Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/196b1125-db8a-3e31-8757-ac1bd7e214ce.roa
File: 196b1125-db8a-3e31-8757-ac1bd7e214ce.roa (raw, json)
Hash identifier: 4B3MxNcEZBQlUAfR6cA2i0l8OYXIbp0XA1Ai5VFVqBQ=
Subject key identifier: EE:7A:72:83:F8:DE:A1:07:40:8C:62:F7:BE:D8:DA:19:D1:D0:70:45
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FEA2D338B19907B6E711A6A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/196b1125-db8a-3e31-8757-ac1bd7e214ce.roa
Signing time: Mon 14 Nov 2022 12:00:00 +0000
ROA not before: Mon 14 Nov 2022 12:00:00 +0000
ROA not after: Tue 20 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 98.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ea:2d:33:8b:19:90:7b:6e:71:1a:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 14 12:00:00 2022 GMT
Not After : Dec 20 05:00:00 2022 GMT
Subject: CN=dc374cd7-ad52-43fa-b738-d78279cfdd82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:51:34:42:fb:96:c8:0d:d2:50:75:ee:52:
48:c4:a9:09:3e:c1:6c:7c:05:7e:08:cc:2f:73:31:
ca:18:96:1b:0d:df:f8:ea:64:36:1f:92:a6:a5:33:
db:31:94:3b:19:b0:97:66:d7:41:d9:3f:8c:e9:1d:
3f:20:65:bf:5c:f1:3d:9e:a4:01:86:7c:47:20:78:
a4:9e:99:b6:9b:6f:55:23:5b:e7:c2:b7:97:f8:8a:
48:9a:cb:2c:79:d4:1f:9f:5d:f8:ab:37:eb:0e:68:
29:7d:ba:20:d4:23:ff:ae:b4:38:b1:80:85:5f:29:
f3:ca:84:a2:54:34:14:06:18:8e:71:73:f4:94:2e:
91:43:66:ca:b4:aa:f9:d6:41:fe:9a:a1:19:01:a8:
42:7b:bb:bb:3c:c4:0d:84:1c:1a:91:b0:2d:8f:2e:
d8:1e:ae:6b:66:38:dc:ea:66:b0:ed:f1:ff:59:93:
f2:ba:22:db:28:d5:e3:d2:5e:8c:78:f3:00:19:ae:
1d:53:01:b5:9b:36:25:53:e8:66:cc:8d:fd:00:81:
b3:7e:54:0e:10:e2:6a:03:65:01:ab:86:38:79:5d:
d0:68:a7:54:3b:56:0d:e0:66:d1:1f:c2:59:e9:50:
4c:3b:e3:31:24:8e:1e:61:03:24:49:b9:ca:66:ed:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7A:72:83:F8:DE:A1:07:40:8C:62:F7:BE:D8:DA:19:D1:D0:70:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/196b1125-db8a-3e31-8757-ac1bd7e214ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
98.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:d1:7f:86:c3:28:8a:f0:52:f6:7f:7a:4d:10:23:66:ba:e3:
a3:48:13:2e:e2:c6:37:dc:a2:8e:48:bf:f8:95:06:d8:88:4f:
01:64:9a:db:14:77:e7:94:3d:b2:bd:13:03:70:c4:2a:04:39:
90:44:b3:bf:3f:68:4b:ca:91:e4:d0:86:20:40:06:18:a9:73:
29:9e:fd:7b:13:31:a9:fc:f3:6e:de:9e:55:f4:89:68:46:b2:
e6:b8:e7:62:36:db:ee:3f:95:fe:4f:ef:06:04:82:03:ea:80:
d4:c7:a6:a8:52:2c:b0:dc:e3:d2:4b:ef:4c:8a:1c:d9:17:d8:
19:9c:36:94:57:54:20:36:32:16:63:fb:e0:23:fb:97:f2:8f:
07:e9:dd:b2:ab:cf:c8:90:23:24:ac:d0:65:89:cf:86:8f:d1:
7f:19:3e:1e:c1:44:6f:d8:28:24:16:c5:e3:39:f9:40:15:03:
86:df:52:36:6e:69:d2:58:5e:2e:34:b1:81:24:98:65:7d:a0:
b5:c3:bf:32:0e:fe:23:af:45:13:af:77:90:73:f3:68:c1:99:
0c:e6:6e:e5:20:aa:7b:c0:e8:05:0a:48:9b:0b:55:80:83:7f:
74:d8:3e:8e:31:80:0c:ff:64:bc:0e:14:5b:2a:51:7c:bd:d8:
f8:c1:94:52
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/qLTOLGZB7bnEaaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNDEyMDAwMFoXDTIyMTIyMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZGMzNzRjZDctYWQ1Mi00M2ZhLWI3MzgtZDc4Mjc5Y2ZkZDgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWZRNEL7lsgN0lB17lJIxKkJPsFsfAV+CMwv
czHKGJYbDd/46mQ2H5KmpTPbMZQ7GbCXZtdB2T+M6R0/IGW/XPE9nqQBhnxHIHik
npm2m29VI1vnwreX+IpImsssedQfn134qzfrDmgpfbog1CP/rrQ4sYCFXynzyoSi
VDQUBhiOcXP0lC6RQ2bKtKr51kH+mqEZAahCe7u7PMQNhBwakbAtjy7YHq5rZjjc
6maw7fH/WZPyuiLbKNXj0l6MePMAGa4dUwG1mzYlU+hmzI39AIGzflQOEOJqA2UB
q4Y4eV3QaKdUO1YN4GbRH8JZ6VBMO+MxJI4eYQMkSbnKZu3aVwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFO56coP43qEHQIxi977Y2hnR0HBFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTk2YjExMjUtZGI4YS0z
ZTMxLTg3NTctYWMxYmQ3ZTIxNGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYoIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtNF/hsMoivBS9n96TRAjZrrjo0gTLuLGN9yijki/+JUG2IhPAWSa2xR3
55Q9sr0TA3DEKgQ5kESzvz9oS8qR5NCGIEAGGKlzKZ79exMxqfzzbt6eVfSJaEay
5rjnYjbb7j+V/k/vBgSCA+qA1MemqFIssNzj0kvvTIoc2RfYGZw2lFdUIDYyFmP7
4CP7l/KPB+ndsqvPyJAjJKzQZYnPho/Rfxk+HsFEb9goJBbF4zn5QBUDht9SNm5p
0lheLjSxgSSYZX2gtcO/Mg7+I69FE693kHPzaMGZDOZu5SCqe8DoBQpImwtVgIN/
dNg+jjGADP9kvA4UWypRfL3Y+MGUUg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:10:46 2025 by rpki-client