Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e9e39f37-1286-3597-960c-6c5f44ec4d30.roa
File: e9e39f37-1286-3597-960c-6c5f44ec4d30.roa (raw, json)
Hash identifier: W5N5zEnlcLpZanx5t5LWsZIucpHFiLTU4zURgzB5eTo=
Subject key identifier: 92:F4:48:DA:8C:B4:E5:B9:A9:36:56:04:28:18:6A:B2:D3:C7:A4:81
Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Certificate serial: 010D0C9F4328584917DC291C3D303F651101D000
Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e9e39f37-1286-3597-960c-6c5f44ec4d30.roa
Signing time: Thu 06 Mar 2025 02:00:39 +0000
ROA not before: Thu 06 Mar 2025 02:00:39 +0000
ROA not after: Wed 04 Jun 2025 01:00:39 +0000
asID: 32133
IP address blocks: 98.124.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:17:dc:29:1c:3d:30:3f:65:11:01:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c
Validity
Not Before: Mar 6 02:00:39 2025 GMT
Not After : Jun 4 01:00:39 2025 GMT
Subject: CN=49451de6-0970-49a4-b99d-bada51f48aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:fc:5d:d2:23:b3:a3:c6:ab:c3:45:4a:bc:
04:cd:1e:e5:a4:b8:47:e4:5b:91:c9:41:31:9f:4c:
e6:34:42:3a:05:e3:a5:e4:d4:8a:6e:52:4e:bd:f0:
e8:b8:2e:be:e8:e7:2c:08:b4:52:cc:3c:b5:b2:6f:
dd:69:fe:8f:17:5a:33:cc:dc:9f:e3:87:3d:d1:a4:
79:fd:df:52:80:0a:d8:f7:90:62:c8:26:c3:14:4b:
0f:10:24:76:f1:09:ef:88:56:dc:48:7a:dd:19:f7:
f1:24:9f:88:53:87:57:b6:25:7a:e4:11:55:2d:0a:
91:d1:47:0b:de:b3:27:48:02:bc:6f:85:16:a3:08:
45:96:fc:0e:3d:18:dd:83:4c:4d:c1:d5:4b:8b:f0:
33:fd:91:cf:ae:57:c9:c7:b0:5b:e2:39:8e:5f:bb:
98:60:66:80:47:2c:03:1b:19:3b:b4:d7:c0:11:a6:
40:dc:fe:2b:e6:1d:aa:52:a9:64:6e:b1:1c:26:fc:
e6:13:06:43:26:6c:6f:c2:b6:13:48:0c:38:78:40:
b1:0a:e5:6d:06:30:92:d7:b8:d4:a1:93:4e:fa:d3:
1d:c6:74:80:a8:4c:48:2e:92:02:05:70:57:40:95:
f8:d9:e1:1f:3c:d7:72:65:a9:91:a0:f3:7c:21:2f:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F4:48:DA:8C:B4:E5:B9:A9:36:56:04:28:18:6A:B2:D3:C7:A4:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e9e39f37-1286-3597-960c-6c5f44ec4d30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl
X509v3 Authority Key Identifier:
keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer
sbgp-ipAddrBlock: critical
IPv4:
98.124.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:62:88:22:80:b8:db:f4:5f:69:f3:5b:53:20:60:bc:ee:21:
ce:0c:7a:c2:17:14:cf:75:7f:6f:f3:2c:c6:42:e1:72:3a:42:
3e:48:9f:2e:ac:09:47:58:31:59:09:95:7d:97:a8:8b:6a:1c:
2a:af:85:09:d0:a1:36:85:6f:4f:ca:ac:1b:6b:6b:0f:9d:81:
c5:d8:c0:9d:3f:44:b4:f4:d9:25:7d:0d:a8:6b:90:1c:64:07:
92:4b:08:51:71:73:2e:cd:eb:4e:5e:da:b9:71:5b:53:6e:cf:
bb:8b:10:9b:8c:35:e0:09:f0:c2:de:30:9c:91:4a:dc:a6:fe:
bc:4d:5c:99:e6:4c:07:82:7e:77:1d:42:98:05:88:00:73:36:
8d:7d:11:e5:8a:e6:d9:5c:96:8f:35:e7:96:f1:78:f0:7e:be:
4e:8d:f7:3c:43:fd:fa:da:a0:85:8d:af:38:81:05:8c:4a:25:
08:66:b1:9a:5e:af:7d:cd:f1:a5:32:0c:ae:80:23:45:f6:27:
17:ef:ff:8f:50:58:42:59:08:2d:ea:82:0f:03:06:69:dd:6b:
1f:21:93:72:b2:d6:6b:f9:cc:fd:a1:cc:e4:a4:d6:1d:42:90:
0a:e1:38:3b:7e:ca:eb:69:b1:79:c0:cb:6f:f0:79:f7:1d:69:
4b:04:c8:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CkcPTA/ZREB0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0
NjljMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDk0NTFkZTYtMDk3MC00OWE0LWI5OWQtYmFkYTUxZjQ4YWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPj8XdIjs6PGq8NFSrwEzR7lpLhH5FuRyUEx
n0zmNEI6BeOl5NSKblJOvfDouC6+6OcsCLRSzDy1sm/daf6PF1ozzNyf44c90aR5
/d9SgArY95BiyCbDFEsPECR28QnviFbcSHrdGffxJJ+IU4dXtiV65BFVLQqR0UcL
3rMnSAK8b4UWowhFlvwOPRjdg0xNwdVLi/Az/ZHPrlfJx7Bb4jmOX7uYYGaARywD
Gxk7tNfAEaZA3P4r5h2qUqlkbrEcJvzmEwZDJmxvwrYTSAw4eECxCuVtBjCS17jU
oZNO+tMdxnSAqExILpICBXBXQJX42eEfPNdyZamRoPN8IS8TqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJL0SNqMtOW5qTZWBCgYarLTx6SBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj
YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvZTllMzlmMzctMTI4Ni0z
NTk3LTk2MGMtNmM1ZjQ0ZWM0ZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh
MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw
NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4
MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYnzoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKFiiCKAuNv0X2nzW1MgYLzuIc4MesIXFM91f2/zLMZC4XI6Qj5Iny6s
CUdYMVkJlX2XqItqHCqvhQnQoTaFb0/KrBtraw+dgcXYwJ0/RLT02SV9DahrkBxk
B5JLCFFxcy7N605e2rlxW1Nuz7uLEJuMNeAJ8MLeMJyRStym/rxNXJnmTAeCfncd
QpgFiABzNo19EeWK5tlclo8155bxePB+vk6N9zxD/fraoIWNrziBBYxKJQhmsZpe
r33N8aUyDK6AI0X2Jxfv/49QWEJZCC3qgg8DBmndax8hk3Ky1mv5zP2hzOSk1h1C
kArhODt+yutpsXnAy2/wefcdaUsEyAU=
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:37 2025 by rpki-client