Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02f3e5df-efb3-39c8-99c0-d79c5b6df1e3.roa
File: 02f3e5df-efb3-39c8-99c0-d79c5b6df1e3.roa (raw, json)
Hash identifier: yEEw3UoJdzo1rvKKzQ/rNTHCwy2Sz2MxJv+OG3ICunU=
Subject key identifier: EB:47:AE:A8:C0:27:C0:53:F5:89:56:65:EA:8E:B3:12:82:82:16:C0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF39B5B14AAED6FA6D998CE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02f3e5df-efb3-39c8-99c0-d79c5b6df1e3.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.165.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f3:9b:5b:14:aa:ed:6f:a6:d9:98:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=3044a281-3277-4c2b-8178-16ba03e5130b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:32:b2:6a:d8:39:b8:4d:d8:1d:62:8b:b6:90:
ae:23:08:54:45:78:92:87:1f:16:22:66:d4:43:88:
a8:54:71:d7:f3:6c:82:97:44:6a:66:05:eb:4a:f0:
60:c1:40:62:b2:47:33:b1:07:46:62:21:df:23:56:
6c:c1:bc:7b:e6:cc:be:fa:53:9f:31:2e:70:ef:a2:
57:44:ca:a5:b2:dd:2b:55:3e:52:f0:dd:d1:2a:a8:
ed:67:10:39:7d:ee:e0:17:de:c9:4d:19:9d:c5:9d:
21:cf:84:59:9d:f2:c1:c4:09:bb:a7:49:29:ab:bd:
10:a4:52:24:c3:13:43:cb:84:97:e2:2c:52:03:86:
50:d4:a0:dc:82:b8:ab:6b:85:c6:ab:bc:ec:10:0e:
45:fc:4c:ed:5a:f3:3b:4e:49:de:a1:14:42:f9:20:
8f:85:13:67:9d:20:b4:15:cd:e8:4b:b8:02:7e:1c:
17:e7:20:bd:55:ef:22:58:66:c7:0d:65:ed:7b:6f:
f4:f6:c0:b1:6c:2a:eb:77:d6:58:23:5b:d2:e4:86:
a3:39:46:2c:f1:2c:13:11:ff:2a:ec:ef:4f:b5:e9:
92:ef:d1:00:50:c5:41:27:32:ed:87:10:1d:ef:eb:
74:4c:23:8f:c7:54:c8:2b:5f:44:12:95:08:02:f3:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:47:AE:A8:C0:27:C0:53:F5:89:56:65:EA:8E:B3:12:82:82:16:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02f3e5df-efb3-39c8-99c0-d79c5b6df1e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.165.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:03:12:3d:5a:b0:bf:fd:0a:5d:68:0f:ec:97:83:3a:4b:a9:
c9:f3:69:f2:0e:13:dd:14:ec:d1:d5:21:94:e1:b4:b3:fb:5b:
e3:c1:30:bf:ec:e4:0b:40:f1:26:37:a6:2d:2e:de:19:e8:45:
be:e7:89:c7:f6:ac:bc:4e:3b:67:fa:5a:85:7b:5e:1f:29:ef:
ca:f2:69:89:37:8d:29:ed:57:f4:fa:a3:d6:ca:78:98:4e:a2:
37:03:b4:7d:24:ee:8c:e1:a5:7c:c1:d1:2a:74:76:1d:7b:a5:
5c:50:4b:68:63:4d:5f:38:06:cf:4a:86:7c:68:57:55:3f:eb:
6d:18:1b:02:2b:e6:66:53:b2:65:09:83:3f:af:8b:12:f4:52:
82:05:27:ef:0b:60:ec:20:07:83:cb:b2:96:94:51:f6:37:5c:
57:b2:ac:84:df:b2:27:bb:48:84:2f:86:ec:fc:4a:ec:e1:9d:
19:05:6e:48:31:98:ea:6e:fb:fb:d1:89:e2:17:55:63:1b:31:
5d:28:dd:a7:27:0a:2f:b9:c0:8d:1a:a2:7e:6b:5c:49:f7:e5:
ac:5a:47:3f:15:88:06:a3:d4:cb:e9:27:c3:da:92:2e:1b:75:
d0:8a:d7:b4:7b:e9:79:90:3d:a1:c2:1b:01:a4:f4:1a:13:b2:
d8:40:fa:07
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3zm1sUqu1vptmYzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUxODEyMDAwMFoXDTIyMDYyMzA0MDAwMFowLzEtMCsGA1UEAxMk
MzA0NGEyODEtMzI3Ny00YzJiLTgxNzgtMTZiYTAzZTUxMzBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTKyatg5uE3YHWKLtpCuIwhURXiShx8WImbU
Q4ioVHHX82yCl0RqZgXrSvBgwUBiskczsQdGYiHfI1Zswbx75sy++lOfMS5w76JX
RMqlst0rVT5S8N3RKqjtZxA5fe7gF97JTRmdxZ0hz4RZnfLBxAm7p0kpq70QpFIk
wxNDy4SX4ixSA4ZQ1KDcgrira4XGq7zsEA5F/EztWvM7TkneoRRC+SCPhRNnnSC0
Fc3oS7gCfhwX5yC9Ve8iWGbHDWXte2/09sCxbCrrd9ZYI1vS5IajOUYs8SwTEf8q
7O9PtemS79EAUMVBJzLthxAd7+t0TCOPx1TIK19EEpUIAvOJOwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOtHrqjAJ8BT9YlWZeqOsxKCghbAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDJmM2U1ZGYtZWZiMy0z
OWM4LTk5YzAtZDc5YzViNmRmMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqwMSPVqwv/0KXWgP7JeDOkupyfNp8g4T3RTs0dUhlOG0s/tb48Ewv+zk
C0DxJjemLS7eGehFvueJx/asvE47Z/pahXteHynvyvJpiTeNKe1X9Pqj1sp4mE6i
NwO0fSTujOGlfMHRKnR2HXulXFBLaGNNXzgGz0qGfGhXVT/rbRgbAivmZlOyZQmD
P6+LEvRSggUn7wtg7CAHg8uylpRR9jdcV7KshN+yJ7tIhC+G7PxK7OGdGQVuSDGY
6m77+9GJ4hdVYxsxXSjdpycKL7nAjRqifmtcSfflrFpHPxWIBqPUy+knw9qSLht1
0IrXtHvpeZA9ocIbAaT0GhOy2ED6Bw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 14:24:20 2025 by rpki-client