Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ef09af1-bb04-3c47-848a-cfaa0a496c72.roa
File: 1ef09af1-bb04-3c47-848a-cfaa0a496c72.roa (raw, json)
Hash identifier: TnAh4vft6Vf+qimlCoIcDkqzTrodzHl+kwI5zNrjYUA=
Subject key identifier: 1F:68:58:E3:76:2C:2A:4F:6F:E8:01:EF:B2:E1:05:A6:1F:AB:7D:36
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A968D5A370AD5322E0C2020
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ef09af1-bb04-3c47-848a-cfaa0a496c72.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 162.254.72.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:96:8d:5a:37:0a:d5:32:2e:0c:20:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=e67c166f-08c2-4a11-82b7-20ef4d453bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6a:fc:8e:5a:71:35:bf:ab:8d:55:eb:1e:03:
cb:3e:29:c5:13:31:94:b6:d3:91:d4:9e:a4:fb:ef:
b6:2d:98:2f:5a:cd:ff:98:ce:8d:05:54:78:5b:1a:
0b:2e:2d:a6:49:13:48:2a:e1:d3:a6:e0:db:f1:aa:
6a:12:0f:93:57:49:91:61:a9:b7:31:70:b1:6f:ac:
1c:72:3c:94:9c:f7:58:49:56:a8:1a:e7:9d:6f:44:
29:3c:ae:9b:23:04:7e:1f:33:0f:14:ab:b6:d5:71:
ea:09:de:a7:89:ac:84:4c:7d:68:2c:83:8e:b9:54:
83:10:1e:c7:d9:53:34:41:95:f7:6f:81:a0:06:db:
4b:9b:d5:34:75:f6:71:f1:57:69:6a:52:f8:0e:00:
3d:e9:25:55:71:82:43:f0:8e:f8:e9:d0:66:b6:ff:
24:b4:d9:32:23:00:f6:1f:f6:c9:96:d7:fd:a3:be:
4f:cb:58:85:11:69:80:52:8e:dd:e6:e5:a2:14:d7:
ac:fc:08:26:11:55:93:8c:d0:04:db:bf:81:fc:12:
5c:57:91:52:9d:5a:88:9f:cd:04:bb:34:0d:ec:99:
f3:24:50:e8:6a:d9:db:09:20:70:4e:aa:cb:82:b9:
d5:d9:66:e8:cc:bb:0c:aa:60:50:46:8d:96:b6:b2:
b7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:68:58:E3:76:2C:2A:4F:6F:E8:01:EF:B2:E1:05:A6:1F:AB:7D:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ef09af1-bb04-3c47-848a-cfaa0a496c72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
162.254.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:9b:92:46:3b:8f:0c:59:6a:60:11:1a:f3:13:bb:9e:fe:6d:
8f:31:8c:54:6a:f1:5f:b1:12:8f:b7:72:7f:58:db:5c:f6:6b:
0e:94:36:21:8d:2b:da:67:18:33:b2:d0:b4:7c:fd:70:01:c2:
df:a4:bb:4f:c4:d9:d5:d1:af:71:f4:d6:ed:63:0a:ac:77:32:
6a:56:98:77:ed:1b:20:5f:72:bc:db:7d:35:83:d9:7d:8c:5e:
f0:12:54:0b:ac:50:db:a1:93:5c:54:5f:e4:12:87:21:99:28:
2e:25:89:f6:b9:16:4b:84:41:67:c6:61:db:20:79:b0:99:87:
59:84:61:16:b3:80:17:27:b4:44:ff:12:17:96:2e:9b:cd:0c:
06:88:97:ce:d6:c0:a7:62:69:5a:0b:a6:b7:06:f7:bb:3d:47:
eb:26:2e:6a:a3:9e:3c:75:f7:5a:a3:bf:fc:a0:2e:14:58:95:
87:f9:2a:8d:3b:95:51:84:aa:31:01:ba:85:cb:6c:9f:7c:ac:
33:52:2e:b5:f1:d9:69:2c:3d:15:ac:d9:bb:77:32:a6:20:ae:
f5:b0:96:f1:15:dc:82:3b:d4:80:8d:34:4e:4d:8d:75:c2:f9:
74:c9:fa:a2:ca:da:5d:a1:bf:e8:3e:c5:5f:e6:0a:39:61:f4:
61:fa:1a:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1alo1aNwrVMi4MICAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZTY3YzE2NmYtMDhjMi00YTExLTgyYjctMjBlZjRkNDUzYmQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGr8jlpxNb+rjVXrHgPLPinFEzGUttOR1J6k
+++2LZgvWs3/mM6NBVR4WxoLLi2mSRNIKuHTpuDb8apqEg+TV0mRYam3MXCxb6wc
cjyUnPdYSVaoGuedb0QpPK6bIwR+HzMPFKu21XHqCd6niayETH1oLIOOuVSDEB7H
2VM0QZX3b4GgBttLm9U0dfZx8VdpalL4DgA96SVVcYJD8I746dBmtv8ktNkyIwD2
H/bJltf9o75Py1iFEWmAUo7d5uWiFNes/AgmEVWTjNAE27+B/BJcV5FSnVqIn80E
uzQN7JnzJFDoatnbCSBwTqrLgrnV2WbozLsMqmBQRo2WtrK3NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB9oWON2LCpPb+gB77LhBaYfq302MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMWVmMDlhZjEtYmIwNC0z
YzQ3LTg0OGEtY2ZhYTBhNDk2YzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDov5IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALWbkkY7jwxZamARGvMTu57+bY8xjFRq8V+xEo+3cn9Y21z2aw6UNiGN
K9pnGDOy0LR8/XABwt+ku0/E2dXRr3H01u1jCqx3MmpWmHftGyBfcrzbfTWD2X2M
XvASVAusUNuhk1xUX+QShyGZKC4lifa5FkuEQWfGYdsgebCZh1mEYRazgBcntET/
EheWLpvNDAaIl87WwKdiaVoLprcG97s9R+smLmqjnjx191qjv/ygLhRYlYf5Ko07
lVGEqjEBuoXLbJ98rDNSLrXx2WksPRWs2bt3MqYgrvWwlvEV3II71ICNNE5NjXXC
+XTJ+qLK2l2hv+g+xV/mCjlh9GH6GoQ=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:26 2025 by rpki-client