Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de221f5b-88e9-3b66-bffa-7d1a4d0d35d0.roa
File: de221f5b-88e9-3b66-bffa-7d1a4d0d35d0.roa (raw, json)
Hash identifier: Ufu9MNO5aUkWR3plMgZqziEdArECY/dP2BwKHCgz4YI=
Subject key identifier: 23:ED:B7:E6:9B:58:45:D3:BB:DD:76:96:63:EA:10:B0:3A:91:92:76
Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial: 010D0C9F4328583D661E37CAAA7A62435C9D3980
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de221f5b-88e9-3b66-bffa-7d1a4d0d35d0.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 21 Mar 2028 04:00:00 +0000
asID: 7029
IP address blocks: 98.22.104.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:66:1e:37:ca:aa:7a:62:43:5c:9d:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : Mar 21 04:00:00 2028 GMT
Subject: CN=bdf08660-7d45-40bf-879e-bfc49932a434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:7b:05:ed:6a:3c:d0:c3:53:7d:60:29:25:
cc:1e:05:7a:a0:33:c9:57:d5:fc:14:be:d3:b6:94:
8a:5b:98:ad:e0:94:ce:8c:ef:88:ff:37:e6:f6:49:
8c:8b:76:80:cb:96:9c:de:88:24:77:f4:ba:1f:77:
19:82:2a:35:6f:66:4a:f5:3c:ca:90:1c:34:f9:c9:
ed:10:de:12:d3:b0:c0:87:fc:02:96:0f:24:fa:f7:
7b:13:f7:36:0e:bb:f4:e2:ed:6c:94:b6:01:60:69:
74:5f:8c:21:78:73:a5:42:57:6f:69:29:8d:98:30:
92:d6:fd:b8:b9:3e:3d:71:ef:16:af:c3:00:c3:dc:
b7:88:40:87:eb:ce:40:d6:02:99:32:41:77:b7:ac:
7a:ef:13:a9:f3:8a:bb:e5:09:61:75:6b:09:0b:db:
6b:0c:7b:b8:e8:83:ef:bb:92:04:ce:75:96:0d:82:
46:64:77:d3:82:6c:bd:04:62:2c:04:70:31:05:47:
22:7c:86:3d:7a:67:1e:82:77:01:f4:6f:ce:66:98:
eb:44:b9:0b:02:2a:48:3d:76:dd:53:bc:82:5a:75:
df:08:64:e5:7b:28:00:b2:b0:9b:69:7d:a0:64:39:
47:29:67:cd:b2:53:36:63:78:4c:5a:08:b4:a6:f8:
2a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:ED:B7:E6:9B:58:45:D3:BB:DD:76:96:63:EA:10:B0:3A:91:92:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de221f5b-88e9-3b66-bffa-7d1a4d0d35d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
X509v3 Authority Key Identifier:
keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
sbgp-ipAddrBlock: critical
IPv4:
98.22.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:d5:6a:40:34:ee:cd:e1:27:b6:3b:40:01:ca:7a:67:d4:79:
a0:45:dc:f1:dc:a7:d2:72:ed:47:8f:bc:50:73:23:9e:1f:43:
91:18:16:68:93:90:e2:6b:ee:2c:06:a7:ce:e2:13:cb:4c:20:
07:1a:34:e7:6f:61:61:c1:4f:1c:a2:25:6a:99:ea:9a:1e:18:
02:01:dc:2e:89:63:8b:61:26:d4:0a:12:49:c9:ba:2d:29:7e:
df:20:a4:3d:42:7d:0b:86:86:5b:a1:25:15:b7:35:51:c0:df:
05:ec:2b:8d:a9:45:2f:3b:4d:37:6b:29:97:2b:51:36:16:ff:
28:e5:a3:b1:f4:6b:29:de:30:a5:0c:bd:ac:1f:f3:3e:97:e1:
59:12:0e:34:f0:49:0c:ed:04:99:f2:12:a0:43:24:c7:22:a5:
9f:f3:b6:83:18:ab:9e:f6:45:f5:d4:f2:26:c2:23:d6:e7:bf:
7b:22:55:d2:0a:8c:55:be:52:c8:7d:6f:64:19:8a:d9:68:b8:
79:91:97:6a:c5:82:37:8f:19:21:8a:66:9b:91:f5:00:28:47:
8d:88:d8:08:7e:18:ae:e7:78:1e:90:17:94:91:25:0b:56:97:
e9:e4:9b:e4:96:46:9a:6f:a7:51:0e:6d:08:77:80:bd:c3:d8:
d5:15:da:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHjfKqnpiQ1ydOYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi
MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk
YmRmMDg2NjAtN2Q0NS00MGJmLTg3OWUtYmZjNDk5MzJhNDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVx7Be1qPNDDU31gKSXMHgV6oDPJV9X8FL7T
tpSKW5it4JTOjO+I/zfm9kmMi3aAy5ac3ogkd/S6H3cZgio1b2ZK9TzKkBw0+cnt
EN4S07DAh/wClg8k+vd7E/c2Drv04u1slLYBYGl0X4wheHOlQldvaSmNmDCS1v24
uT49ce8Wr8MAw9y3iECH685A1gKZMkF3t6x67xOp84q75QlhdWsJC9trDHu46IPv
u5IEznWWDYJGZHfTgmy9BGIsBHAxBUcifIY9emcegncB9G/OZpjrRLkLAipIPXbd
U7yCWnXfCGTleygAsrCbaX2gZDlHKWfNslM2Y3hMWgi0pvgqXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPtt+abWEXTu912lmPqELA6kZJ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk
NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGUyMjFmNWItODhlOS0z
YjY2LWJmZmEtN2QxYTRkMGQzNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk
NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1
YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3
M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhZoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLVakA07s3hJ7Y7QAHKemfUeaBF3PHcp9Jy7UePvFBzI54fQ5EYFmiT
kOJr7iwGp87iE8tMIAcaNOdvYWHBTxyiJWqZ6poeGAIB3C6JY4thJtQKEknJui0p
ft8gpD1CfQuGhluhJRW3NVHA3wXsK42pRS87TTdrKZcrUTYW/yjlo7H0ayneMKUM
vawf8z6X4VkSDjTwSQztBJnyEqBDJMcipZ/ztoMYq572RfXU8ibCI9bnv3siVdIK
jFW+Ush9b2QZitlouHmRl2rFgjePGSGKZpuR9QAoR42I2Ah+GK7neB6QF5SRJQtW
l+nkm+SWRppvp1EObQh3gL3D2NUV2gc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:11 2025 by rpki-client