Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa
File: d98c5873-cc74-343d-8d38-917469d5fe81.roa (raw, json)
Hash identifier: TKx+bv7Esew3wi2Oa/1GnqJ54xeIHenacLd5CIDRHNo=
Subject key identifier: 5B:5B:31:76:39:1C:9E:30:A9:65:D6:24:85:68:2C:97:34:C0:D3:9B
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F43285848451580663A099E26247D3780
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa
Signing time: Fri 20 Dec 2024 14:00:51 +0000
ROA not before: Fri 20 Dec 2024 14:00:51 +0000
ROA not after: Thu 20 Mar 2025 13:00:51 +0000
asID: 14061
IP address blocks: 165.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:45:15:80:66:3a:09:9e:26:24:7d:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Dec 20 14:00:51 2024 GMT
Not After : Mar 20 13:00:51 2025 GMT
Subject: CN=f9605936-fc9a-4041-a4c1-0583e397682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:69:4d:80:c4:a2:e6:17:0b:f6:c2:1b:81:24:
69:86:90:90:83:cc:4d:a6:07:6c:32:27:2d:95:48:
74:96:09:b4:f3:29:52:d9:52:85:04:ef:2b:8e:20:
ef:10:e9:ed:fb:ac:da:6b:2b:45:d4:45:d5:62:a2:
24:d9:38:5d:1a:0a:46:1f:63:a5:75:bb:ba:05:b1:
c4:5f:9b:4e:7a:ca:a0:3e:d7:d9:ce:c4:e3:85:fc:
5c:a6:3f:0e:74:f4:d0:f7:ee:1a:d1:ff:08:0c:d5:
48:12:5b:33:9d:32:9c:de:f8:4b:d5:f4:11:24:5d:
47:b4:17:32:d9:3a:10:c6:d1:29:c8:35:b3:f1:c3:
73:df:14:69:44:12:dd:c6:23:a1:ab:6e:18:66:aa:
09:ca:2e:24:a6:b1:32:94:8b:04:a8:f0:ce:83:19:
bb:0d:d6:17:bd:9c:8e:9a:a8:62:cf:c2:59:27:1c:
b7:86:df:b9:b0:80:52:66:82:20:4f:59:c7:99:01:
fe:05:2d:4c:ec:02:ed:9b:a2:83:1d:9d:44:9c:0d:
9a:9e:75:49:62:dd:ba:df:9a:94:39:71:9e:0c:b6:
29:7f:66:1e:a0:e8:66:3d:2a:7d:29:de:fa:9b:f2:
b3:46:50:8f:54:a4:35:d5:4a:e0:a8:97:64:4c:32:
37:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:31:76:39:1C:9E:30:A9:65:D6:24:85:68:2C:97:34:C0:D3:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
165.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:75:26:5c:a7:e1:ec:01:f9:1e:8e:6e:b1:35:4f:41:aa:90:
82:21:64:dc:c7:a4:b4:f7:53:fc:b7:25:10:72:bf:0b:46:7a:
cf:53:6f:3e:a5:2b:54:e2:6f:52:38:79:67:b8:5c:5f:31:c0:
62:37:59:41:91:5f:04:f9:66:61:37:d0:74:b9:f0:97:96:27:
d0:8d:cb:e7:74:fb:55:c1:9a:b9:56:21:e3:38:cb:dd:1b:cc:
a3:e8:0a:dc:09:76:c7:2d:3d:30:96:3b:2e:9f:9a:9e:57:95:
12:43:32:51:bc:5f:e8:90:57:93:aa:a6:24:98:52:59:ab:02:
4e:fa:b9:e3:12:bd:d4:0f:2e:23:1f:54:c9:06:5e:63:31:15:
b0:19:70:eb:06:34:d6:9d:25:07:6a:d0:77:32:0d:f5:68:07:
6c:0f:97:8e:d5:77:8b:64:2f:a3:35:d3:41:1d:0a:a9:3e:c5:
c7:88:99:b8:89:58:a4:d0:21:47:78:97:b3:2d:ba:4e:aa:e1:
21:27:1c:e0:6b:8f:11:f8:28:05:10:89:97:79:99:b8:e2:c3:
66:18:77:4f:45:e9:8b:26:de:ee:01:a6:7b:65:f9:4d:0c:05:
dd:59:19:5b:89:cc:3d:0a:7e:7d:a8:5f:5a:88:a4:03:21:25:
b8:e5:24:bc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEhFFYBmOgmeJiR9N4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
Zjk2MDU5MzYtZmM5YS00MDQxLWE0YzEtMDU4M2UzOTc2ODJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmlNgMSi5hcL9sIbgSRphpCQg8xNpgdsMict
lUh0lgm08ylS2VKFBO8rjiDvEOnt+6zaaytF1EXVYqIk2ThdGgpGH2Oldbu6BbHE
X5tOesqgPtfZzsTjhfxcpj8OdPTQ9+4a0f8IDNVIElsznTKc3vhL1fQRJF1HtBcy
2ToQxtEpyDWz8cNz3xRpRBLdxiOhq24YZqoJyi4kprEylIsEqPDOgxm7DdYXvZyO
mqhiz8JZJxy3ht+5sIBSZoIgT1nHmQH+BS1M7ALtm6KDHZ1EnA2annVJYt2635qU
OXGeDLYpf2YeoOhmPSp9Kd76m/KzRlCPVKQ11UrgqJdkTDI3cQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFtbMXY5HJ4wqWXWJIVoLJc0wNObMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZDk4YzU4NzMtY2M3NC0z
NDNkLThkMzgtOTE3NDY5ZDVmZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApRYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOHUmXKfh7AH5Ho5usTVPQaqQgiFk3MektPdT/LclEHK/C0Z6z1NvPqUr
VOJvUjh5Z7hcXzHAYjdZQZFfBPlmYTfQdLnwl5Yn0I3L53T7VcGauVYh4zjL3RvM
o+gK3Al2xy09MJY7Lp+anleVEkMyUbxf6JBXk6qmJJhSWasCTvq54xK91A8uIx9U
yQZeYzEVsBlw6wY01p0lB2rQdzIN9WgHbA+XjtV3i2QvozXTQR0KqT7Fx4iZuIlY
pNAhR3iXsy26TqrhIScc4GuPEfgoBRCJl3mZuOLDZhh3T0Xpiybe7gGme2X5TQwF
3VkZW4nMPQp+fahfWoikAyEluOUkvA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:27:40 2025 by rpki-client