Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa
File: d0a1f707-a3b6-3064-b955-8dfcaf321300.roa (raw, json)
Hash identifier: tMqGKFEd9iyUOu0t2duw/dUEKdvJbjPO2T6FQ8gSjj4=
Subject key identifier: 49:24:9D:2A:BB:D5:E9:6F:B6:6F:D6:BF:7A:1E:E1:90:F9:A6:15:74
Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial: 010D0C9F4328584902EBFC35A7C6585DAAC8A158
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa
Signing time: Wed 26 Feb 2025 14:00:51 +0000
ROA not before: Wed 26 Feb 2025 14:00:51 +0000
ROA not after: Tue 27 May 2025 13:00:51 +0000
asID: 14297
IP address blocks: 138.229.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:02:eb:fc:35:a7:c6:58:5d:aa:c8:a1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Validity
Not Before: Feb 26 14:00:51 2025 GMT
Not After : May 27 13:00:51 2025 GMT
Subject: CN=dc6f94d9-bc32-49f9-a077-493beea2fae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d3:1e:aa:54:3d:34:10:ef:90:db:61:29:f2:
cd:d1:f9:7d:21:6d:91:8d:e4:e3:ea:91:7e:ef:0e:
b3:de:a5:b4:24:d6:9f:04:68:60:32:5f:52:91:d5:
2d:11:d9:41:c3:b2:e4:46:32:1c:87:04:a7:a6:14:
9f:ad:7f:96:02:8f:10:10:05:62:b0:0a:f4:81:cd:
0b:06:57:4a:da:9f:a5:3f:19:0b:93:57:a6:be:5b:
8f:6a:dd:ff:fc:bf:83:73:0a:ed:48:e4:27:90:0b:
15:6f:af:72:8a:45:dd:59:0b:c9:f9:ac:80:0d:22:
e3:19:e9:fc:34:07:16:40:de:10:2c:54:ab:04:44:
48:40:d7:07:65:d5:0f:e8:94:4e:78:28:2e:54:64:
26:ae:77:d6:b2:7a:eb:0a:15:12:c5:11:63:a6:4a:
a7:b3:08:81:a0:1f:4a:65:6a:55:61:83:85:71:02:
b2:ba:a3:b0:74:ac:f2:6f:c1:bd:4b:ca:ec:56:c8:
e7:69:f6:4e:57:67:a2:b3:be:24:18:08:3d:a6:32:
74:e8:e7:ca:e1:55:28:a7:ee:4b:cf:0e:08:a5:24:
d9:e0:be:17:d6:9e:03:04:2d:0e:91:aa:44:e9:1c:
e1:aa:33:5f:47:e2:77:db:cf:f2:6b:f8:7b:0f:25:
6d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:24:9D:2A:BB:D5:E9:6F:B6:6F:D6:BF:7A:1E:E1:90:F9:A6:15:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/d0a1f707-a3b6-3064-b955-8dfcaf321300.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
X509v3 Authority Key Identifier:
keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
sbgp-ipAddrBlock: critical
IPv4:
138.229.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:92:d1:8b:8c:b9:71:f7:11:f7:37:94:b1:6f:16:98:19:ad:
70:ba:f4:15:4d:69:a9:4c:c0:b8:94:e2:f2:da:cb:a1:df:c8:
03:20:dc:7c:3a:b4:ae:95:7a:b1:7d:bf:f7:5a:68:18:5a:df:
ed:e5:69:8c:44:b8:18:38:e0:aa:2b:1a:c5:d4:7a:c6:f7:65:
b0:26:62:24:91:9c:36:38:e2:6d:3e:9d:1e:e0:39:2f:f4:76:
88:5f:f3:32:89:20:53:24:ca:07:a2:86:9c:1e:6d:ba:4e:f6:
ed:59:49:cb:56:04:29:28:04:d2:04:56:87:19:c8:41:39:92:
4e:aa:78:0b:3c:c0:a8:2b:23:81:f0:de:81:57:50:fd:b3:7c:
20:ce:89:fc:f2:62:35:9e:a5:69:45:93:1c:18:a0:2f:31:ed:
7f:a3:db:3d:b8:c8:35:bd:cc:af:e6:bb:fc:51:ec:06:ac:c5:
69:a2:a7:98:7c:d2:66:e5:2f:de:87:15:1a:34:d6:6d:41:3b:
e6:05:07:f1:ed:a8:e9:c1:74:dc:37:20:6f:2d:4d:96:cc:2f:
86:f1:00:4e:fe:69:a2:8b:62:98:46:f0:2d:44:a4:46:10:77:
4e:4c:bd:73:7b:64:95:0a:33:9d:e3:b2:77:ab:91:bd:4f:26:
49:95:45:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/w1p8ZYXarIoVgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
ZGM2Zjk0ZDktYmMzMi00OWY5LWEwNzctNDkzYmVlYTJmYWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tMeqlQ9NBDvkNthKfLN0fl9IW2RjeTj6pF+
7w6z3qW0JNafBGhgMl9SkdUtEdlBw7LkRjIchwSnphSfrX+WAo8QEAVisAr0gc0L
BldK2p+lPxkLk1emvluPat3//L+DcwrtSOQnkAsVb69yikXdWQvJ+ayADSLjGen8
NAcWQN4QLFSrBERIQNcHZdUP6JROeCguVGQmrnfWsnrrChUSxRFjpkqnswiBoB9K
ZWpVYYOFcQKyuqOwdKzyb8G9S8rsVsjnafZOV2eis74kGAg9pjJ06OfK4VUop+5L
zw4IpSTZ4L4X1p4DBC0OkapE6RzhqjNfR+J328/ya/h7DyVtiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEkknSq71elvtm/Wv3oe4ZD5phV0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvZDBhMWY3MDctYTNiNi0z
MDY0LWI5NTUtOGRmY2FmMzIxMzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiuUOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSS0YuMuXH3Efc3lLFvFpgZrXC69BVNaalMwLiU4vLay6HfyAMg3Hw6
tK6VerF9v/daaBha3+3laYxEuBg44KorGsXUesb3ZbAmYiSRnDY44m0+nR7gOS/0
dohf8zKJIFMkygeihpwebbpO9u1ZSctWBCkoBNIEVocZyEE5kk6qeAs8wKgrI4Hw
3oFXUP2zfCDOifzyYjWepWlFkxwYoC8x7X+j2z24yDW9zK/mu/xR7AasxWmip5h8
0mblL96HFRo01m1BO+YFB/HtqOnBdNw3IG8tTZbML4bxAE7+aaKLYphG8C1EpEYQ
d05MvXN7ZJUKM53jsnerkb1PJkmVRac=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:22:51 2025 by rpki-client