Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23f1156f-ef59-3bd2-8da2-788fa383e8d6.roa
File: 23f1156f-ef59-3bd2-8da2-788fa383e8d6.roa (raw, json)
Hash identifier: +T1szp2i/99vDDvKCUO5OPfsvsz9yhsdXggaBcaB1xo=
Subject key identifier: 31:D3:B0:57:D3:9A:0C:67:AC:E1:AF:40:67:24:A7:AC:C2:0C:53:C2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBE381D3DBDA2F386DCD6BB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23f1156f-ef59-3bd2-8da2-788fa383e8d6.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 2620:107:4000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:38:1d:3d:bd:a2:f3:86:dc:d6:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=d44c7360-51af-472f-8960-cf2a1e50a572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:78:f2:e2:63:42:a6:53:03:6a:17:7e:9b:
0f:fe:0e:b2:a9:0c:eb:85:07:7c:d3:d5:52:10:82:
a6:0f:10:40:7d:62:4c:7b:e3:e6:57:12:d9:d8:6f:
05:f6:88:00:ee:a8:92:71:1e:6f:e5:93:f7:9a:0b:
a6:c0:5e:bf:d3:17:8c:f5:3c:8b:4e:6b:3d:86:9b:
c2:59:3a:b8:f4:1e:25:1b:05:3f:f0:e5:ea:c9:e4:
7d:99:1b:93:fd:9f:ab:ed:e8:b6:d8:71:d5:9d:b1:
b2:73:d2:af:44:7d:5b:10:8c:1f:d9:8d:a4:4b:b9:
09:ad:db:a2:73:66:ab:d6:b0:1f:92:a4:eb:8c:fa:
ab:45:8a:08:47:da:12:cb:8e:de:53:d2:58:21:2d:
34:30:b6:a9:6d:95:5a:42:5c:82:75:c9:35:b7:1c:
4e:c0:a7:cf:3c:bb:28:62:1e:52:4b:ab:40:fd:03:
2d:37:58:26:ce:ec:81:36:4e:78:c6:d5:77:f3:d6:
ec:65:29:52:37:48:bf:0e:80:9c:7f:ce:82:c1:52:
8e:2d:1a:19:42:6c:d8:6f:90:48:5d:5a:7a:6a:24:
6c:5d:d4:7d:fe:99:d0:62:5f:08:ad:c0:d1:3f:e7:
6f:55:b1:bd:ad:6e:75:d8:5c:15:e3:de:f0:a8:32:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D3:B0:57:D3:9A:0C:67:AC:E1:AF:40:67:24:A7:AC:C2:0C:53:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/23f1156f-ef59-3bd2-8da2-788fa383e8d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:107:4000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:ef:06:ee:2d:bb:af:4f:0f:f7:07:65:d7:4c:6f:c8:3f:d5:
19:45:e0:c0:bb:63:59:8f:4e:75:d3:50:1c:bc:5a:35:df:42:
99:b7:05:f4:dd:75:d5:f6:0d:94:13:69:94:ae:3d:96:d0:44:
15:03:1c:bf:23:e0:47:40:08:d8:9f:a1:03:7e:a4:0b:3e:01:
1d:8d:47:4a:03:35:b9:86:f4:b1:74:0c:b1:d7:2a:7f:76:9f:
c5:b7:35:cd:d1:4e:9f:70:94:e7:ef:ec:47:54:7e:a4:64:7d:
42:bd:d3:2a:d7:a3:d0:60:a9:ff:a8:6f:2d:a1:10:e8:bb:e2:
58:4d:36:8e:1f:99:36:cc:70:53:df:5d:3c:f4:1c:82:67:23:
f8:ce:b8:cb:42:73:cb:25:48:11:c3:df:6a:13:36:ff:9c:db:
6f:e2:8d:57:4e:b7:9d:8f:fc:aa:8c:bf:f3:14:9e:ad:55:af:
40:8d:23:b0:2b:03:f9:20:ac:6a:f0:00:b3:69:ac:16:fb:a7:
35:60:f0:a2:45:c0:ec:e2:d9:48:82:12:96:e7:d6:b0:91:01:
5a:57:48:9f:9b:b4:e8:35:e0:e0:a0:8c:c8:b7:65:02:8e:8e:
ed:bd:96:0e:4f:5d:12:ac:2a:3c:07:27:34:75:56:87:b2:e2:
25:35:64:8c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWDy+OB09vaLzhtzWu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZDQ0YzczNjAtNTFhZi00NzJmLTg5NjAtY2YyYTFlNTBhNTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6p48uJjQqZTA2oXfpsP/g6yqQzrhQd809VS
EIKmDxBAfWJMe+PmVxLZ2G8F9ogA7qiScR5v5ZP3mgumwF6/0xeM9TyLTms9hpvC
WTq49B4lGwU/8OXqyeR9mRuT/Z+r7ei22HHVnbGyc9KvRH1bEIwf2Y2kS7kJrdui
c2ar1rAfkqTrjPqrRYoIR9oSy47eU9JYIS00MLapbZVaQlyCdck1txxOwKfPPLso
Yh5SS6tA/QMtN1gmzuyBNk54xtV389bsZSlSN0i/DoCcf86CwVKOLRoZQmzYb5BI
XVp6aiRsXdR9/pnQYl8IrcDRP+dvVbG9rW512FwV497wqDK9AQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDHTsFfTmgxnrOGvQGckp6zCDFPCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjNmMTE1NmYtZWY1OS0z
YmQyLThkYTItNzg4ZmEzODNlOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABB0AA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKPvBu4tu69PD/cHZddMb8g/1RlF4MC7Y1mPTnXTUBy8WjXfQpm3
BfTdddX2DZQTaZSuPZbQRBUDHL8j4EdACNifoQN+pAs+AR2NR0oDNbmG9LF0DLHX
Kn92n8W3Nc3RTp9wlOfv7EdUfqRkfUK90yrXo9Bgqf+oby2hEOi74lhNNo4fmTbM
cFPfXTz0HIJnI/jOuMtCc8slSBHD32oTNv+c22/ijVdOt52P/KqMv/MUnq1Vr0CN
I7ArA/kgrGrwALNprBb7pzVg8KJFwOzi2UiCEpbn1rCRAVpXSJ+btOg14OCgjMi3
ZQKOju29lg5PXRKsKjwHJzR1Voey4iU1ZIw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:47 2025 by rpki-client