Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c7d080d-ad50-3c7d-a213-45d701ccc481.roa
File: 0c7d080d-ad50-3c7d-a213-45d701ccc481.roa (raw, json)
Hash identifier: JZKURgwv4XJBCBojzMI7+IMxFPAnp5DHwbRWmJgNecs=
Subject key identifier: CB:9D:1A:E6:00:78:D3:7B:10:70:79:4C:D5:22:FB:CC:F7:67:B1:09
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D89FC73EBDD149F1923863300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c7d080d-ad50-3c7d-a213-45d701ccc481.roa
Signing time: Mon 11 Apr 2022 04:00:00 +0000
ROA not before: Mon 11 Apr 2022 04:00:00 +0000
ROA not after: Mon 16 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 153.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:89:fc:73:eb:dd:14:9f:19:23:86:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 11 04:00:00 2022 GMT
Not After : May 16 04:00:00 2022 GMT
Subject: CN=27ccc44b-29a8-487b-b770-c1f99f92ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:3c:93:be:15:1c:57:16:16:37:cd:0b:e8:
ab:b8:77:86:76:57:ca:f0:e1:ba:66:88:ea:2e:b0:
c3:8b:da:93:99:45:d0:30:d2:6f:35:07:cb:c1:8e:
0b:92:4e:ac:cf:b6:f6:4a:bd:df:0e:31:b1:82:2d:
41:77:81:1c:af:f1:05:0b:9c:91:c3:36:5d:b5:72:
5c:ce:1e:3b:35:af:82:5f:57:5d:18:39:58:7c:16:
28:7a:9a:65:1f:7c:c7:5f:dc:b3:ae:61:48:e7:cb:
28:e6:b5:a6:b5:9b:8d:a8:95:6e:98:1b:b6:25:43:
f4:1e:23:60:45:d8:91:98:08:10:9f:e2:94:51:ab:
ec:bf:7a:38:39:e1:c5:1c:1d:f1:91:73:a0:85:12:
f8:b6:7b:db:dd:63:6d:18:cf:66:09:a5:82:e5:24:
6f:dd:04:3d:23:ef:41:2f:54:e6:af:3e:40:79:4e:
55:d3:b2:e3:f4:ae:2c:5e:1c:c2:16:fd:1e:53:5b:
c0:92:cb:60:2d:11:f5:ff:42:c0:95:79:f4:bd:79:
79:1c:ce:ba:6e:48:9d:73:ed:48:58:f4:8a:52:95:
5b:3e:b1:57:59:fd:a3:f6:a8:f4:27:e2:41:ae:6b:
6b:94:ad:45:65:4b:84:2b:dc:17:36:64:c1:ff:41:
ed:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9D:1A:E6:00:78:D3:7B:10:70:79:4C:D5:22:FB:CC:F7:67:B1:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0c7d080d-ad50-3c7d-a213-45d701ccc481.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:55:95:38:8e:53:12:94:ae:b5:11:45:b4:ae:67:72:b5:2a:
7e:9f:86:19:a9:97:6c:37:f9:c3:fc:c9:b7:0e:f6:f2:dc:50:
22:cb:28:b6:e1:4d:10:b8:90:e4:72:76:92:85:cd:30:e4:26:
fc:3a:8e:d2:ef:c8:50:33:d3:10:0f:0c:ed:2b:76:6b:08:30:
42:0a:69:01:86:8f:c6:5c:1d:61:ea:68:86:d1:e3:a3:01:40:
07:62:13:ee:46:0f:96:3b:5d:57:0b:1c:89:de:6a:fe:7c:03:
07:08:7f:9c:ab:5a:13:5b:3c:1d:ba:41:82:b5:da:91:7c:af:
9e:04:22:12:92:2d:29:aa:26:94:3f:09:d3:5b:3d:ac:6f:68:
a2:58:44:5c:42:8f:0e:85:63:88:62:10:9b:ea:26:44:57:04:
91:ff:72:d8:fa:4b:bd:9b:3b:b4:4c:35:57:93:6d:9e:29:ec:
7a:66:3f:6b:f1:4b:02:cf:e0:a3:cf:38:36:7b:f7:65:a3:7f:
f3:da:e8:39:5f:cf:6a:44:b9:2c:8f:1f:f5:2f:a4:27:85:fe:
70:b3:69:dd:a2:4e:54:1f:c9:b6:8e:ce:26:35:54:06:2f:f8:
46:a8:66:14:c1:f0:e3:a7:ed:2c:61:53:1e:ac:82:73:cd:98:
1a:cd:29:b7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2J/HPr3RSfGSOGMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQxMTA0MDAwMFoXDTIyMDUxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MjdjY2M0NGItMjlhOC00ODdiLWI3NzAtYzFmOTlmOTJlZTljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ08k74VHFcWFjfNC+iruHeGdlfK8OG6Zojq
LrDDi9qTmUXQMNJvNQfLwY4Lkk6sz7b2Sr3fDjGxgi1Bd4Ecr/EFC5yRwzZdtXJc
zh47Na+CX1ddGDlYfBYoepplH3zHX9yzrmFI58so5rWmtZuNqJVumBu2JUP0HiNg
RdiRmAgQn+KUUavsv3o4OeHFHB3xkXOghRL4tnvb3WNtGM9mCaWC5SRv3QQ9I+9B
L1Tmrz5AeU5V07Lj9K4sXhzCFv0eU1vAkstgLRH1/0LAlXn0vXl5HM66bkidc+1I
WPSKUpVbPrFXWf2j9qj0J+JBrmtrlK1FZUuEK9wXNmTB/0HtfQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMudGuYAeNN7EHB5TNUi+8z3Z7EJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMGM3ZDA4MGQtYWQ1MC0z
YzdkLWEyMTMtNDVkNzAxY2NjNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmQwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAalWVOI5TEpSutRFFtK5ncrUqfp+GGamXbDf5w/zJtw728txQIssotuFN
ELiQ5HJ2koXNMOQm/DqO0u/IUDPTEA8M7St2awgwQgppAYaPxlwdYepohtHjowFA
B2IT7kYPljtdVwscid5q/nwDBwh/nKtaE1s8HbpBgrXakXyvngQiEpItKaomlD8J
01s9rG9oolhEXEKPDoVjiGIQm+omRFcEkf9y2PpLvZs7tEw1V5NtninsemY/a/FL
As/go884Nnv3ZaN/89roOV/PakS5LI8f9S+kJ4X+cLNp3aJOVB/Jto7OJjVUBi/4
RqhmFMHw46ftLGFTHqyCc82YGs0ptw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:53 2025 by rpki-client