Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19bd3d41-da94-3a52-8540-048b8e07322a.roa
File: 19bd3d41-da94-3a52-8540-048b8e07322a.roa (raw, json)
Hash identifier: aM/FZyg4LI737W1I/xne8fAr+KEKyvsLLIiKK+vgOOU=
Subject key identifier: FD:FC:EC:C7:F1:33:70:3F:4C:C7:61:0F:A5:F9:2D:90:4B:F6:1B:F0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C96F678540FA8A533988C7A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19bd3d41-da94-3a52-8540-048b8e07322a.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 172.103.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:f6:78:54:0f:a8:a5:33:98:8c:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=50479634-9eb4-4d36-9534-8bf20d22482a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:7d:25:12:be:1e:fe:28:92:d0:14:f7:b0:
ca:0a:4e:fd:6f:50:a7:89:cf:7a:21:2f:6f:6d:73:
ca:66:a8:70:d6:05:da:2d:ba:ee:98:5e:68:68:03:
bc:2d:70:74:4c:68:0d:34:6f:25:e9:6d:98:56:e1:
11:a1:dd:6e:93:8f:9b:3c:dc:25:ec:69:e3:42:de:
64:ad:f0:46:87:20:28:cf:0e:c5:32:3b:41:67:e5:
2f:b2:c8:b5:09:3d:6b:1d:b8:8b:ab:68:ff:a9:48:
27:cd:18:dd:55:60:e5:ec:59:8a:14:f1:71:8e:09:
52:7d:65:ce:a7:ad:e1:e2:61:e9:08:bd:48:3c:82:
90:32:b2:16:67:f8:5e:1b:b2:19:b6:dd:41:1d:8a:
8f:e2:22:db:0a:b8:02:21:6b:12:6b:95:85:e3:09:
14:f8:73:c1:d8:37:5a:f9:53:f0:a4:9a:83:63:b5:
b7:88:1b:82:73:70:ec:79:a3:09:d6:9a:89:e3:02:
6d:cc:93:25:51:3a:35:89:10:bd:12:38:87:be:3f:
3d:41:05:5c:c8:fc:13:d1:98:66:d9:b0:9d:3a:1b:
20:9b:61:ef:64:7e:6e:b9:eb:e3:94:60:28:15:86:
26:31:6d:00:93:cc:4f:5c:c1:1c:fb:c7:20:14:cd:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FC:EC:C7:F1:33:70:3F:4C:C7:61:0F:A5:F9:2D:90:4B:F6:1B:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/19bd3d41-da94-3a52-8540-048b8e07322a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
172.103.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:96:d8:4f:a5:8e:60:f3:ae:c2:74:9c:9f:07:f7:be:42:7b:
4a:1f:6b:30:15:56:03:65:01:1a:ca:b6:b1:59:e6:9f:36:46:
b8:5f:af:23:2d:7c:e2:23:5f:98:c2:f8:bd:b4:cc:cf:96:1b:
e1:d2:65:65:10:22:ec:fa:d1:e4:f1:a2:b2:7b:12:3b:b8:2b:
1a:ee:95:f4:7c:ed:46:24:50:11:bc:35:82:38:da:6c:18:dc:
ae:06:19:70:41:c7:ad:1b:1c:cc:fe:8b:40:e0:f8:fd:9f:82:
ff:87:cb:ca:9b:bf:60:fd:15:6b:c7:38:4b:1b:f1:de:bb:f2:
dc:a5:80:51:06:0b:7b:37:f3:46:e9:d9:db:ea:59:b0:c7:4d:
e3:87:3c:37:6b:f1:18:91:07:43:d7:b3:fa:ac:4b:3e:53:c3:
08:44:dd:06:54:20:c1:3e:06:7c:db:0d:8c:7a:52:9b:ff:fa:
0d:6b:43:dd:ef:0b:5b:36:d3:ff:89:1d:d0:21:6b:3a:b1:8c:
46:fb:89:f8:b7:6a:22:2e:fe:43:c1:98:1d:c3:ce:5c:20:18:
b1:47:f2:4c:07:95:e7:67:bf:bb:fd:79:f9:ff:05:8e:19:cd:
39:d4:5e:10:3a:d5:a3:41:e4:64:a6:2c:82:4e:0c:16:d9:9f:
f5:a9:8d:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyW9nhUD6ilM5iMegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
NTA0Nzk2MzQtOWViNC00ZDM2LTk1MzQtOGJmMjBkMjI0ODJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQJ9JRK+Hv4oktAU97DKCk79b1Cnic96IS9v
bXPKZqhw1gXaLbrumF5oaAO8LXB0TGgNNG8l6W2YVuERod1uk4+bPNwl7GnjQt5k
rfBGhyAozw7FMjtBZ+Uvssi1CT1rHbiLq2j/qUgnzRjdVWDl7FmKFPFxjglSfWXO
p63h4mHpCL1IPIKQMrIWZ/heG7IZtt1BHYqP4iLbCrgCIWsSa5WF4wkU+HPB2Dda
+VPwpJqDY7W3iBuCc3DseaMJ1pqJ4wJtzJMlUTo1iRC9EjiHvj89QQVcyPwT0Zhm
2bCdOhsgm2HvZH5uuevjlGAoFYYmMW0Ak8xPXMEc+8cgFM2c7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP387MfxM3A/TMdhD6X5LZBL9hvwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTliZDNkNDEtZGE5NC0z
YTUyLTg1NDAtMDQ4YjhlMDczMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrGcoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAiW2E+ljmDzrsJ0nJ8H975Ce0ofazAVVgNlARrKtrFZ5p82RrhfryMt
fOIjX5jC+L20zM+WG+HSZWUQIuz60eTxorJ7Eju4KxrulfR87UYkUBG8NYI42mwY
3K4GGXBBx60bHMz+i0Dg+P2fgv+Hy8qbv2D9FWvHOEsb8d678tylgFEGC3s380bp
2dvqWbDHTeOHPDdr8RiRB0PXs/qsSz5TwwhE3QZUIME+BnzbDYx6Upv/+g1rQ93v
C1s20/+JHdAhazqxjEb7ifi3aiIu/kPBmB3DzlwgGLFH8kwHlednv7v9efn/BY4Z
zTnUXhA61aNB5GSmLIJODBbZn/WpjXU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:11 2025 by rpki-client