Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fa44002-b942-32ec-9194-819def734997.roa
File: 1fa44002-b942-32ec-9194-819def734997.roa (raw, json)
Hash identifier: sC+sw2YJqW01pTTszHVdYOXnhTArxk4ziVeEcGHTdAk=
Subject key identifier: 98:69:32:9B:1D:15:FE:1F:BE:FC:42:04:CB:EB:A1:89:42:64:A8:BB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D339E52785CDA19516F9B2940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fa44002-b942-32ec-9194-819def734997.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:9e:52:78:5c:da:19:51:6f:9b:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=b02089d6-91bd-412f-9714-d2043bbace4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:86:26:be:62:aa:9c:ec:e3:96:bc:cf:3e:42:
2b:42:58:a2:2a:98:00:b6:4b:0f:51:96:83:3e:fb:
b5:26:4a:fb:35:93:ce:ca:93:99:71:84:0c:b9:d8:
0a:ee:bb:b7:d2:87:fc:c5:9a:44:25:07:b4:f4:ae:
3b:ef:d0:63:7e:ce:bc:e6:15:22:aa:db:2b:99:10:
da:a4:4e:96:52:41:3b:fa:0d:33:23:84:4b:e9:39:
a5:6a:3c:ad:d0:98:fc:71:31:a0:bd:2f:3c:36:c5:
3c:bf:3a:0d:b8:4f:0c:e1:2a:be:3a:8f:11:5b:00:
02:89:67:c0:9c:da:61:e7:a3:22:49:8a:64:b1:7e:
da:df:07:d4:0d:17:20:c2:13:c6:25:4e:c5:34:ce:
5e:37:b4:57:b0:8b:4e:77:85:eb:cf:6a:ea:6d:e7:
a2:93:e8:4a:1c:05:3a:96:e9:7a:24:cc:f1:62:a5:
21:3a:75:5d:b3:69:bd:46:c6:d3:ca:42:dc:42:8b:
86:46:23:66:71:ff:98:ab:ef:32:67:0f:78:54:90:
fe:01:18:23:59:7c:8e:52:c3:4b:fd:18:73:b1:c0:
cf:59:89:8d:30:3e:9a:bf:ff:e2:c9:df:81:d0:60:
59:6d:7a:31:23:1d:a6:9f:7e:8e:1b:bc:0e:aa:b0:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:32:9B:1D:15:FE:1F:BE:FC:42:04:CB:EB:A1:89:42:64:A8:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1fa44002-b942-32ec-9194-819def734997.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:eb:64:40:b4:5a:01:cc:a1:34:43:24:9e:c7:60:9b:16:7d:
f7:5d:47:74:88:67:d8:35:27:7e:de:13:e7:83:e8:9f:56:52:
e1:e3:7a:76:e7:ca:4f:24:95:7a:6e:8d:e1:86:ab:e9:24:5b:
c3:a6:15:ea:55:20:d5:9d:1c:45:03:d5:00:12:0a:ef:a9:0a:
85:e3:b5:c6:f1:7c:97:31:b7:1b:43:4a:bd:1e:9c:24:c9:26:
cd:56:29:98:b0:ac:62:97:ff:9a:d4:44:c7:41:f3:40:8e:c0:
ba:37:8a:e6:9d:1b:a9:00:67:34:32:62:ed:fc:3e:ab:35:f4:
3b:ac:9c:dd:b4:9f:45:12:c7:fb:fc:81:0e:07:43:40:73:ac:
58:ee:e8:87:24:eb:a4:2b:72:9d:82:56:ee:80:41:e2:4e:d1:
ec:e3:d9:73:92:91:b2:09:83:f9:2c:c1:fa:c5:af:db:47:71:
d7:d0:fd:f6:e3:10:bc:b2:30:8a:5a:c2:02:a4:7e:c5:77:21:
df:9a:e9:3d:f9:c0:21:1e:27:eb:79:99:1a:f7:a6:ae:16:70:
cc:e9:f9:fd:49:7a:11:08:dc:9e:e9:de:2e:5e:79:7a:6d:93:
ee:09:fc:7e:2c:62:1d:de:0a:8d:29:71:19:f4:e0:ee:79:67:
78:1c:11:6c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0znlJ4XNoZUW+bKUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
YjAyMDg5ZDYtOTFiZC00MTJmLTk3MTQtZDIwNDNiYmFjZTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIYmvmKqnOzjlrzPPkIrQliiKpgAtksPUZaD
Pvu1Jkr7NZPOypOZcYQMudgK7ru30of8xZpEJQe09K4779Bjfs685hUiqtsrmRDa
pE6WUkE7+g0zI4RL6Tmlajyt0Jj8cTGgvS88NsU8vzoNuE8M4Sq+Oo8RWwACiWfA
nNph56MiSYpksX7a3wfUDRcgwhPGJU7FNM5eN7RXsItOd4Xrz2rqbeeik+hKHAU6
lul6JMzxYqUhOnVds2m9RsbTykLcQouGRiNmcf+Yq+8yZw94VJD+ARgjWXyOUsNL
/RhzscDPWYmNMD6av//iyd+B0GBZbXoxIx2mn36OG7wOqrAYYQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJhpMpsdFf4fvvxCBMvroYlCZKi7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMWZhNDQwMDItYjk0Mi0z
MmVjLTkxOTQtODE5ZGVmNzM0OTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCZBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAs+tkQLRaAcyhNEMknsdgmxZ9911HdIhn2DUnft4T54Pon1ZS4eN6dufK
TySVem6N4Yar6SRbw6YV6lUg1Z0cRQPVABIK76kKheO1xvF8lzG3G0NKvR6cJMkm
zVYpmLCsYpf/mtREx0HzQI7AujeK5p0bqQBnNDJi7fw+qzX0O6yc3bSfRRLH+/yB
DgdDQHOsWO7ohyTrpCtynYJW7oBB4k7R7OPZc5KRsgmD+SzB+sWv20dx19D99uMQ
vLIwilrCAqR+xXch35rpPfnAIR4n63mZGvemrhZwzOn5/Ul6EQjcnuneLl55em2T
7gn8fixiHd4KjSlxGfTg7nlneBwRbA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:10 2025 by rpki-client