Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21f7ab1c-ac9c-386e-b211-5e7d45dbaaff.roa
File: 21f7ab1c-ac9c-386e-b211-5e7d45dbaaff.roa (raw, json)
Hash identifier: mJXd0QcZ0ISAWB6zePnSf7bcJi+s3BcMHB4j9i8pXgQ=
Subject key identifier: EC:21:F9:CF:17:B3:A7:AE:95:76:44:F8:F5:7E:34:4F:8A:47:BE:00
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E2A1AAC1EE0C842CBDEDE0F60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21f7ab1c-ac9c-386e-b211-5e7d45dbaaff.roa
Signing time: Mon 06 Jun 2022 12:00:00 +0000
ROA not before: Mon 06 Jun 2022 12:00:00 +0000
ROA not after: Tue 12 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 198.13.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:2a:1a:ac:1e:e0:c8:42:cb:de:de:0f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 6 12:00:00 2022 GMT
Not After : Jul 12 04:00:00 2022 GMT
Subject: CN=77bd5ec5-d964-48c3-afe8-0e40512b477a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:a0:8b:fb:08:cb:c4:30:f3:06:f3:09:d9:
75:4f:87:fe:72:17:85:07:54:99:ec:fb:b0:38:15:
52:4b:eb:51:05:34:40:bc:25:20:6a:9f:8b:70:b4:
5c:0e:fd:fd:ec:a6:f9:c7:a5:bc:5f:91:35:26:84:
80:24:77:e1:ec:93:37:98:a6:bd:a9:5d:13:c0:3e:
ba:a7:e3:e8:45:ef:d4:a1:56:fe:60:60:a9:da:0f:
df:93:e7:78:4e:6c:5b:2c:12:03:25:c3:fd:99:cb:
13:2e:d8:76:ba:fc:57:fa:2c:2e:17:67:9c:68:ad:
7b:a8:2b:7c:44:a0:95:5e:5b:19:3a:5c:ca:c7:f0:
be:2b:6a:70:e0:99:06:34:a2:f4:28:ef:e2:61:4b:
c0:f5:06:02:ff:92:48:48:2a:0e:ce:6a:74:ce:b2:
69:97:5b:b5:9e:fc:6a:34:fe:57:0d:91:90:d0:f0:
ca:80:c2:c2:d6:12:e7:24:9a:f8:15:60:45:20:ba:
37:39:38:a6:6b:28:d7:68:a1:f6:32:92:cc:60:0c:
25:72:fb:c8:47:25:97:80:ed:4b:ee:37:f6:e9:a6:
d6:95:be:d2:82:04:5b:43:06:b2:6a:50:2f:ac:cd:
d7:98:a6:2b:d9:c7:d8:25:cf:c8:a3:6f:99:7c:13:
4f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:21:F9:CF:17:B3:A7:AE:95:76:44:F8:F5:7E:34:4F:8A:47:BE:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/21f7ab1c-ac9c-386e-b211-5e7d45dbaaff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.13.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:02:b1:b7:02:c1:3e:db:0a:ca:c8:6d:f0:a0:7d:b3:47:9d:
1a:7f:0b:45:f4:bb:ef:e8:cb:f4:1d:99:5a:4c:8b:46:17:2b:
b5:8d:18:cf:d3:a9:4d:76:4c:8a:89:5f:da:be:7a:ba:cc:11:
53:09:35:24:2a:2b:6a:05:9e:35:76:33:c7:46:d4:ed:d7:56:
5a:03:0f:84:74:e4:b7:d6:36:5d:44:77:78:28:31:92:bb:c1:
7b:9f:50:6c:45:85:4b:aa:f7:2a:23:81:b0:2e:a2:15:64:34:
61:c7:67:e1:ad:50:69:6b:ad:42:05:28:7d:41:ad:a1:f3:12:
5a:ab:b5:ab:2b:43:c2:af:2a:b0:de:2d:40:a7:20:02:20:e9:
d0:13:b0:77:c7:a7:53:f2:08:64:8e:f9:b2:0b:b8:56:6d:68:
97:9e:06:93:60:09:25:e7:88:4d:68:7e:1b:c5:75:c7:94:5e:
9d:62:55:62:f6:34:44:92:43:09:f1:35:28:81:31:02:fb:46:
ed:9e:1c:a0:81:34:0f:c8:26:9b:8d:53:6e:25:73:bf:2a:f1:
82:88:55:a1:f3:b8:d3:c9:38:70:d5:b3:ff:ee:fa:bf:a8:08:
9b:a0:18:ea:69:e1:a9:43:f3:56:09:47:88:dc:57:b6:50:85:
23:82:2f:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4qGqwe4MhCy97eD2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwNjEyMDAwMFoXDTIyMDcxMjA0MDAwMFowLzEtMCsGA1UEAxMk
NzdiZDVlYzUtZDk2NC00OGMzLWFmZTgtMGU0MDUxMmI0NzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr2gi/sIy8Qw8wbzCdl1T4f+cheFB1SZ7Puw
OBVSS+tRBTRAvCUgap+LcLRcDv397Kb5x6W8X5E1JoSAJHfh7JM3mKa9qV0TwD66
p+PoRe/UoVb+YGCp2g/fk+d4TmxbLBIDJcP9mcsTLth2uvxX+iwuF2ecaK17qCt8
RKCVXlsZOlzKx/C+K2pw4JkGNKL0KO/iYUvA9QYC/5JISCoOzmp0zrJpl1u1nvxq
NP5XDZGQ0PDKgMLC1hLnJJr4FWBFILo3OTimayjXaKH2MpLMYAwlcvvIRyWXgO1L
7jf26abWlb7SggRbQwayalAvrM3XmKYr2cfYJc/Io2+ZfBNPeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOwh+c8Xs6eulXZE+PV+NE+KR74AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjFmN2FiMWMtYWM5Yy0z
ODZlLWIyMTEtNWU3ZDQ1ZGJhYWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExg0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMCsbcCwT7bCsrIbfCgfbNHnRp/C0X0u+/oy/QdmVpMi0YXK7WNGM/T
qU12TIqJX9q+errMEVMJNSQqK2oFnjV2M8dG1O3XVloDD4R05LfWNl1Ed3goMZK7
wXufUGxFhUuq9yojgbAuohVkNGHHZ+GtUGlrrUIFKH1BraHzElqrtasrQ8KvKrDe
LUCnIAIg6dATsHfHp1PyCGSO+bILuFZtaJeeBpNgCSXniE1ofhvFdceUXp1iVWL2
NESSQwnxNSiBMQL7Ru2eHKCBNA/IJpuNU24lc78q8YKIVaHzuNPJOHDVs//u+r+o
CJugGOpp4alD81YJR4jcV7ZQhSOCL3U=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:55:52 2025 by rpki-client