Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa
File: 40e0b31e-01f2-317f-a8d0-77ce927a2303.roa (raw, json)
Hash identifier: 6+fXppkjj9puWiaEZPlhkOrzUMMgHa6djWq2hv5xDYs=
Subject key identifier: D8:F9:EA:79:4E:97:C9:61:76:8A:90:33:F1:A4:85:74:9E:89:DD:BA
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F432858490F7BF3A40A3DB6823CD24A80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa
Signing time: Mon 03 Mar 2025 02:00:39 +0000
ROA not before: Mon 03 Mar 2025 02:00:39 +0000
ROA not after: Sun 01 Jun 2025 01:00:39 +0000
asID: 7029
IP address blocks: 98.20.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:0f:7b:f3:a4:0a:3d:b6:82:3c:d2:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 3 02:00:39 2025 GMT
Not After : Jun 1 01:00:39 2025 GMT
Subject: CN=27bc819a-e9aa-4e75-8254-9e5835d30871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9a:3c:1e:e9:82:9e:38:0a:29:f1:60:ad:eb:
b2:af:e7:88:9e:7d:c6:ad:d6:d7:2a:0f:38:03:60:
3e:32:7a:be:d6:90:fb:b1:10:c5:8c:20:9d:b0:ad:
d4:3d:5f:54:60:f3:4c:7e:d9:50:c9:4a:8c:99:8b:
01:3c:af:de:f6:4a:b7:4c:ee:1f:fc:7e:28:0a:cd:
e2:74:ab:22:e4:6d:a3:3d:00:ec:5f:8e:64:1a:cf:
5c:f5:0b:eb:1c:2c:a1:32:9a:a6:08:15:40:89:29:
5e:83:d2:fb:4e:ca:43:81:26:9c:cd:f3:b1:89:2c:
b5:3d:c6:a5:27:51:79:d8:68:72:f7:b2:6c:f2:be:
5e:10:a9:58:9b:3f:4c:ed:b6:6c:dd:51:dc:20:45:
f2:5d:56:1d:ab:18:f4:c3:21:dd:de:48:38:eb:2c:
58:86:75:9c:9d:e9:89:80:dc:0f:46:bd:4a:94:2c:
c4:65:b3:ca:04:54:b1:7a:dc:e4:4a:92:8e:3e:da:
fb:0f:d3:36:cf:d4:da:d8:21:4e:1e:54:8b:4b:95:
68:53:74:0f:ad:d7:1a:2c:87:93:af:60:ca:35:33:
3e:ef:56:57:bb:23:7a:92:75:0b:24:63:84:ca:7d:
13:50:54:fa:a8:3f:50:00:77:17:22:98:fe:5b:e7:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F9:EA:79:4E:97:C9:61:76:8A:90:33:F1:A4:85:74:9E:89:DD:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.20.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:30:21:41:ae:08:24:2f:35:a2:2d:99:1e:a7:6a:42:ba:b3:
c5:9c:06:c7:ef:29:93:ed:16:a9:72:61:67:cf:81:f1:38:42:
ff:18:f1:09:cb:6f:93:14:c9:f5:db:fe:ed:88:2f:c0:bd:7d:
f0:b5:f6:78:42:38:79:d6:4f:9f:64:f9:e4:a2:f8:43:5b:9f:
a8:7f:cb:a7:d4:35:68:c3:3b:8d:9f:8e:58:c8:fc:3c:5b:96:
0f:4c:66:c5:e9:7d:5f:b3:17:b2:7d:8b:42:12:ff:43:04:9f:
3d:01:22:4f:14:7e:26:70:d3:f5:be:8a:48:0f:cc:3c:1a:9c:
a8:f5:ac:16:be:34:7e:b7:27:e7:04:99:14:ee:13:4d:7a:df:
84:e4:1b:3b:e0:d2:be:14:3e:96:bd:b3:b3:71:19:9a:f4:93:
25:81:ed:47:cc:80:d2:1b:8b:f8:46:84:ce:d3:f5:8d:03:2b:
da:1b:08:cd:cf:2d:ff:89:04:69:80:58:8f:91:e9:6b:d1:dd:
95:03:00:dd:6a:74:c5:3d:a9:be:43:3d:3d:be:9a:5f:9f:de:
60:15:c1:84:86:3c:80:aa:f8:3c:91:cb:3f:6a:68:ac:8b:2e:
db:79:2e:9e:64:ce:26:06:dc:66:ae:51:22:4c:7b:22:f1:89:
15:15:96:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/OkCj22gjzSSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk
MjdiYzgxOWEtZTlhYS00ZTc1LTgyNTQtOWU1ODM1ZDMwODcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpo8HumCnjgKKfFgreuyr+eInn3GrdbXKg84
A2A+Mnq+1pD7sRDFjCCdsK3UPV9UYPNMftlQyUqMmYsBPK/e9kq3TO4f/H4oCs3i
dKsi5G2jPQDsX45kGs9c9QvrHCyhMpqmCBVAiSleg9L7TspDgSaczfOxiSy1Pcal
J1F52Ghy97Js8r5eEKlYmz9M7bZs3VHcIEXyXVYdqxj0wyHd3kg46yxYhnWcnemJ
gNwPRr1KlCzEZbPKBFSxetzkSpKOPtr7D9M2z9Ta2CFOHlSLS5VoU3QPrdcaLIeT
r2DKNTM+71ZXuyN6knULJGOEyn0TUFT6qD9QAHcXIpj+W+fidwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNj56nlOl8lhdoqQM/GkhXSeid26MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDBlMGIzMWUtMDFmMi0z
MTdmLWE4ZDAtNzdjZTkyN2EyMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhT2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYwIUGuCCQvNaItmR6nakK6s8WcBsfvKZPtFqlyYWfPgfE4Qv8Y8QnL
b5MUyfXb/u2IL8C9ffC19nhCOHnWT59k+eSi+ENbn6h/y6fUNWjDO42fjljI/Dxb
lg9MZsXpfV+zF7J9i0IS/0MEnz0BIk8UfiZw0/W+ikgPzDwanKj1rBa+NH63J+cE
mRTuE01634TkGzvg0r4UPpa9s7NxGZr0kyWB7UfMgNIbi/hGhM7T9Y0DK9obCM3P
Lf+JBGmAWI+R6WvR3ZUDAN1qdMU9qb5DPT2+ml+f3mAVwYSGPICq+DyRyz9qaKyL
Ltt5Lp5kziYG3GauUSJMeyLxiRUVloo=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:45:54 2025 by rpki-client