Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b3b03f47-6547-310e-ba40-c2f46479d934.roa
File: b3b03f47-6547-310e-ba40-c2f46479d934.roa (raw, json)
Hash identifier: JfEwJeSsC8Jp1e2iWWyQRKFXUfRyQBo5wunZ0dwTi9E=
Subject key identifier: BE:89:7E:D7:17:16:28:0B:DE:A4:31:72:9C:B5:93:B4:79:D4:42:F7
Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial: 010D0C9F4328584913AC1C22B6B2D9AE868F0B80
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b3b03f47-6547-310e-ba40-c2f46479d934.roa
Signing time: Tue 04 Mar 2025 14:00:52 +0000
ROA not before: Tue 04 Mar 2025 14:00:52 +0000
ROA not after: Mon 02 Jun 2025 13:00:52 +0000
asID: 32133
IP address blocks: 98.124.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:13:ac:1c:22:b6:b2:d9:ae:86:8f:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Validity
Not Before: Mar 4 14:00:52 2025 GMT
Not After : Jun 2 13:00:52 2025 GMT
Subject: CN=7a2f3050-a286-4571-b99a-f0306412269c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:57:53:74:04:cc:0d:8e:d1:20:a3:44:8b:
13:e7:38:77:e6:b2:11:27:5c:b6:71:67:d4:31:09:
c8:9b:c3:57:b4:d2:c7:af:ef:b8:b9:a9:27:8f:05:
44:60:bf:97:cd:20:1b:bb:1d:12:1a:89:04:0c:04:
a0:6e:7e:85:74:f2:00:f8:8b:a2:a7:aa:93:6a:ca:
e0:b6:90:b6:47:8e:f8:44:f4:47:6c:f7:2e:01:16:
32:c2:bd:5d:bf:6a:ef:c3:49:e8:30:40:d2:36:cf:
d4:a1:f3:b8:b0:7e:f0:7d:f5:b3:43:d3:80:e9:b2:
33:e8:71:09:6d:3a:23:a6:da:92:ff:b1:71:7d:ce:
37:2e:2d:3a:90:8e:63:ee:2d:05:cd:29:69:92:4e:
42:42:61:a4:7e:17:96:aa:06:27:48:0e:12:cc:8a:
37:ec:11:18:9a:fd:e9:20:07:4b:d8:ee:12:65:ab:
0f:e0:7d:24:72:7c:a7:75:e2:3f:37:4f:37:fc:33:
bb:3f:30:1e:c3:a1:9b:8c:43:9e:42:64:d1:ab:95:
83:79:11:39:9f:bf:26:98:b0:af:8c:9e:91:25:43:
fd:10:da:ac:28:d3:da:61:69:5e:b3:e3:52:af:a9:
ef:d8:97:e6:5e:3b:a1:b6:07:b2:b6:45:a8:7b:a7:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:89:7E:D7:17:16:28:0B:DE:A4:31:72:9C:B5:93:B4:79:D4:42:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/b3b03f47-6547-310e-ba40-c2f46479d934.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
X509v3 Authority Key Identifier:
keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
sbgp-ipAddrBlock: critical
IPv4:
98.124.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:b1:a7:e4:de:76:62:2c:73:d2:8f:52:75:99:30:34:b5:df:
9c:ff:07:01:6a:04:df:49:9c:f1:7e:fb:1a:9f:16:ea:b5:4b:
9b:31:85:0e:64:36:34:20:1d:2b:80:03:c7:5b:b1:16:5c:4c:
59:15:e0:9d:55:9c:c0:b6:4b:93:48:5f:5b:e2:a0:40:bc:a1:
2c:db:82:f6:45:cc:26:73:76:91:5b:6b:0e:cd:8a:3a:1c:28:
09:19:53:61:26:41:b9:ac:33:4e:00:e8:cf:0a:3d:88:a0:25:
19:87:d0:41:9c:66:2d:2d:3f:e1:88:c4:8b:19:34:d2:f4:eb:
5a:24:1c:f8:57:4a:9e:20:30:ac:1b:a4:c1:9c:f7:c9:16:0c:
46:b9:4e:cb:d4:73:84:b4:5c:e2:40:e8:a3:ca:a9:54:e8:ba:
0b:10:3b:19:24:71:fa:1a:db:f8:6b:ef:f4:81:53:ca:f6:bf:
7b:eb:49:0e:5f:61:64:cd:c5:cc:c9:12:f3:69:bc:71:5e:0a:
58:f5:e0:c2:fe:de:8d:01:f2:58:05:12:84:7c:5a:a8:e4:1c:
8e:c6:da:26:7e:e1:d8:8a:fb:78:f6:7a:b8:53:08:c1:1e:13:
7c:f7:9f:20:09:e6:88:28:20:04:b2:8c:da:2a:41:40:98:10:
45:18:64:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBwitrLZroaPC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk
N2EyZjMwNTAtYTI4Ni00NTcxLWI5OWEtZjAzMDY0MTIyNjljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfJXU3QEzA2O0SCjRIsT5zh35rIRJ1y2cWfU
MQnIm8NXtNLHr++4uaknjwVEYL+XzSAbux0SGokEDASgbn6FdPIA+Iuip6qTasrg
tpC2R474RPRHbPcuARYywr1dv2rvw0noMEDSNs/UofO4sH7wffWzQ9OA6bIz6HEJ
bTojptqS/7Fxfc43Li06kI5j7i0FzSlpkk5CQmGkfheWqgYnSA4SzIo37BEYmv3p
IAdL2O4SZasP4H0kcnyndeI/N083/DO7PzAew6GbjEOeQmTRq5WDeRE5n78mmLCv
jJ6RJUP9ENqsKNPaYWles+NSr6nv2JfmXjuhtgeytkWoe6eJywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL6JftcXFigL3qQxcpy1k7R51EL3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvYjNiMDNmNDctNjU0Ny0z
MTBlLWJhNDAtYzJmNDY0NzlkOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYnzgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB+xp+TedmIsc9KPUnWZMDS135z/BwFqBN9JnPF++xqfFuq1S5sxhQ5k
NjQgHSuAA8dbsRZcTFkV4J1VnMC2S5NIX1vioEC8oSzbgvZFzCZzdpFbaw7Nijoc
KAkZU2EmQbmsM04A6M8KPYigJRmH0EGcZi0tP+GIxIsZNNL061okHPhXSp4gMKwb
pMGc98kWDEa5TsvUc4S0XOJA6KPKqVTougsQOxkkcfoa2/hr7/SBU8r2v3vrSQ5f
YWTNxczJEvNpvHFeClj14ML+3o0B8lgFEoR8WqjkHI7G2iZ+4diK+3j2erhTCMEe
E3z3nyAJ5ogoIASyjNoqQUCYEEUYZGU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:02:49 2025 by rpki-client