Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a9aa0e9-2d37-366d-a7fb-8c479b9d72be.roa
File: 0a9aa0e9-2d37-366d-a7fb-8c479b9d72be.roa (raw, json)
Hash identifier: m/1g6waekKwRigorqw+E+Tn/fIMdYDu96kWvd1Tornk=
Subject key identifier: D6:36:D5:B6:0A:2A:F0:48:53:44:BC:4C:8A:05:D5:FF:30:80:42:E0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D07D24DF9FDD424BCF2C3DC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a9aa0e9-2d37-366d-a7fb-8c479b9d72be.roa
Signing time: Wed 23 Feb 2022 05:00:00 +0000
ROA not before: Wed 23 Feb 2022 05:00:00 +0000
ROA not after: Wed 30 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 40.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:07:d2:4d:f9:fd:d4:24:bc:f2:c3:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 23 05:00:00 2022 GMT
Not After : Mar 30 04:00:00 2022 GMT
Subject: CN=f19bcc4e-a18e-4bab-b710-e7925fcda383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8d:81:1d:84:91:c5:c9:1c:5f:c3:c8:6b:a7:
43:6a:e7:67:cc:ee:a0:95:a9:d9:df:85:5d:42:39:
e5:35:5b:e6:55:b1:fb:ee:77:a2:28:01:3a:80:6e:
40:26:14:1e:dc:d2:84:29:2e:a9:60:ca:0b:37:d3:
ba:bf:c0:42:3b:c3:b2:6d:e8:9f:46:93:16:7d:bb:
2c:ba:7b:7a:42:0c:c4:a9:5e:0b:24:45:e9:c2:ed:
23:2b:cd:f7:1b:0a:01:3e:0a:35:7d:bc:7b:72:92:
50:70:80:57:bc:64:04:26:c6:8b:55:cf:1a:30:78:
61:ee:18:4d:2b:08:c6:81:ad:93:f3:83:fe:66:4f:
95:f8:fe:46:85:f9:89:13:a5:24:47:c3:aa:d4:b9:
45:a9:6a:e9:a6:40:f3:00:76:bf:eb:77:95:db:45:
61:b8:ec:1c:5e:09:d8:60:b7:c4:74:09:cb:68:81:
ff:fe:fc:a8:bd:2f:05:31:09:fa:fc:5a:bb:5e:c8:
34:a8:3e:d6:ce:72:6b:5e:84:1e:f2:e2:e3:3d:d6:
c6:ff:33:1a:d8:1e:5c:2f:7d:eb:03:b3:1e:ea:33:
ff:19:39:fd:a8:c4:0a:7c:81:5c:3d:35:a3:ca:ef:
79:81:dc:e1:3c:87:45:70:0d:ab:41:1f:c8:81:ad:
aa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:36:D5:B6:0A:2A:F0:48:53:44:BC:4C:8A:05:D5:FF:30:80:42:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0a9aa0e9-2d37-366d-a7fb-8c479b9d72be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:2e:44:3b:40:83:c4:2a:cc:24:21:14:6c:a4:04:ef:df:ad:
dd:6c:77:c2:e2:35:5a:2f:37:bb:8a:6d:79:64:39:bd:64:01:
83:16:74:d5:88:7f:45:c5:e4:9d:bd:46:18:10:5c:03:87:65:
36:36:b2:81:5a:30:43:74:bf:de:9c:50:e0:8b:a9:32:cd:f2:
5a:2c:00:a7:c9:2f:fe:9e:4e:9d:3e:69:cc:d6:28:0a:0a:3b:
29:51:b4:0d:2d:f1:c9:b4:ac:06:c1:d9:dd:c2:7b:60:e7:70:
b2:14:27:52:fd:64:df:78:e8:83:87:3c:5b:7a:ce:0e:ac:42:
fc:65:99:92:2a:cb:11:90:30:96:e0:a0:22:1d:0c:24:b5:1a:
68:11:cb:9a:e2:00:1d:36:2b:1b:4c:a9:7d:b7:c6:94:83:1e:
25:be:ec:71:73:23:7e:0f:71:72:6b:64:13:f0:75:19:bd:31:
e7:51:c7:d2:9d:5a:3e:60:42:aa:c7:52:d1:91:6c:aa:62:45:
de:ab:22:6c:7d:c1:98:f5:87:d6:20:08:ca:2d:8c:35:34:5b:
d0:9b:88:a8:77:9e:2c:12:f3:9a:83:fe:13:de:bc:0f:7b:45:
d8:35:4a:0b:92:6c:a8:5e:14:fa:ae:64:5d:9e:8c:6a:93:99:
b4:4e:d0:3a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0H0k35/dQkvPLD3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIyMzA1MDAwMFoXDTIyMDMzMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZjE5YmNjNGUtYTE4ZS00YmFiLWI3MTAtZTc5MjVmY2RhMzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI2BHYSRxckcX8PIa6dDaudnzO6glanZ34Vd
QjnlNVvmVbH77neiKAE6gG5AJhQe3NKEKS6pYMoLN9O6v8BCO8OybeifRpMWfbss
unt6QgzEqV4LJEXpwu0jK833GwoBPgo1fbx7cpJQcIBXvGQEJsaLVc8aMHhh7hhN
KwjGga2T84P+Zk+V+P5GhfmJE6UkR8Oq1LlFqWrppkDzAHa/63eV20VhuOwcXgnY
YLfEdAnLaIH//vyovS8FMQn6/Fq7Xsg0qD7WznJrXoQe8uLjPdbG/zMa2B5cL33r
A7Me6jP/GTn9qMQKfIFcPTWjyu95gdzhPIdFcA2rQR/Iga2q2wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNY21bYKKvBIU0S8TIoF1f8wgELgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMGE5YWEwZTktMmQzNy0z
NjZkLWE3ZmItOGM0NzliOWQ3MmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADS5EO0CDxCrMJCEUbKQE79+t3Wx3wuI1Wi83u4pteWQ5vWQBgxZ01Yh/
RcXknb1GGBBcA4dlNjaygVowQ3S/3pxQ4IupMs3yWiwAp8kv/p5OnT5pzNYoCgo7
KVG0DS3xybSsBsHZ3cJ7YOdwshQnUv1k33jog4c8W3rODqxC/GWZkirLEZAwluCg
Ih0MJLUaaBHLmuIAHTYrG0ypfbfGlIMeJb7scXMjfg9xcmtkE/B1Gb0x51HH0p1a
PmBCqsdS0ZFsqmJF3qsibH3BmPWH1iAIyi2MNTRb0JuIqHeeLBLzmoP+E968D3tF
2DVKC5JsqF4U+q5kXZ6MapOZtE7QOg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:12 2025 by rpki-client