Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24c2293b-f7d7-329d-83d9-fb2d862ce04e.roa
File: 24c2293b-f7d7-329d-83d9-fb2d862ce04e.roa (raw, json)
Hash identifier: FErx0+ZrE1wxCkVzuyBstHPpqaHHHwftZNrkhuMGq7A=
Subject key identifier: C8:10:F1:13:A7:A9:24:6C:57:1B:55:4E:20:1C:38:55:8E:88:47:42
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6F44661EFD55391831493BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24c2293b-f7d7-329d-83d9-fb2d862ce04e.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 65.8.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:44:66:1e:fd:55:39:18:31:49:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=4cf96f1d-57fc-4aeb-a80a-32487de38a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:dd:3f:40:3d:84:f3:36:f9:cb:ee:76:6e:
4c:41:4a:b9:e6:0d:5c:32:21:17:f5:af:8a:f7:c7:
75:57:53:4a:71:a9:c8:33:1a:53:8a:4e:e9:f8:bb:
d2:32:ef:73:b2:d0:61:14:58:6d:b6:a9:db:3a:ac:
bb:52:f2:1c:1a:54:5e:28:ad:1d:94:f4:82:65:61:
8e:e8:fa:d3:ff:aa:9a:57:21:81:0c:e6:41:e9:56:
c3:d6:f3:28:78:a5:39:06:08:13:e0:73:32:21:82:
df:cf:16:e7:24:31:74:20:c2:08:a3:06:26:e2:1c:
0b:b1:8c:8d:ab:56:02:08:78:3d:98:c3:41:42:24:
a1:be:65:53:ce:55:6c:c9:d2:3f:41:c7:bf:69:c9:
bf:35:c1:30:09:0b:42:e2:47:5d:38:f2:93:f9:58:
f7:ee:22:9d:7b:2b:3d:fe:31:6f:28:35:c5:78:88:
5b:72:1e:74:d7:91:47:83:90:c0:50:5c:f9:cb:2e:
e5:06:ec:d8:e7:ba:b3:fb:6b:8c:77:9e:b7:18:c9:
e5:e5:3a:73:e3:a0:85:83:e2:2c:47:d6:66:f6:ff:
f2:1f:7f:c5:e7:db:07:0f:0c:63:7d:90:c6:9f:d5:
01:e0:50:b6:2d:1d:10:47:63:e7:a8:29:70:b3:8f:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:10:F1:13:A7:A9:24:6C:57:1B:55:4E:20:1C:38:55:8E:88:47:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24c2293b-f7d7-329d-83d9-fb2d862ce04e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.8.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:2f:94:0d:ca:7e:63:a4:2e:f3:8d:87:cc:7e:c8:03:30:2d:
83:51:af:85:bf:c8:5b:98:2b:b1:08:c1:bd:d5:2b:78:05:c3:
14:fb:bf:89:7e:08:c1:f0:bb:e6:b0:88:9b:24:a4:57:81:2b:
2a:94:d2:a7:b3:98:59:15:7e:1e:5b:f3:c4:15:b3:4e:31:d4:
3a:ec:e7:a0:ce:99:f8:f1:c2:91:b0:22:ca:02:78:25:0f:16:
7d:d4:4b:0d:fb:fa:aa:a2:94:fc:17:94:bb:e8:82:d0:56:38:
cb:e9:aa:24:25:64:43:6d:4a:57:09:fa:c0:f9:84:4e:d1:6c:
eb:c0:e6:e0:1f:bf:30:46:66:15:25:8b:47:53:a1:5d:68:85:
e0:22:e7:d8:dd:22:dd:5e:f4:a0:e2:43:ee:60:00:60:d8:4b:
98:7a:3d:ce:83:02:db:e8:77:3b:4d:f1:cf:b4:9e:a9:f2:ac:
c1:82:81:15:5d:70:4a:ae:33:d9:1c:32:f6:75:6e:91:02:d3:
fe:87:52:e9:5a:ab:d7:58:c8:de:bb:9d:b6:ba:7e:d3:24:85:
ea:d0:7b:44:b1:66:cf:3f:42:e8:9a:a4:0e:47:78:09:6d:05:
6d:bc:96:51:9e:81:2d:6f:36:e9:be:d0:4a:00:39:4d:64:30:
81:d3:ec:b3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxvRGYe/VU5GDFJO8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NGNmOTZmMWQtNTdmYy00YWViLWE4MGEtMzI0ODdkZTM4YTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCDdP0A9hPM2+cvudm5MQUq55g1cMiEX9a+K
98d1V1NKcanIMxpTik7p+LvSMu9zstBhFFhttqnbOqy7UvIcGlReKK0dlPSCZWGO
6PrT/6qaVyGBDOZB6VbD1vMoeKU5BggT4HMyIYLfzxbnJDF0IMIIowYm4hwLsYyN
q1YCCHg9mMNBQiShvmVTzlVsydI/Qce/acm/NcEwCQtC4kddOPKT+Vj37iKdeys9
/jFvKDXFeIhbch5015FHg5DAUFz5yy7lBuzY57qz+2uMd563GMnl5Tpz46CFg+Is
R9Zm9v/yH3/F59sHDwxjfZDGn9UB4FC2LR0QR2PnqClws4+0dQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMgQ8ROnqSRsVxtVTiAcOFWOiEdCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjRjMjI5M2ItZjdkNy0z
MjlkLTgzZDktZmIyZDg2MmNlMDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCQQgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAS+UDcp+Y6Qu842HzH7IAzAtg1Gvhb/IW5grsQjBvdUreAXDFPu/iX4I
wfC75rCImySkV4ErKpTSp7OYWRV+HlvzxBWzTjHUOuznoM6Z+PHCkbAiygJ4JQ8W
fdRLDfv6qqKU/BeUu+iC0FY4y+mqJCVkQ21KVwn6wPmETtFs68Dm4B+/MEZmFSWL
R1OhXWiF4CLn2N0i3V70oOJD7mAAYNhLmHo9zoMC2+h3O03xz7SeqfKswYKBFV1w
Sq4z2Rwy9nVukQLT/odS6Vqr11jI3rudtrp+0ySF6tB7RLFmzz9C6JqkDkd4CW0F
bbyWUZ6BLW826b7QSgA5TWQwgdPssw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:09:54 2025 by rpki-client