Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/22742b0c-5828-306a-9051-6b3fe5efb583.roa
File: 22742b0c-5828-306a-9051-6b3fe5efb583.roa (raw, json)
Hash identifier: fxJlTv5uYgOkDFHfpT1ftTFoZDGvWIPuQRlzsEXfWJ8=
Subject key identifier: 18:08:A9:B1:DF:2C:CF:DC:E9:DB:D5:86:6D:7A:89:88:3A:26:C9:A1
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F432858487FB5D61D588732C092C4C880
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/22742b0c-5828-306a-9051-6b3fe5efb583.roa
Signing time: Fri 10 Jan 2025 14:00:51 +0000
ROA not before: Fri 10 Jan 2025 14:00:51 +0000
ROA not after: Thu 10 Apr 2025 13:00:51 +0000
asID: 21859
IP address blocks: 98.98.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7f:b5:d6:1d:58:87:32:c0:92:c4:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jan 10 14:00:51 2025 GMT
Not After : Apr 10 13:00:51 2025 GMT
Subject: CN=62d09050-36d7-4ad3-8b81-e9ec5beed095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:6b:c4:03:58:db:07:9d:8e:a9:ce:24:43:
26:6b:4d:18:56:f5:21:6f:4d:2b:f9:b8:4b:f2:da:
e0:9f:92:39:d9:a3:a0:a3:22:4e:3a:e6:52:ef:58:
d6:ca:62:4f:11:8a:bc:12:b8:0f:27:a9:bd:7c:29:
77:e6:4d:df:9e:e7:60:b7:6b:f7:d8:83:7a:2f:b4:
6f:17:b3:fe:2c:00:8c:77:52:8c:6e:44:40:83:56:
1d:9b:64:f1:96:fd:55:14:ca:45:80:77:53:52:f0:
86:c5:f6:0e:9e:f7:66:85:7e:35:3e:7c:ba:72:77:
c5:41:33:72:37:a1:04:08:40:13:ca:55:59:f5:46:
24:71:1d:a3:48:ba:96:e5:04:37:33:4c:7b:ac:b1:
3a:88:fb:16:3f:03:64:8a:2f:5b:d1:6d:2f:31:88:
89:fe:4a:25:c0:04:73:13:40:c2:c1:29:54:25:9d:
f7:9a:32:0a:2e:9a:01:6b:bb:54:2d:f3:db:75:66:
0c:d5:32:a8:1f:7e:c4:ad:8a:ea:3b:39:e8:72:8e:
4b:62:8a:2d:09:8b:32:3b:91:e9:11:17:2c:cf:e4:
91:7e:93:27:7d:05:ea:9f:83:ff:96:05:66:30:03:
1e:ac:61:0a:89:0c:c5:13:81:a6:31:bd:9a:41:64:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:A9:B1:DF:2C:CF:DC:E9:DB:D5:86:6D:7A:89:88:3A:26:C9:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/22742b0c-5828-306a-9051-6b3fe5efb583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
98.98.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:80:41:22:34:d8:1b:19:40:1c:57:f6:94:a9:65:c8:2e:d0:
44:86:d2:95:98:e3:e5:36:47:86:2b:85:97:6f:b6:01:5d:64:
0f:07:99:5f:07:0a:1a:00:05:2d:e1:14:4f:79:3f:26:ba:f4:
e6:f6:2d:01:b6:21:d2:31:6c:8d:b0:6c:fb:ab:e7:e2:0c:ed:
11:86:c7:97:17:a3:3b:97:f1:d7:5d:7f:1b:92:3e:b5:f4:25:
ea:0b:8d:46:5e:f6:60:e9:5a:4f:40:84:15:a3:21:71:2e:ae:
17:51:8a:9d:74:e3:13:55:3c:f2:b4:f0:de:cd:3e:07:fc:1c:
7c:d9:2c:a1:73:63:5c:aa:23:7f:f0:06:af:10:2e:01:8d:ef:
a4:aa:65:e1:67:87:dd:af:c2:1c:39:64:a5:f2:bd:20:60:87:
bc:f6:d3:7e:f1:32:11:68:92:b3:0f:42:57:f0:66:0c:16:e1:
c0:1e:c9:63:dd:df:59:ca:c8:08:2f:ba:44:72:e0:14:38:d2:
4c:b3:05:99:9a:9d:9a:a4:0b:1c:8d:ec:d2:24:d9:75:5c:56:
22:28:bd:02:c9:b9:1d:59:e2:ce:ba:83:35:ad:20:d8:0f:0d:
2f:ec:ce:1f:c9:49:70:11:b0:a1:3e:0e:38:ca:e7:d7:29:80:
86:59:d3:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh/tdYdWIcywJLEyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDExMDE0MDA1MVoXDTI1MDQxMDEzMDA1MVowLzEtMCsGA1UEAxMk
NjJkMDkwNTAtMzZkNy00YWQzLThiODEtZTllYzViZWVkMDk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9BrxANY2wedjqnOJEMma00YVvUhb00r+bhL
8trgn5I52aOgoyJOOuZS71jWymJPEYq8ErgPJ6m9fCl35k3fnudgt2v32IN6L7Rv
F7P+LACMd1KMbkRAg1Ydm2Txlv1VFMpFgHdTUvCGxfYOnvdmhX41Pny6cnfFQTNy
N6EECEATylVZ9UYkcR2jSLqW5QQ3M0x7rLE6iPsWPwNkii9b0W0vMYiJ/kolwARz
E0DCwSlUJZ33mjIKLpoBa7tULfPbdWYM1TKoH37ErYrqOznoco5LYootCYsyO5Hp
ERcsz+SRfpMnfQXqn4P/lgVmMAMerGEKiQzFE4GmMb2aQWQRWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBgIqbHfLM/c6dvVhm16iYg6JsmhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMjI3NDJiMGMtNTgyOC0z
MDZhLTkwNTEtNmIzZmU1ZWZiNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmIUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2AQSI02BsZQBxX9pSpZcgu0ESG0pWY4+U2R4YrhZdvtgFdZA8HmV8H
ChoABS3hFE95Pya69Ob2LQG2IdIxbI2wbPur5+IM7RGGx5cXozuX8dddfxuSPrX0
JeoLjUZe9mDpWk9AhBWjIXEurhdRip104xNVPPK08N7NPgf8HHzZLKFzY1yqI3/w
Bq8QLgGN76SqZeFnh92vwhw5ZKXyvSBgh7z2037xMhFokrMPQlfwZgwW4cAeyWPd
31nKyAgvukRy4BQ40kyzBZmanZqkCxyN7NIk2XVcViIovQLJuR1Z4s66gzWtINgP
DS/szh/JSXARsKE+DjjK59cpgIZZ014=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:51 2025 by rpki-client