Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b98fb490-fe08-3bef-aabf-ce48c2ffc56c.roa
File: b98fb490-fe08-3bef-aabf-ce48c2ffc56c.roa (raw, json)
Hash identifier: 4xvMiJU1XYXF3x8U8mzKsiVfQJcXgTMBtXvRgNc6rgs=
Subject key identifier: 0D:AC:13:15:FB:31:DE:8C:E3:85:1D:24:7E:37:18:95:73:A6:F7:42
Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial: 010D0C9F432858491ED6DFC5A8CD0A495AB24300
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b98fb490-fe08-3bef-aabf-ce48c2ffc56c.roa
Signing time: Sat 08 Mar 2025 14:00:52 +0000
ROA not before: Sat 08 Mar 2025 14:00:52 +0000
ROA not after: Fri 06 Jun 2025 13:00:52 +0000
asID: 14593
IP address blocks: 129.222.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:1e:d6:df:c5:a8:cd:0a:49:5a:b2:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
Validity
Not Before: Mar 8 14:00:52 2025 GMT
Not After : Jun 6 13:00:52 2025 GMT
Subject: CN=eb63ca33-47a7-460b-8663-85081eed1c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f5:6e:cb:58:32:df:da:54:cf:3e:a6:7c:25:
bb:6b:fa:ce:42:4f:60:6a:de:3d:76:d1:81:5f:4e:
f6:73:5a:44:3d:f8:28:14:e3:71:69:c1:6f:31:3b:
e4:36:42:2f:4f:7a:3f:9a:2c:72:2f:5c:aa:5d:ed:
24:75:c4:06:16:2b:df:c7:f2:99:aa:f2:8b:10:db:
1d:30:49:8e:59:29:b4:7b:4a:8c:6c:92:80:fa:1f:
e0:49:86:40:13:31:2d:67:fa:28:5b:fa:6f:0f:32:
fd:76:f4:7d:36:be:c2:32:c5:0f:aa:6b:98:d4:11:
ed:3d:92:d0:6b:52:ff:2f:e4:00:e4:7a:31:1c:c7:
ce:71:d6:9d:eb:84:8d:69:1f:9e:a6:b4:9d:ca:2e:
53:16:78:c5:3b:ee:f0:1f:e7:79:09:5a:63:f6:73:
bc:93:bb:ab:e2:50:00:8d:02:8a:de:36:a8:3e:46:
ea:08:5c:d6:ad:86:af:55:5b:15:1e:c6:f9:cf:2d:
66:25:13:8e:b0:54:16:e4:47:de:f4:b9:b6:b7:cc:
d4:2c:b2:aa:a8:51:52:9f:7d:c5:b4:db:18:67:cc:
84:06:ca:c2:b9:5a:ba:83:de:09:e4:77:66:a2:77:
54:9e:0b:a7:1d:d3:58:ee:e9:db:b2:b1:ef:2b:63:
be:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:AC:13:15:FB:31:DE:8C:E3:85:1D:24:7E:37:18:95:73:A6:F7:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b98fb490-fe08-3bef-aabf-ce48c2ffc56c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
X509v3 Authority Key Identifier:
keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
sbgp-ipAddrBlock: critical
IPv4:
129.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d8:1a:67:44:f4:7b:5e:4c:e2:cd:e1:bc:ae:d1:23:2a:dd:9e:
d4:dc:b5:bf:b3:8e:cb:7a:4c:19:9e:c4:05:83:87:13:cd:c3:
03:71:b5:ac:26:fa:fa:77:3a:3d:27:6c:10:6d:5a:88:73:d1:
16:e6:61:be:47:2e:29:6d:44:d3:a1:26:fc:7a:1b:2c:31:68:
06:e8:a5:fd:8a:1c:b8:14:c2:6c:99:4b:22:76:1c:22:4c:52:
73:10:bd:3c:58:7f:bb:8b:cb:d3:b2:96:42:1b:59:2d:99:4e:
e6:23:f1:1c:0f:c7:63:f7:77:2f:31:e6:5d:d0:2b:e9:a8:d7:
82:5a:95:7f:42:c2:09:b4:5a:8e:40:d0:24:dc:75:0b:2b:aa:
79:2d:f2:f8:4d:17:9c:01:53:4e:4a:5a:df:c5:72:c3:0b:1c:
10:4d:1b:9f:aa:57:e9:b0:1b:8d:40:10:70:eb:f6:e1:55:8b:
d9:e3:50:cf:7d:b9:41:45:f1:7b:94:27:02:d2:bc:4a:fa:1a:
0b:45:aa:8d:a0:85:04:29:d2:11:3d:71:6c:33:a8:27:e4:51:
4b:68:38:6f:7d:2b:e8:c9:07:13:f4:67:43:81:61:40:60:bd:
9c:d4:0f:22:ca:56:dd:0c:aa:35:ce:f5:32:10:32:2d:e9:d7:
75:21:ed:e0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEke1t/FqM0KSVqyQwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi
NTc3MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
ZWI2M2NhMzMtNDdhNy00NjBiLTg2NjMtODUwODFlZWQxYzE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/Vuy1gy39pUzz6mfCW7a/rOQk9gat49dtGB
X072c1pEPfgoFONxacFvMTvkNkIvT3o/mixyL1yqXe0kdcQGFivfx/KZqvKLENsd
MEmOWSm0e0qMbJKA+h/gSYZAEzEtZ/ooW/pvDzL9dvR9Nr7CMsUPqmuY1BHtPZLQ
a1L/L+QA5HoxHMfOcdad64SNaR+eprSdyi5TFnjFO+7wH+d5CVpj9nO8k7ur4lAA
jQKK3jaoPkbqCFzWrYavVVsVHsb5zy1mJROOsFQW5Efe9Lm2t8zULLKqqFFSn33F
tNsYZ8yEBsrCuVq6g94J5HdmondUngunHdNY7unbsrHvK2O+5QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA2sExX7Md6M44UdJH43GJVzpvdCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2
OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvYjk4ZmI0OTAtZmUwOC0z
YmVmLWFhYmYtY2U0OGMyZmZjNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5
ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3
YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw
MmE2N2I1NzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgd4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEA2BpnRPR7XkzizeG8rtEjKt2e1Ny1v7OOy3pMGZ7EBYOHE83DA3G1rCb6
+nc6PSdsEG1aiHPRFuZhvkcuKW1E06Em/HobLDFoBuil/YocuBTCbJlLInYcIkxS
cxC9PFh/u4vL07KWQhtZLZlO5iPxHA/HY/d3LzHmXdAr6ajXglqVf0LCCbRajkDQ
JNx1CyuqeS3y+E0XnAFTTkpa38VywwscEE0bn6pX6bAbjUAQcOv24VWL2eNQz325
QUXxe5QnAtK8SvoaC0WqjaCFBCnSET1xbDOoJ+RRS2g4b30r6MkHE/RnQ4FhQGC9
nNQPIspW3QyqNc71MhAyLenXdSHt4A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:27 2025 by rpki-client