Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01fa23e9-91ca-34e6-979a-9364d9666909.roa
File: 01fa23e9-91ca-34e6-979a-9364d9666909.roa (raw, json)
Hash identifier: +Y0sfe+niovJBiPZmRx6mOgHE8JDCp7sg3mkuaWN4/o=
Subject key identifier: 3A:D3:7B:98:67:14:BD:16:99:19:AC:ED:F2:C2:FD:A7:9B:DC:E6:8A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6F5A7190A345BB9572A59580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01fa23e9-91ca-34e6-979a-9364d9666909.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 68.66.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:5a:71:90:a3:45:bb:95:72:a5:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=7b50b119-3bd9-4415-aecd-247765ecca6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:71:67:3d:34:5e:8a:04:6f:e4:8f:eb:79:3e:
ae:89:f1:2a:85:69:c7:62:37:68:7a:21:38:05:b0:
4f:fa:55:13:ae:74:62:ba:20:55:08:b8:39:6a:f5:
13:07:1f:f8:b1:c9:a9:6b:cd:a3:5f:68:3e:8e:5c:
31:3a:f6:11:19:6e:d2:66:f3:cd:b0:d2:db:a3:fd:
bf:df:2b:92:a7:8a:74:85:f3:35:e0:77:9a:5f:e9:
a5:43:9b:1b:fe:8d:3a:31:47:cc:77:f2:f4:56:a7:
fa:77:5a:86:03:77:e6:e9:d4:4c:48:9f:ca:17:95:
aa:1a:ac:ae:31:7b:ca:24:a9:3a:c5:55:33:da:f8:
60:6f:ca:3c:61:95:d7:08:aa:38:38:18:65:9c:99:
2f:8d:9c:f5:54:ed:a3:ff:5f:68:c4:20:42:60:e2:
a1:5a:ac:1d:b8:40:b9:93:83:09:1c:f9:0d:76:9f:
3b:58:e5:75:af:76:69:ff:87:54:c2:ac:d1:d0:9b:
2a:f8:44:8c:c0:24:4a:4c:93:65:09:35:a8:65:cc:
7a:84:b8:97:70:02:ad:59:2b:ea:57:b9:25:ba:2a:
cc:74:44:3c:d7:97:c1:2c:35:76:da:88:d5:85:3f:
a9:76:80:a6:d2:fe:84:ac:d4:6a:2d:49:dd:b2:d4:
e6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D3:7B:98:67:14:BD:16:99:19:AC:ED:F2:C2:FD:A7:9B:DC:E6:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01fa23e9-91ca-34e6-979a-9364d9666909.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
68.66.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:3f:2f:31:a3:40:d9:78:15:41:b4:4e:3a:65:da:77:8f:4a:
e2:38:b5:0c:d7:23:2f:bd:5b:25:1d:51:e1:cc:eb:00:98:59:
cc:36:90:ab:c2:d9:b8:45:78:45:25:aa:92:71:98:c1:b5:89:
b7:d6:f2:d0:3c:2a:09:3a:fd:48:ec:aa:d9:24:70:fe:08:b7:
a7:05:32:03:04:13:3c:39:d4:56:17:da:63:48:07:61:30:28:
a2:57:f5:f0:9d:ac:96:40:1e:3d:98:23:b7:ca:54:98:59:0c:
0f:7e:f2:cf:11:a0:b3:c5:9d:ce:f0:80:26:60:a6:93:9d:9f:
5c:cf:20:01:3a:fd:0d:4e:ae:e3:3a:72:06:85:af:ed:c3:5d:
b4:71:a6:af:4b:44:6e:10:d6:d2:0a:29:db:ea:38:b1:43:d9:
9b:e6:f1:29:03:96:da:97:5b:8b:65:67:18:80:46:14:ae:65:
c0:b6:35:73:db:c7:f4:87:8a:a7:b7:99:64:c0:3f:40:2b:ef:
c9:4c:1c:68:f7:28:32:a6:ae:04:90:5a:66:6c:fb:0d:01:1c:
e5:20:22:77:94:55:d8:15:fc:5f:4a:c0:45:10:d5:c6:8a:b2:
2c:9c:f4:3d:04:30:fa:13:f8:90:a5:7e:01:38:10:5c:df:13:
f2:3d:6e:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxvWnGQo0W7lXKllYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
N2I1MGIxMTktM2JkOS00NDE1LWFlY2QtMjQ3NzY1ZWNjYTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHFnPTReigRv5I/reT6uifEqhWnHYjdoeiE4
BbBP+lUTrnRiuiBVCLg5avUTBx/4scmpa82jX2g+jlwxOvYRGW7SZvPNsNLbo/2/
3yuSp4p0hfM14HeaX+mlQ5sb/o06MUfMd/L0Vqf6d1qGA3fm6dRMSJ/KF5WqGqyu
MXvKJKk6xVUz2vhgb8o8YZXXCKo4OBhlnJkvjZz1VO2j/19oxCBCYOKhWqwduEC5
k4MJHPkNdp87WOV1r3Zp/4dUwqzR0Jsq+ESMwCRKTJNlCTWoZcx6hLiXcAKtWSvq
V7kluirMdEQ815fBLDV22ojVhT+pdoCm0v6ErNRqLUndstTm6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDrTe5hnFL0WmRms7fLC/aeb3OaKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDFmYTIzZTktOTFjYS0z
NGU2LTk3OWEtOTM2NGQ5NjY2OTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREJwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJU/LzGjQNl4FUG0Tjpl2nePSuI4tQzXIy+9WyUdUeHM6wCYWcw2kKvC
2bhFeEUlqpJxmMG1ibfW8tA8Kgk6/UjsqtkkcP4It6cFMgMEEzw51FYX2mNIB2Ew
KKJX9fCdrJZAHj2YI7fKVJhZDA9+8s8RoLPFnc7wgCZgppOdn1zPIAE6/Q1OruM6
cgaFr+3DXbRxpq9LRG4Q1tIKKdvqOLFD2Zvm8SkDltqXW4tlZxiARhSuZcC2NXPb
x/SHiqe3mWTAP0Ar78lMHGj3KDKmrgSQWmZs+w0BHOUgIneUVdgV/F9KwEUQ1caK
siyc9D0EMPoT+JClfgE4EFzfE/I9bhc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:57 2025 by rpki-client