Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1238ae29-4633-32e0-acec-1a19ef853799.roa
File: 1238ae29-4633-32e0-acec-1a19ef853799.roa (raw, json)
Hash identifier: 0z5vd8ffBDSnRMi83pX7vroWlbUd93TWxIxFQSNqT1Y=
Subject key identifier: 19:E6:08:83:93:18:E9:59:C0:5E:77:6C:96:DB:E3:72:33:85:68:45
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF848171F49213F3D474D49C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1238ae29-4633-32e0-acec-1a19ef853799.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 104.153.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:48:17:1f:49:21:3f:3d:47:4d:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=aa3f031f-ab7d-4ff8-b662-365f22092982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9c:fa:5a:2b:fa:d1:1a:cd:a3:22:01:b1:f2:
30:83:a5:48:03:e2:e1:bf:ab:a4:cd:23:80:79:9b:
bf:ff:fa:b3:0c:16:12:2b:64:0a:6a:ef:25:2f:9b:
c5:e8:81:2e:aa:c6:0c:3c:88:83:41:e7:e5:df:b4:
80:e2:f3:16:7b:33:53:28:3a:6d:4c:90:da:61:9e:
81:76:c2:a5:27:da:3f:c9:e9:5a:b0:a7:11:a6:16:
92:98:e3:a0:91:80:18:a1:58:29:bb:ea:e8:2e:db:
bd:1c:17:41:96:66:ca:b3:ac:05:3a:bc:2b:7e:db:
c2:07:89:4a:64:a2:3c:7c:3e:5d:8e:f7:cc:af:78:
7d:8b:68:86:9b:33:f0:c0:6e:b9:01:06:8c:09:c0:
4b:ea:a5:6d:b7:80:59:72:3a:cf:d1:b7:c3:4a:0b:
81:f5:6b:4a:b1:49:18:d7:cf:76:bf:b6:03:b2:02:
14:48:2e:20:3b:e0:a7:ce:bb:94:e9:21:42:a7:59:
90:bc:57:3c:3d:fb:9c:d4:cd:4e:25:29:f9:da:ae:
88:93:7f:45:29:bf:c0:8a:9b:75:9d:cf:1f:ae:01:
ac:83:ac:f2:76:05:f0:18:77:66:80:34:9d:9e:79:
6d:ef:73:16:38:84:30:a5:0d:b4:c2:bd:07:dc:0a:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E6:08:83:93:18:E9:59:C0:5E:77:6C:96:DB:E3:72:33:85:68:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1238ae29-4633-32e0-acec-1a19ef853799.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:2f:ec:25:94:3d:30:be:f4:b6:4c:f5:48:d1:ea:fd:3b:66:
1f:c5:4b:28:2b:58:75:9b:39:00:d2:5a:8a:68:61:a7:7e:97:
dc:38:c1:6c:a2:7d:48:1a:53:0b:7e:90:99:64:52:9c:f0:39:
0c:fe:44:44:e1:4f:e1:ff:60:19:87:f8:f5:67:cc:58:f2:bc:
7f:23:be:53:e2:52:e9:eb:70:bd:cb:a8:25:fa:e6:a3:e5:49:
f9:21:ab:89:c1:50:26:d7:e3:d6:80:54:1c:37:62:e5:ab:a4:
72:cb:03:44:58:82:98:20:37:15:d0:36:f3:30:5f:7b:2f:fb:
5a:1a:62:f9:73:6c:3c:92:f7:6c:12:08:ba:e7:29:dd:5e:dd:
bd:e8:6d:cd:ed:bb:7f:37:6a:4d:c7:4b:be:75:3c:b0:56:4d:
c4:b5:65:46:7d:79:f8:46:4d:41:de:f6:d7:ae:3e:90:2a:f9:
b2:c8:0f:82:e7:49:ae:af:14:2b:07:32:f6:06:9c:17:dd:ea:
46:c2:38:12:d3:5d:65:e1:4b:ec:93:52:3a:2c:93:ff:24:68:
8a:6a:96:08:30:7b:0f:30:3b:ec:6d:c3:1b:b8:cf:61:36:16:
6a:85:d9:6a:54:d4:bc:4a:28:9d:24:a0:37:6a:3e:d0:c7:d2:
85:51:71:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/4SBcfSSE/PUdNScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExOTEyMDAwMFoXDTIyMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
YWEzZjAzMWYtYWI3ZC00ZmY4LWI2NjItMzY1ZjIyMDkyOTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJz6Wiv60RrNoyIBsfIwg6VIA+Lhv6ukzSOA
eZu///qzDBYSK2QKau8lL5vF6IEuqsYMPIiDQefl37SA4vMWezNTKDptTJDaYZ6B
dsKlJ9o/yelasKcRphaSmOOgkYAYoVgpu+roLtu9HBdBlmbKs6wFOrwrftvCB4lK
ZKI8fD5djvfMr3h9i2iGmzPwwG65AQaMCcBL6qVtt4BZcjrP0bfDSguB9WtKsUkY
1892v7YDsgIUSC4gO+CnzruU6SFCp1mQvFc8Pfuc1M1OJSn52q6Ik39FKb/Aipt1
nc8frgGsg6zydgXwGHdmgDSdnnlt73MWOIQwpQ20wr0H3Aqz/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnmCIOTGOlZwF53bJbb43IzhWhFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTIzOGFlMjktNDYzMy0z
MmUwLWFjZWMtMWExOWVmODUzNzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALMv7CWUPTC+9LZM9UjR6v07Zh/FSygrWHWbOQDSWopoYad+l9w4wWyi
fUgaUwt+kJlkUpzwOQz+REThT+H/YBmH+PVnzFjyvH8jvlPiUunrcL3LqCX65qPl
Sfkhq4nBUCbX49aAVBw3YuWrpHLLA0RYgpggNxXQNvMwX3sv+1oaYvlzbDyS92wS
CLrnKd1e3b3obc3tu383ak3HS751PLBWTcS1ZUZ9efhGTUHe9teuPpAq+bLID4Ln
Sa6vFCsHMvYGnBfd6kbCOBLTXWXhS+yTUjosk/8kaIpqlggwew8wO+xtwxu4z2E2
FmqF2WpU1LxKKJ0koDdqPtDH0oVRcec=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:50 2025 by rpki-client