Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/f54edeac-4bda-3704-bd9d-498ce46d662b.roa
File: f54edeac-4bda-3704-bd9d-498ce46d662b.roa (raw, json)
Hash identifier: As2jS0kLJOKCbZtsjW2JyVb7bBuLWXo6oL7CKvI7ljs=
Subject key identifier: BC:B9:AE:98:DB:55:94:02:DA:24:18:98:8F:32:EE:C2:CB:18:CF:FF
Certificate issuer: /CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
Certificate serial: 010D0C9F43285848BD20E52ED16A0AE78BCF7040
Authority key identifier: 4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/f54edeac-4bda-3704-bd9d-498ce46d662b.roa
Signing time: Sat 01 Feb 2025 14:00:51 +0000
ROA not before: Sat 01 Feb 2025 14:00:51 +0000
ROA not after: Fri 02 May 2025 13:00:51 +0000
asID: 152705
IP address blocks: 172.98.22.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:bd:20:e5:2e:d1:6a:0a:e7:8b:cf:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde1ff6e-d680-46cc-9eb2-48968e5118e5
Validity
Not Before: Feb 1 14:00:51 2025 GMT
Not After : May 2 13:00:51 2025 GMT
Subject: CN=79fa6f97-cfa4-4fb8-a978-cceba881c049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b1:36:36:fd:65:6c:9e:8d:46:ba:af:41:14:
e0:2f:6b:9a:ff:09:dc:57:12:21:0a:b8:a0:ee:7f:
d0:1d:a9:18:4e:a5:5a:b0:b2:09:26:bd:1f:ae:04:
d3:73:11:b4:eb:21:af:be:e6:5d:e5:11:97:a8:1c:
76:0b:30:7c:ad:b8:b1:9d:fa:27:30:5e:59:98:70:
35:55:8f:99:0a:1c:cb:ba:aa:e7:d7:4c:82:d7:7d:
7e:d3:ef:2c:d8:83:ec:7a:fa:31:dc:16:f7:3d:30:
23:12:50:28:60:00:5e:90:22:cd:e9:60:57:9d:3a:
f5:5b:50:05:23:e7:ed:bf:c4:99:a6:63:85:3a:45:
f0:4e:dd:9d:aa:0f:91:03:10:fc:04:85:58:84:2b:
2e:09:4b:bf:67:fb:78:2f:6a:75:62:0e:11:4c:68:
33:94:f2:c3:d4:ed:7c:0b:b0:fe:fd:5c:08:45:2c:
f7:db:48:cb:69:16:9b:8b:3b:77:5a:91:11:45:b5:
8b:df:1b:91:9f:27:32:e9:8c:9f:b6:d9:86:26:38:
34:76:88:a5:72:95:a6:90:26:c5:29:d0:6f:ca:7a:
fb:90:23:e3:ad:b9:17:a7:55:1c:04:b8:7b:0a:c9:
1d:48:c9:50:6b:44:99:25:99:3c:9a:3e:a6:4e:ed:
99:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B9:AE:98:DB:55:94:02:DA:24:18:98:8F:32:EE:C2:CB:18:CF:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/f54edeac-4bda-3704-bd9d-498ce46d662b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5/dde1ff6e-d680-46cc-9eb2-48968e5118e5.crl
X509v3 Authority Key Identifier:
keyid:4D:AB:8B:23:A1:27:7B:95:45:EE:C1:E7:71:CF:EB:63:18:88:73:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dde1ff6e-d680-46cc-9eb2-48968e5118e5.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:53:cb:a6:49:2b:72:a9:dc:90:1e:79:9e:ca:4a:a8:c9:cf:
42:d9:37:45:36:8b:e4:6e:91:cd:90:ea:db:54:e5:14:c1:fd:
81:e8:7d:9b:b7:2c:e4:16:4d:dc:57:5e:70:f6:67:cc:3c:53:
41:00:00:da:4a:9f:16:15:85:10:57:96:1a:c1:ea:79:64:d2:
44:49:a5:07:35:a8:1f:d2:5b:e9:27:a8:bf:20:08:ac:e4:2a:
b2:fc:ac:0f:1b:9d:12:70:6c:32:eb:7c:85:ca:6d:15:ad:2e:
06:87:6d:19:66:06:50:98:6d:b8:8c:7d:e7:cc:96:c1:b3:a0:
86:b9:1f:fa:6f:56:60:53:7f:4c:53:ea:24:54:cb:05:8f:0e:
0b:c6:38:d0:7a:76:42:49:16:41:e4:91:33:60:aa:e7:3a:74:
34:93:f5:d4:63:4b:a6:36:b9:1a:ae:0a:4b:ed:fa:5e:5a:c5:
e2:ff:af:1b:1c:02:c9:92:80:18:c4:92:69:00:b8:3e:1b:12:
89:43:b4:6f:e2:1f:0d:b7:79:c8:18:7b:36:e6:ad:c7:90:9e:
09:a5:5a:ba:71:88:2a:dd:b2:53:50:f9:55:72:1a:1c:ed:16:
40:e5:8a:75:fd:27:f3:22:1b:dc:9f:1e:2f:d7:2c:8f:f1:68:
e7:d3:71:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi9IOUu0WoK54vPcEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGRlMWZmNmUtZDY4MC00NmNjLTllYjItNDg5NjhlNTEx
OGU1MB4XDTI1MDIwMTE0MDA1MVoXDTI1MDUwMjEzMDA1MVowLzEtMCsGA1UEAxMk
NzlmYTZmOTctY2ZhNC00ZmI4LWE5NzgtY2NlYmE4ODFjMDQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbE2Nv1lbJ6NRrqvQRTgL2ua/wncVxIhCrig
7n/QHakYTqVasLIJJr0frgTTcxG06yGvvuZd5RGXqBx2CzB8rbixnfonMF5ZmHA1
VY+ZChzLuqrn10yC131+0+8s2IPsevox3Bb3PTAjElAoYABekCLN6WBXnTr1W1AF
I+ftv8SZpmOFOkXwTt2dqg+RAxD8BIVYhCsuCUu/Z/t4L2p1Yg4RTGgzlPLD1O18
C7D+/VwIRSz320jLaRabizt3WpERRbWL3xuRnycy6YyfttmGJjg0doilcpWmkCbF
KdBvynr7kCPjrbkXp1UcBLh7CskdSMlQa0SZJZk8mj6mTu2ZmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLy5rpjbVZQC2iQYmI8y7sLLGM//MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZGUx
ZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2OGU1MTE4ZTUvZjU0ZWRlYWMtNGJkYS0z
NzA0LWJkOWQtNDk4Y2U0NmQ2NjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGRlMWZmNmUtZDY4MC00NmNjLTll
YjItNDg5NjhlNTExOGU1L2RkZTFmZjZlLWQ2ODAtNDZjYy05ZWIyLTQ4OTY4ZTUx
MThlNS5jcmwwHwYDVR0jBBgwFoAUTauLI6Ene5VF7sHncc/rYxiIc7kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kZGUxZmY2ZS1kNjgwLTQ2Y2MtOWViMi00ODk2
OGU1MTE4ZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJBTy6ZJK3Kp3JAeeZ7KSqjJz0LZN0U2i+Rukc2Q6ttU5RTB/YHofZu3
LOQWTdxXXnD2Z8w8U0EAANpKnxYVhRBXlhrB6nlk0kRJpQc1qB/SW+knqL8gCKzk
KrL8rA8bnRJwbDLrfIXKbRWtLgaHbRlmBlCYbbiMfefMlsGzoIa5H/pvVmBTf0xT
6iRUywWPDgvGONB6dkJJFkHkkTNgquc6dDST9dRjS6Y2uRquCkvt+l5axeL/rxsc
AsmSgBjEkmkAuD4bEolDtG/iHw23ecgYezbmrceQngmlWrpxiCrdslNQ+VVyGhzt
FkDlinX9J/MiG9yfHi/XLI/xaOfTcfk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:40 2025 by rpki-client