Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3c705883-8d29-3c84-b799-060e3ec220bc.roa
File: 3c705883-8d29-3c84-b799-060e3ec220bc.roa (raw, json)
Hash identifier: pDUknOVOI/+C3Ck6TCJW070/J7apqXqDU2+YdVKKr8c=
Subject key identifier: C0:84:B5:1E:CB:84:7D:97:5A:CE:1B:DE:61:60:48:5D:5C:AA:E6:16
Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial: 010D0C9F43285848E2D1CEEE3B33668BBE6E2DC0
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3c705883-8d29-3c84-b799-060e3ec220bc.roa
Signing time: Sat 15 Feb 2025 02:00:39 +0000
ROA not before: Sat 15 Feb 2025 02:00:39 +0000
ROA not after: Fri 16 May 2025 01:00:39 +0000
asID: 20001
IP address blocks: 98.157.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e2:d1:ce:ee:3b:33:66:8b:be:6e:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Validity
Not Before: Feb 15 02:00:39 2025 GMT
Not After : May 16 01:00:39 2025 GMT
Subject: CN=53991a35-f653-477b-b057-70c3c9a388b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:85:94:87:e7:5f:11:07:b2:b4:ed:fe:b7:
c7:5a:bd:5c:ef:50:61:97:8c:8e:0f:63:e0:9f:6d:
3f:52:fb:e2:b4:e3:4b:41:45:2c:b7:c6:9c:96:70:
4a:14:32:47:1f:70:e6:c0:95:82:76:2a:8a:5a:1b:
60:4c:25:cb:1b:41:f5:7f:70:14:44:0d:62:ac:42:
cd:19:10:ea:1f:45:d3:e1:92:94:ed:06:87:b8:92:
74:bf:5a:3a:2d:29:a8:47:38:51:af:1e:46:01:09:
09:83:16:d4:a7:cb:2d:5e:22:99:98:fd:5b:17:54:
c5:db:a9:bc:f2:d1:d1:d3:29:92:2c:41:fc:d2:d4:
72:fa:96:34:6b:64:cf:c0:36:94:29:c6:cd:b3:e5:
c4:ba:4c:80:18:07:2e:8a:a0:4e:49:ac:36:7f:8d:
34:cd:a0:b4:ad:d1:30:d2:86:4a:73:3f:a7:7f:fe:
f7:0c:d5:e2:7b:a9:ee:d1:ee:8d:05:7c:fa:3b:62:
ef:f0:4d:f4:1e:76:34:d5:a7:1d:7e:57:f2:e2:ec:
ad:2d:11:4c:d7:ba:32:cf:bf:47:b4:dd:2a:4f:4c:
37:dd:d4:ad:76:1a:af:b7:ac:2b:a8:e2:c8:5b:f2:
46:35:b2:4f:29:22:e7:2d:06:73:5b:f4:f2:af:da:
77:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:84:B5:1E:CB:84:7D:97:5A:CE:1B:DE:61:60:48:5D:5C:AA:E6:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/3c705883-8d29-3c84-b799-060e3ec220bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
X509v3 Authority Key Identifier:
keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
sbgp-ipAddrBlock: critical
IPv4:
98.157.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:16:4b:d7:5c:a9:3b:0f:f1:87:af:05:84:ca:47:6e:6f:3f:
52:0e:70:69:cf:b6:5a:24:3a:9b:9e:7b:45:9b:0a:06:d5:13:
c8:64:8a:14:17:c6:4b:de:86:5a:cf:33:fc:53:16:51:e1:58:
85:b4:66:9d:6a:8e:e1:5d:1f:69:9d:5f:89:43:04:e2:7b:ce:
44:c7:a4:ca:5f:fd:a3:be:8c:95:2a:52:2f:65:9a:3b:fe:14:
1c:5c:5d:cc:48:9d:84:4c:82:46:a3:e3:dd:93:96:a4:f2:65:
d0:9f:78:80:99:f0:96:1b:cf:73:bf:fb:db:d5:61:20:7d:2c:
90:a7:50:aa:08:cc:2c:61:89:7c:5b:c0:f7:6b:39:57:ff:81:
31:0f:d2:81:ab:f1:04:6c:c6:8c:b6:48:f6:27:7c:56:d7:6e:
60:29:fd:44:9a:8a:83:a0:e1:7a:ee:16:47:d6:8a:cd:14:3e:
dd:10:d1:d1:8a:7a:ff:27:e4:da:f8:97:bc:14:28:ce:14:a9:
f1:67:13:42:bb:8f:10:b8:d7:48:36:45:33:9b:ce:a7:a7:91:
c1:e5:33:c5:4e:88:9c:91:3a:19:a5:f5:55:24:3e:54:52:4e:
fa:a2:1d:1d:86:1b:42:54:bd:52:9c:c0:06:68:84:c5:52:dd:
9e:fd:02:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0c7uOzNmi75uLcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
NTM5OTFhMzUtZjY1My00NzdiLWIwNTctNzBjM2M5YTM4OGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthyFlIfnXxEHsrTt/rfHWr1c71Bhl4yOD2Pg
n20/UvvitONLQUUst8aclnBKFDJHH3DmwJWCdiqKWhtgTCXLG0H1f3AURA1irELN
GRDqH0XT4ZKU7QaHuJJ0v1o6LSmoRzhRrx5GAQkJgxbUp8stXiKZmP1bF1TF26m8
8tHR0ymSLEH80tRy+pY0a2TPwDaUKcbNs+XEukyAGAcuiqBOSaw2f400zaC0rdEw
0oZKcz+nf/73DNXie6nu0e6NBXz6O2Lv8E30HnY01acdflfy4uytLRFM17oyz79H
tN0qT0w33dStdhqvt6wrqOLIW/JGNbJPKSLnLQZzW/Tyr9p39QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCEtR7LhH2XWs4b3mFgSF1cquYWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvM2M3MDU4ODMtOGQyOS0z
Yzg0LWI3OTktMDYwZTNlYzIyMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYp2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAIWS9dcqTsP8YevBYTKR25vP1IOcGnPtlokOpuee0WbCgbVE8hkihQX
xkvehlrPM/xTFlHhWIW0Zp1qjuFdH2mdX4lDBOJ7zkTHpMpf/aO+jJUqUi9lmjv+
FBxcXcxInYRMgkaj492TlqTyZdCfeICZ8JYbz3O/+9vVYSB9LJCnUKoIzCxhiXxb
wPdrOVf/gTEP0oGr8QRsxoy2SPYnfFbXbmAp/USaioOg4XruFkfWis0UPt0Q0dGK
ev8n5Nr4l7wUKM4UqfFnE0K7jxC410g2RTObzqenkcHlM8VOiJyROhml9VUkPlRS
TvqiHR2GG0JUvVKcwAZohMVS3Z79Aqo=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:58:58 2025 by rpki-client on console.sobornost.net