:30:00:6a:07:73:19:
fb:dc:c5:84:f2:01:fc:46:98:de:42:7d:c4:f9:7d:
86:25:fe:1a:e3:e3:dc:a4:a4:6f:44:55:fd:16:79:
75:68:da:7c:48:c3:cd:f0:14:ce:af:f0:fd:db:5d:
e5:6e:8d:ed:f8:2d:23:15:ae:fd:62:bf:c9:f4:8b:
67:f6:c1:34:d6:f2:ad:0e:6e:03:31:73:43:7b:c4:
3a:b1:ba:56:ee:f6:8f:b5:7d:7b:8d:f1:49:3c:a7:
ff:40:bb:9a:48:1e:6a:bd:12:50:aa:c4:fe:5f:83:
da:f3:52:dc:4b:85:6a:ff:70:ea:86:c6:08:21:40:
cc:14:cf:ad:8d:5e:45:1d:96:fc:cc:b9:39:8d:45:
26:11:31:b0:98:d4:77:8e:3c:7a:a7:e5:bb:f3:04:
39:f6:84:11:58:ac:e8:85:f2:10:62:bc:84:45:b9:
7c:eb:62:08:9f:9b:dd:5a:5d:09:be:7c:7d:46:81:
09:c2:73:dc:e4:bb:91:c9:dd:4e:fd:63:13:38:75:
eb:97:5c:4f:9f:b8:a0:0d:a0:5f:a6:a5:79:f3:42:
8e:b5:88:f9:77:33:94:04:41:58:d0:38:7b:1c:b2:
28:93:37:65:87:2e:ce:0c:d3:6b:5d:b6:fc:07:2f:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:23:A6:21:F3:40:FB:23:6B:43:97:7C:9D:B3:0D:71:A7:9B:C0:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d733d43d-cd3d-392d-b502-73f709f9a143.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.39.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:a0:a3:a1:01:ae:4b:0c:07:58:e3:d9:2f:ca:a9:80:8c:4b:
5e:b0:be:8a:f8:c3:6f:e5:20:5f:0e:b0:99:2d:a5:b6:7e:c2:
b8:ce:39:74:34:fe:4a:ca:ba:6c:fc:0f:58:b2:a0:b7:4e:ea:
dc:35:c4:d8:75:96:07:2b:39:be:74:fe:57:b2:51:5f:df:79:
b4:fd:3b:0f:61:90:be:cb:32:72:5e:63:08:9c:68:24:56:57:
13:24:2a:da:4c:ef:b4:c9:46:82:6b:ee:bb:db:59:28:b8:a2:
14:00:73:89:b1:cc:19:bc:fc:2b:e3:95:84:c5:a8:17:a5:b2:
74:d5:9e:65:22:b2:59:3f:34:9a:56:35:23:65:05:02:c8:64:
55:d1:c2:5c:64:ce:26:c2:72:12:8e:51:59:05:84:9c:93:6a:
be:a0:38:42:59:84:f4:cf:70:b9:c8:2f:69:5a:5b:16:a8:7f:
12:9e:29:74:5c:7e:1f:62:1c:ce:72:32:08:5d:4a:39:02:c8:
41:bc:88:78:bb:a4:af:a6:fc:82:2e:16:76:db:ed:c2:3b:61:
ef:25:7c:47:57:64:cc:ae:78:4c:ea:fd:ed:bf:d0:b0:0f:7e:
be:ba:cb:3c:8d:fa:cf:98:6b:38:4d:b8:78:63:e1:8e:95:1d:
3a:c1:99:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+BV6dt3R5/BprgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MmJiODU2ZDctNmU5Mi00NTM2LTkwMTEtM2JlYzQyZjVkZmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigECVD4B2UEwAGoHcxn73MWE8gH8RpjeQn3E
+X2GJf4a4+PcpKRvRFX9Fnl1aNp8SMPN8BTOr/D9213lbo3t+C0jFa79Yr/J9Itn
9sE01vKtDm4DMXNDe8Q6sbpW7vaPtX17jfFJPKf/QLuaSB5qvRJQqsT+X4Pa81Lc
S4Vq/3DqhsYIIUDMFM+tjV5FHZb8zLk5jUUmETGwmNR3jjx6p+W78wQ59oQRWKzo
hfIQYryERbl862IIn5vdWl0Jvnx9RoEJwnPc5LuRyd1O/WMTOHXrl1xPn7igDaBf
pqV580KOtYj5dzOUBEFY0Dh7HLIokzdlhy7ODNNrXbb8By8v5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG4jpiHzQPsja0OXfJ2zDXGnm8BjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDczM2Q0M2QtY2QzZC0z
OTJkLWI1MDItNzNmNzA5ZjlhMTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYidvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAego6EBrksMB1jj2S/KqYCMS16wvor4w2/lIF8OsJktpbZ+wrjOOXQ0
/krKumz8D1iyoLdO6tw1xNh1lgcrOb50/leyUV/febT9Ow9hkL7LMnJeYwicaCRW
VxMkKtpM77TJRoJr7rvbWSi4ohQAc4mxzBm8/CvjlYTFqBelsnTVnmUislk/NJpW
NSNlBQLIZFXRwlxkzibCchKOUVkFhJyTar6gOEJZhPTPcLnIL2laWxaofxKeKXRc
fh9iHM5yMghdSjkCyEG8iHi7pK+m/IIuFnbb7cI7Ye8lfEdXZMyueEzq/e2/0LAP
fr66yzyN+s+YazhNuHhj4Y6VHTrBmZo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:11:11 2025 by rpki-client