Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa
File: d98c5873-cc74-343d-8d38-917469d5fe81.roa (raw, json)
Hash identifier: Roa6yCvi1szb5KXldJ7EOKlqaHyiKjjex5vDYzxBJm4=
Subject key identifier: B8:AF:28:16:53:EB:55:1B:B9:A9:36:5A:F2:02:A9:92:24:4E:A8:5A
Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial: 010D0C9F43285849244E770BA6DCB9500148F500
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa
Signing time: Mon 10 Mar 2025 13:00:52 +0000
ROA not before: Mon 10 Mar 2025 13:00:52 +0000
ROA not after: Sun 08 Jun 2025 13:00:52 +0000
asID: 14061
IP address blocks: 165.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:24:4e:77:0b:a6:dc:b9:50:01:48:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Validity
Not Before: Mar 10 13:00:52 2025 GMT
Not After : Jun 8 13:00:52 2025 GMT
Subject: CN=691662f3-93d6-40bb-baa1-d42bb83087af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:ec:5d:a8:db:2b:87:99:5e:02:70:be:98:
9c:df:4b:9d:08:71:7c:6c:1d:7d:a5:f4:17:5b:32:
3a:61:ff:4a:40:ed:48:3c:db:23:35:5d:75:29:25:
d4:05:6a:81:9d:4f:d7:0e:a8:96:03:29:e1:72:16:
dd:7d:42:e6:48:45:f0:79:51:15:96:30:d3:fc:6e:
e6:cb:cf:56:78:b2:b3:a4:49:a5:cb:cb:fb:bf:91:
01:5b:4e:7c:c7:95:b6:18:29:4d:c7:a7:d7:83:bb:
c3:a7:8e:1b:4d:42:b8:17:33:d0:f7:17:35:b0:2f:
6e:e4:06:34:79:38:75:91:b2:9b:fb:e6:7f:7e:29:
ac:7d:af:f6:8b:9f:1e:54:c6:e6:7c:d7:f5:bf:f7:
44:f0:6e:54:eb:c7:2f:53:fa:e6:a3:c0:c3:b1:70:
d0:00:03:48:ba:af:e9:e0:84:7a:3c:12:b9:0f:51:
18:52:99:31:e2:0c:13:24:86:e7:b8:3a:aa:be:69:
50:aa:08:65:54:dd:7d:9c:b5:f1:48:b3:a6:9d:a0:
17:94:b3:2c:32:c9:0d:f5:ca:47:c2:21:82:fa:ae:
ba:5c:f4:c4:98:0c:16:18:b2:ea:e7:7a:7d:ab:b5:
d6:04:00:91:9d:c0:db:b2:11:f6:3a:ba:42:92:92:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AF:28:16:53:EB:55:1B:B9:A9:36:5A:F2:02:A9:92:24:4E:A8:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/d98c5873-cc74-343d-8d38-917469d5fe81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
X509v3 Authority Key Identifier:
keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
sbgp-ipAddrBlock: critical
IPv4:
165.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:a9:3f:c4:e4:3f:b1:95:d6:39:3d:f3:2a:93:5e:18:cc:1c:
f1:0e:37:d6:c2:42:b8:a7:38:6c:66:b2:55:7f:44:8b:80:e6:
1f:c9:96:5e:2d:2b:30:c0:6b:f7:40:17:d4:9a:64:53:ca:5f:
66:5b:e8:27:db:5c:d8:24:d1:fb:08:e2:ba:77:c5:14:c8:13:
f4:93:c4:31:ed:9b:8c:28:9a:69:ed:06:d8:72:a9:ab:0b:78:
43:b2:93:17:dc:95:1e:21:d0:f6:0e:1e:4f:a3:bc:c5:4f:3b:
77:d5:fd:9e:57:35:01:e6:d4:cd:c1:6c:16:17:94:9a:f2:7c:
90:12:da:14:0c:c3:9f:9c:7f:86:00:e9:84:b1:41:1f:71:7d:
c7:41:b3:bf:6a:2d:f4:ad:03:f6:31:da:25:3c:b2:4b:43:da:
46:bf:4e:a0:76:e0:79:77:e3:ca:59:9b:5e:b3:b5:40:f8:8f:
5f:61:87:47:0d:70:3a:72:f0:58:3b:06:21:e5:d4:f0:95:b1:
5a:7c:52:7b:dc:55:3a:c1:4d:a6:5b:59:ad:65:42:b4:a2:b3:
06:a9:3a:91:86:33:5d:d9:cb:b8:42:a8:4c:1d:c3:5f:c1:af:
6c:bc:b3:2b:51:f6:2d:34:4b:e1:cd:19:c3:ab:90:1e:39:ba:
50:5a:8f:62
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkkTncLpty5UAFI9QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
NjkxNjYyZjMtOTNkNi00MGJiLWJhYTEtZDQyYmI4MzA4N2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zfsXajbK4eZXgJwvpic30udCHF8bB19pfQX
WzI6Yf9KQO1IPNsjNV11KSXUBWqBnU/XDqiWAynhchbdfULmSEXweVEVljDT/G7m
y89WeLKzpEmly8v7v5EBW058x5W2GClNx6fXg7vDp44bTUK4FzPQ9xc1sC9u5AY0
eTh1kbKb++Z/fimsfa/2i58eVMbmfNf1v/dE8G5U68cvU/rmo8DDsXDQAANIuq/p
4IR6PBK5D1EYUpkx4gwTJIbnuDqqvmlQqghlVN19nLXxSLOmnaAXlLMsMskN9cpH
wiGC+q66XPTEmAwWGLLq53p9q7XWBACRncDbshH2OrpCkpJ63QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLivKBZT61Ubuak2WvICqZIkTqhaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZDk4YzU4NzMtY2M3NC0z
NDNkLThkMzgtOTE3NDY5ZDVmZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApRYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtKk/xOQ/sZXWOT3zKpNeGMwc8Q431sJCuKc4bGayVX9Ei4DmH8mWXi0r
MMBr90AX1JpkU8pfZlvoJ9tc2CTR+wjiunfFFMgT9JPEMe2bjCiaae0G2HKpqwt4
Q7KTF9yVHiHQ9g4eT6O8xU87d9X9nlc1AebUzcFsFheUmvJ8kBLaFAzDn5x/hgDp
hLFBH3F9x0Gzv2ot9K0D9jHaJTyyS0PaRr9OoHbgeXfjylmbXrO1QPiPX2GHRw1w
OnLwWDsGIeXU8JWxWnxSe9xVOsFNpltZrWVCtKKzBqk6kYYzXdnLuEKoTB3DX8Gv
bLyzK1H2LTRL4c0Zw6uQHjm6UFqPYg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:23:05 2025 by rpki-client