Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecb2f7d9-c0d3-3018-8d47-ab878572f873.roa
File: ecb2f7d9-c0d3-3018-8d47-ab878572f873.roa (raw, json)
Hash identifier: xXy7HKP/g16/oG2pHjBoBsOZ8F6r2guBdi4Y+b+MHSw=
Subject key identifier: 11:EB:5D:A4:6C:87:F4:D6:2C:80:73:FC:D9:95:71:BE:8D:9A:45:EF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F432858489E6E1762BE87B6BE65BC36C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecb2f7d9-c0d3-3018-8d47-ab878572f873.roa
Signing time: Tue 21 Jan 2025 14:00:53 +0000
ROA not before: Tue 21 Jan 2025 14:00:53 +0000
ROA not after: Mon 21 Apr 2025 13:00:53 +0000
asID: 33657
IP address blocks: 98.233.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:9e:6e:17:62:be:87:b6:be:65:bc:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 21 14:00:53 2025 GMT
Not After : Apr 21 13:00:53 2025 GMT
Subject: CN=c5f1dfd3-39b4-4a0e-84bb-1cc46a0e3ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c5:31:c4:fa:bb:39:1c:12:c7:7a:78:eb:f0:
a1:74:c9:c8:c1:03:10:cd:01:74:66:66:f9:6c:ae:
41:72:60:41:28:d4:d5:8b:df:82:72:6b:c3:06:15:
98:06:c3:03:18:4e:64:9a:d4:5f:dc:16:c2:3d:65:
c7:15:df:56:0e:26:43:ef:30:95:c9:36:6d:35:32:
37:f3:0a:11:48:ad:b5:aa:2a:e1:7e:c0:0f:06:99:
64:ea:e5:4a:97:3b:86:3e:45:cc:4d:80:ca:6c:24:
5c:b9:58:4e:3d:9a:3a:24:88:aa:1c:2f:48:3d:eb:
b8:16:d3:fa:ab:81:fb:a8:e2:32:b5:98:98:a3:14:
fc:53:95:6a:a3:78:52:e0:bb:77:a1:f1:82:62:82:
b4:64:36:7e:36:37:a9:fc:c0:f9:d5:c2:25:cc:59:
a6:4b:e4:bd:3c:82:01:e8:53:a3:a2:2c:99:fa:90:
50:46:88:2d:24:39:e2:4b:b2:57:18:6a:22:18:d3:
04:d3:9d:ec:1a:60:20:71:44:71:a3:24:f3:00:6c:
12:2a:35:ef:93:cc:f3:26:86:ff:1a:8f:8d:c7:5f:
11:b7:c2:24:97:e9:29:6a:8e:47:bb:fa:c0:d4:37:
00:25:42:12:95:ae:31:8d:04:6e:7f:5a:81:0f:4d:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EB:5D:A4:6C:87:F4:D6:2C:80:73:FC:D9:95:71:BE:8D:9A:45:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ecb2f7d9-c0d3-3018-8d47-ab878572f873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
98.233.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:6b:d1:79:d5:1c:68:e5:7c:59:3b:71:f1:c0:0e:4c:5f:b1:
32:0d:bc:41:1c:49:a2:69:14:42:27:14:ad:e0:a9:4b:fa:0c:
98:6c:07:64:eb:e9:fd:1c:aa:4b:a3:59:19:f7:47:2a:f9:f0:
1f:2d:a6:3a:cb:d3:3c:0f:55:b8:4a:6a:d7:e0:5d:03:be:93:
7c:76:7f:b5:0f:76:14:ea:f7:12:b5:c5:83:40:4a:fb:ea:39:
bb:e8:61:4a:f4:35:10:08:24:32:59:28:3d:59:c0:82:f4:d2:
bd:99:e3:14:fb:4e:e5:b4:7b:40:45:7e:46:bb:de:f6:f0:10:
4e:39:97:3e:c5:eb:44:7c:6f:d8:df:48:50:fe:05:47:4c:06:
f7:62:9b:6e:57:32:28:e7:ec:18:99:a3:ad:57:eb:70:f2:60:
3f:37:3a:a3:d0:92:b5:b6:19:6c:85:03:08:a6:04:6e:83:52:
8b:93:eb:23:d8:33:02:ec:26:2f:75:ce:1f:07:36:b2:a7:04:
f8:ad:25:df:15:d5:c7:5c:2a:f3:f1:f8:f2:33:ea:20:0c:ca:
5e:4b:d4:4e:52:64:e3:8f:75:6f:73:1f:d6:72:ba:ea:c3:e8:
10:05:f5:5d:41:8b:d7:9a:0d:b3:c7:44:50:94:5f:d0:d1:a3:
0c:fc:cb:fe
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEiebhdivoe2vmW8NsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
YzVmMWRmZDMtMzliNC00YTBlLTg0YmItMWNjNDZhMGUzZWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMUxxPq7ORwSx3p46/ChdMnIwQMQzQF0Zmb5
bK5BcmBBKNTVi9+CcmvDBhWYBsMDGE5kmtRf3BbCPWXHFd9WDiZD7zCVyTZtNTI3
8woRSK21qirhfsAPBplk6uVKlzuGPkXMTYDKbCRcuVhOPZo6JIiqHC9IPeu4FtP6
q4H7qOIytZiYoxT8U5Vqo3hS4Lt3ofGCYoK0ZDZ+Njep/MD51cIlzFmmS+S9PIIB
6FOjoiyZ+pBQRogtJDniS7JXGGoiGNME053sGmAgcURxoyTzAGwSKjXvk8zzJob/
Go+Nx18Rt8Ikl+kpao5Hu/rA1DcAJUISla4xjQRuf1qBD00GhQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBHrXaRsh/TWLIBz/NmVcb6NmkXvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWNiMmY3ZDktYzBkMy0z
MDE4LThkNDctYWI4Nzg1NzJmODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYukwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiGvRedUcaOV8WTtx8cAOTF+xMg28QRxJomkUQicUreCpS/oMmGwHZOvp
/RyqS6NZGfdHKvnwHy2mOsvTPA9VuEpq1+BdA76TfHZ/tQ92FOr3ErXFg0BK++o5
u+hhSvQ1EAgkMlkoPVnAgvTSvZnjFPtO5bR7QEV+Rrve9vAQTjmXPsXrRHxv2N9I
UP4FR0wG92KbblcyKOfsGJmjrVfrcPJgPzc6o9CStbYZbIUDCKYEboNSi5PrI9gz
AuwmL3XOHwc2sqcE+K0l3xXVx1wq8/H48jPqIAzKXkvUTlJk4491b3Mf1nK66sPo
EAX1XUGL15oNs8dEUJRf0NGjDPzL/g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:15:31 2025 by rpki-client