Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/311b811f-27ce-3203-b746-d5f411436102.roa
File: 311b811f-27ce-3203-b746-d5f411436102.roa (raw, json)
Hash identifier: g40AIpMtWAuaLnZU/92g4pzAUfOgZsVV7evQE4RqCRw=
Subject key identifier: 37:93:46:C4:F1:E9:A9:53:AD:86:35:92:4B:F3:87:9B:B4:85:37:BE
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F432858487CEB79FE93005130CBF5F440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/311b811f-27ce-3203-b746-d5f411436102.roa
Signing time: Thu 09 Jan 2025 14:00:52 +0000
ROA not before: Thu 09 Jan 2025 14:00:52 +0000
ROA not after: Wed 09 Apr 2025 13:00:52 +0000
asID: 0
IP address blocks: 98.132.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:7c:eb:79:fe:93:00:51:30:cb:f5:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 9 14:00:52 2025 GMT
Not After : Apr 9 13:00:52 2025 GMT
Subject: CN=df630f3d-4c8a-4578-bc65-fe50021b053e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:f0:02:67:9f:34:87:33:2d:81:a8:5e:05:
80:df:6d:88:bc:14:e5:76:1b:18:8b:77:1d:26:fc:
a0:05:37:35:7f:3e:a8:dd:99:99:14:2f:54:4e:58:
2e:e3:ba:0f:c5:f3:6f:30:a3:89:b9:a4:a8:45:ea:
59:f4:8f:a1:6b:1a:86:0e:0b:fc:70:cb:0a:7d:3d:
2c:75:a3:5d:c7:38:c2:fd:0f:2b:a5:37:c1:60:84:
62:f8:72:86:5c:12:3c:12:cc:b5:ef:4a:ff:53:0c:
f1:47:df:2a:23:9a:5a:81:d1:1c:6f:79:05:12:0f:
e6:90:e3:aa:f4:73:c0:92:cf:b3:e2:3a:66:4a:08:
a7:54:44:b4:34:bb:e4:53:52:9e:0e:51:5a:23:7f:
21:b7:d2:97:a4:c5:30:10:c8:e0:21:5d:67:81:50:
34:42:ec:bb:e5:b8:1a:08:af:e1:f7:97:66:d4:68:
f2:ee:07:58:3a:55:11:19:1f:b5:15:c1:7c:9f:8e:
80:18:28:2c:fd:2a:74:79:06:5a:00:92:a4:5a:fd:
1b:8d:57:9c:31:5f:6d:da:bc:9d:dd:43:b2:2c:74:
d7:4d:16:74:f5:11:52:8f:aa:ca:53:07:a4:5c:e2:
a6:d9:70:b0:fd:52:ed:05:85:74:11:9a:a9:c6:7e:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:93:46:C4:F1:E9:A9:53:AD:86:35:92:4B:F3:87:9B:B4:85:37:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/311b811f-27ce-3203-b746-d5f411436102.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
98.132.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:20:c9:bf:ab:76:30:5c:aa:06:63:31:b0:72:ba:7a:c3:b1:
56:de:bf:69:b0:70:42:c4:ad:2d:72:de:c7:b0:75:5b:0d:2f:
a1:65:75:06:36:45:2d:cb:67:3c:07:15:74:30:f3:34:0d:48:
7d:bc:cc:52:7a:21:51:f7:14:ba:9a:7f:13:dd:f1:a4:36:fb:
fe:90:31:54:63:3a:a9:a6:f9:65:55:0f:dd:83:a3:35:6d:cc:
b6:e1:3d:46:ca:40:ba:15:ea:5e:ba:6d:8e:e1:1d:27:55:36:
6f:86:b0:94:3d:b0:28:6d:0b:e9:3a:e0:44:da:44:21:fc:3f:
9e:b6:f9:d9:1a:71:f7:c4:a6:0f:62:2d:01:da:08:94:b2:61:
f6:00:ac:7a:29:a3:dd:5a:e8:30:98:30:bc:e4:87:1a:ed:45:
e8:63:c7:07:73:51:01:b1:37:b3:5e:41:63:f9:e3:7b:95:5e:
54:53:5c:88:17:cd:a9:08:4d:d2:c7:82:21:c4:33:f6:08:1a:
2b:1c:1a:af:e5:fe:06:f6:d9:51:b9:e7:b3:1a:25:d2:7a:6f:
80:6f:83:2d:50:47:bf:b8:01:1e:7a:78:03:41:c6:df:5e:bf:
e3:f1:ea:7f:87:11:f3:a5:d6:8d:2a:5c:4b:ef:9a:00:e4:5a:
08:0f:11:5e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEh863n+kwBRMMv19EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGY2MzBmM2QtNGM4YS00NTc4LWJjNjUtZmU1MDAyMWIwNTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZfwAmefNIczLYGoXgWA322IvBTldhsYi3cd
JvygBTc1fz6o3ZmZFC9UTlgu47oPxfNvMKOJuaSoRepZ9I+haxqGDgv8cMsKfT0s
daNdxzjC/Q8rpTfBYIRi+HKGXBI8Esy170r/UwzxR98qI5pagdEcb3kFEg/mkOOq
9HPAks+z4jpmSginVES0NLvkU1KeDlFaI38ht9KXpMUwEMjgIV1ngVA0Quy75bga
CK/h95dm1Gjy7gdYOlURGR+1FcF8n46AGCgs/Sp0eQZaAJKkWv0bjVecMV9t2ryd
3UOyLHTXTRZ09RFSj6rKUwekXOKm2XCw/VLtBYV0EZqpxn4sqwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDeTRsTx6alTrYY1kkvzh5u0hTe+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzExYjgxMWYtMjdjZS0z
MjAzLWI3NDYtZDVmNDExNDM2MTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCYoQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABiDJv6t2MFyqBmMxsHK6esOxVt6/abBwQsStLXLex7B1Ww0voWV1BjZF
LctnPAcVdDDzNA1IfbzMUnohUfcUupp/E93xpDb7/pAxVGM6qab5ZVUP3YOjNW3M
tuE9RspAuhXqXrptjuEdJ1U2b4awlD2wKG0L6TrgRNpEIfw/nrb52Rpx98SmD2It
AdoIlLJh9gCseimj3VroMJgwvOSHGu1F6GPHB3NRAbE3s15BY/nje5VeVFNciBfN
qQhN0seCIcQz9ggaKxwar+X+BvbZUbnnsxol0npvgG+DLVBHv7gBHnp4A0HG316/
4/Hqf4cR86XWjSpcS++aAORaCA8RXg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:09:37 2025 by rpki-client