Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a4dd88f-c0df-39b0-b206-7218d2b8672c.roa
File: 1a4dd88f-c0df-39b0-b206-7218d2b8672c.roa (raw, json)
Hash identifier: Ygum/O7IENautaKyUZzaE+GcXq7KDjNga3WBCHl/N/k=
Subject key identifier: 99:DC:60:29:CF:D6:10:1D:D4:F9:A1:FC:4D:3D:5A:AE:1C:53:0A:BF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F7CFADFC4068F347B374F0F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a4dd88f-c0df-39b0-b206-7218d2b8672c.roa
Signing time: Thu 06 Oct 2022 12:00:00 +0000
ROA not before: Thu 06 Oct 2022 12:00:00 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 100.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7c:fa:df:c4:06:8f:34:7b:37:4f:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 6 12:00:00 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=350a596e-5207-460e-9f05-11e30bea2fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:04:25:89:fd:e9:e3:e5:e3:c5:dd:70:3c:47:
27:f4:bf:93:c1:09:fb:89:0d:2c:6a:1b:d2:35:ad:
be:44:76:72:be:9a:c9:c9:35:0c:2b:6c:5d:6e:49:
b9:31:7c:ba:36:ef:d6:a4:d5:75:42:ad:e0:f7:d4:
b6:a8:10:ea:ec:61:2f:d2:c7:da:ec:07:dc:02:92:
d9:22:a3:61:b3:42:80:41:ad:e6:a1:d0:ee:b9:2d:
96:6b:e0:ca:4a:15:45:cc:d1:f5:8a:fc:bc:e6:72:
91:97:49:50:2f:8e:7b:81:49:c4:3a:f2:41:4e:81:
f6:9e:c7:8a:07:91:1d:eb:90:85:67:30:bd:63:06:
22:4a:ba:9d:1c:86:97:3b:dd:7e:24:ec:23:fa:5a:
c5:8f:1e:22:0b:8f:51:86:08:25:eb:35:b9:70:c1:
e6:6d:9c:da:c3:46:c5:ef:2f:b9:0f:cb:cf:17:fa:
19:73:be:1e:ac:50:42:b7:52:12:11:ab:3d:a9:b9:
cc:26:00:c1:2b:1c:28:fd:e1:3a:5f:39:0e:57:e6:
48:c0:98:8e:d4:7e:19:96:ed:3d:29:8c:6e:40:ba:
8e:13:84:88:61:1e:fd:fd:82:d3:af:fe:e8:e4:85:
d4:b8:ad:53:a9:e7:af:38:1b:42:af:2c:d2:78:91:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DC:60:29:CF:D6:10:1D:D4:F9:A1:FC:4D:3D:5A:AE:1C:53:0A:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a4dd88f-c0df-39b0-b206-7218d2b8672c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:5d:b1:68:cd:4e:1b:3a:f4:6f:2c:20:ac:59:69:ac:63:e6:
9e:bd:e1:b5:db:33:a4:54:bb:d1:e5:b9:1d:44:97:c5:70:02:
0a:3b:b9:1c:e7:ec:25:93:38:84:ff:d5:48:aa:16:4f:b7:d7:
99:a1:e5:fc:e1:d3:65:de:fa:e7:79:be:8c:10:c3:1c:02:22:
ff:b0:f0:f6:6d:3e:26:55:ff:f5:66:b1:bd:7d:9d:c6:bf:17:
d0:16:28:8e:04:b6:a5:ab:91:0a:6d:d9:77:5b:04:6d:20:f1:
2f:2e:8e:2a:7d:82:64:52:56:7a:db:4b:9a:94:5c:f2:5a:f2:
b0:e4:df:f3:90:5f:ae:ed:32:3f:eb:62:fa:25:f1:bd:79:48:
01:c0:e0:81:3d:a9:c0:e5:ed:c3:d4:fb:ce:83:10:75:cd:cb:
4f:a1:6c:9a:6e:eb:3c:bb:bd:f2:a3:a6:20:26:6a:82:b3:d3:
fb:5a:ce:fe:5e:db:42:5e:e4:a4:b2:36:48:2e:c3:6a:a0:ec:
35:5c:7a:88:d5:75:ae:28:f0:8e:ec:55:61:dd:e9:6d:db:b9:
9d:ec:91:95:81:11:c1:eb:92:5e:24:9c:07:33:d1:eb:22:fb:
7e:39:22:bb:6c:d6:52:a2:7e:c0:17:08:1c:50:34:8c:91:9c:
c8:a9:8f:6b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD98+t/EBo80ezdPDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAwNjEyMDAwMFoXDTIyMTExMTA1MDAwMFowLzEtMCsGA1UEAxMk
MzUwYTU5NmUtNTIwNy00NjBlLTlmMDUtMTFlMzBiZWEyZmRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQQlif3p4+Xjxd1wPEcn9L+TwQn7iQ0sahvS
Na2+RHZyvprJyTUMK2xdbkm5MXy6Nu/WpNV1Qq3g99S2qBDq7GEv0sfa7AfcApLZ
IqNhs0KAQa3modDuuS2Wa+DKShVFzNH1ivy85nKRl0lQL457gUnEOvJBToH2nseK
B5Ed65CFZzC9YwYiSrqdHIaXO91+JOwj+lrFjx4iC49Rhggl6zW5cMHmbZzaw0bF
7y+5D8vPF/oZc74erFBCt1ISEas9qbnMJgDBKxwo/eE6XzkOV+ZIwJiO1H4Zlu09
KYxuQLqOE4SIYR79/YLTr/7o5IXUuK1TqeevOBtCryzSeJE2+QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJncYCnP1hAd1Pmh/E09Wq4cUwq/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMWE0ZGQ4OGYtYzBkZi0z
OWIwLWIyMDYtNzIxOGQyYjg2NzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDZBgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALV2xaM1OGzr0bywgrFlprGPmnr3htdszpFS70eW5HUSXxXACCju5HOfs
JZM4hP/VSKoWT7fXmaHl/OHTZd7653m+jBDDHAIi/7Dw9m0+JlX/9WaxvX2dxr8X
0BYojgS2pauRCm3Zd1sEbSDxLy6OKn2CZFJWettLmpRc8lrysOTf85Bfru0yP+ti
+iXxvXlIAcDggT2pwOXtw9T7zoMQdc3LT6Fsmm7rPLu98qOmICZqgrPT+1rO/l7b
Ql7kpLI2SC7DaqDsNVx6iNV1rijwjuxVYd3pbdu5neyRlYERweuSXiScBzPR6yL7
fjkiu2zWUqJ+wBcIHFA0jJGcyKmPaw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:53 2025 by rpki-client