Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/254eeadb-69d5-379a-9550-ea4eeacfd046.roa
File: 254eeadb-69d5-379a-9550-ea4eeacfd046.roa (raw, json)
Hash identifier: 4Dliw/cRekLaPeggnMiNc5ctCXrD2Tp80Gio1D11Cbw=
Subject key identifier: 45:A0:D4:75:33:A1:12:91:18:E8:F0:09:C7:76:CA:76:51:DA:B3:23
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840745A6CCE2CF4A572A25F1D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/254eeadb-69d5-379a-9550-ea4eeacfd046.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 149.186.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:74:5a:6c:ce:2c:f4:a5:72:a2:5f:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=2a8d90bb-322e-4b43-9552-c275a9b22d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:04:05:2c:41:e9:cf:ce:ad:4b:7f:0b:e1:
94:79:d9:32:85:65:cd:e7:aa:97:3b:2b:46:29:ec:
6a:85:fa:38:9d:9f:8e:e8:06:16:3f:80:64:dc:bc:
05:69:f3:c3:aa:ee:dc:7f:13:0b:1b:39:c0:ee:0b:
c4:82:c1:8b:c6:db:f9:98:65:d1:6a:e3:9b:9f:95:
ea:5a:85:97:ae:0a:39:df:fa:ff:15:4d:11:f2:d0:
46:28:a7:c7:9e:d9:30:78:83:84:f6:f1:b5:ec:f1:
cc:4f:a5:df:30:64:f4:aa:85:4e:47:c3:3a:0d:ea:
03:be:e4:81:9b:e3:d1:5b:f5:fd:14:e7:1b:9a:61:
eb:3d:df:85:65:ce:80:dd:b7:60:58:b0:da:f0:48:
22:c0:90:47:5c:ab:7a:bf:b2:8e:31:3b:7f:f8:fe:
16:45:cc:d3:46:d4:ca:ee:ad:e5:13:e4:38:61:41:
87:65:52:54:6a:bd:a0:f0:10:93:c1:55:d8:12:a3:
d9:e7:45:82:67:bb:11:fc:70:27:db:12:4e:f9:4c:
a1:11:c4:db:86:f7:a4:f6:8c:02:ad:a9:dc:7f:8b:
78:2e:0e:f2:f6:4c:df:c1:99:a0:e8:13:0c:a2:27:
51:d5:1c:57:8f:21:30:e2:57:cf:87:dd:8c:9c:c0:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A0:D4:75:33:A1:12:91:18:E8:F0:09:C7:76:CA:76:51:DA:B3:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/254eeadb-69d5-379a-9550-ea4eeacfd046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
149.186.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:ec:41:d2:89:00:be:23:82:fd:51:97:00:d1:c1:19:12:2c:
31:8f:05:f8:c7:fa:0d:98:d2:ee:64:c9:92:8b:99:90:8b:f3:
3c:98:84:22:38:da:91:d0:73:a8:84:01:aa:06:57:32:98:e9:
67:c9:60:5f:a5:c8:ff:03:85:42:3a:4b:91:44:a2:6b:1b:db:
8a:76:58:d9:f1:79:9e:e0:a2:38:00:5e:a5:7d:ed:6d:c5:24:
4b:bc:9e:56:95:28:e9:93:87:99:cb:55:ed:30:11:d6:7a:c7:
c2:f5:37:0c:a5:e0:03:21:a8:48:a8:9e:ff:a5:25:b7:ed:1e:
6b:7f:c2:2b:d9:df:2f:42:0d:ab:8b:12:b9:0a:a2:30:20:58:
04:f9:28:35:43:69:78:c2:26:83:a2:c7:a9:9f:3d:7e:e4:6f:
99:15:8f:d6:36:bc:46:9f:58:8e:83:32:cc:35:46:4d:35:5b:
05:3f:6c:39:dd:2b:9a:6e:e4:2e:24:94:a3:0a:43:4b:ef:9f:
01:ac:fa:bb:78:4d:e8:df:38:58:4b:64:eb:43:d2:b9:57:3d:
72:9e:4a:70:99:88:a8:b1:de:46:3a:6f:f1:1b:be:d4:90:ff:
31:ec:c1:6e:54:da:4c:14:5d:a7:e6:77:65:eb:ca:e3:76:9a:
cd:87:ed:02
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB0WmzOLPSlcqJfHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwMjEyMDAwMFoXDTIzMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MmE4ZDkwYmItMzIyZS00YjQzLTk1NTItYzI3NWE5YjIyZDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBcEBSxB6c/OrUt/C+GUedkyhWXN56qXOytG
Kexqhfo4nZ+O6AYWP4Bk3LwFafPDqu7cfxMLGznA7gvEgsGLxtv5mGXRauObn5Xq
WoWXrgo53/r/FU0R8tBGKKfHntkweIOE9vG17PHMT6XfMGT0qoVOR8M6DeoDvuSB
m+PRW/X9FOcbmmHrPd+FZc6A3bdgWLDa8EgiwJBHXKt6v7KOMTt/+P4WRczTRtTK
7q3lE+Q4YUGHZVJUar2g8BCTwVXYEqPZ50WCZ7sR/HAn2xJO+UyhEcTbhvek9owC
rancf4t4Lg7y9kzfwZmg6BMMoidR1RxXjyEw4lfPh92MnMBLxwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEWg1HUzoRKRGOjwCcd2ynZR2rMjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjU0ZWVhZGItNjlkNS0z
NzlhLTk1NTAtZWE0ZWVhY2ZkMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlbowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPuxB0okAviOC/VGXANHBGRIsMY8F+Mf6DZjS7mTJkouZkIvzPJiEIjja
kdBzqIQBqgZXMpjpZ8lgX6XI/wOFQjpLkUSiaxvbinZY2fF5nuCiOABepX3tbcUk
S7yeVpUo6ZOHmctV7TAR1nrHwvU3DKXgAyGoSKie/6Ult+0ea3/CK9nfL0INq4sS
uQqiMCBYBPkoNUNpeMImg6LHqZ89fuRvmRWP1ja8Rp9YjoMyzDVGTTVbBT9sOd0r
mm7kLiSUowpDS++fAaz6u3hN6N84WEtk60PSuVc9cp5KcJmIqLHeRjpv8Ru+1JD/
MezBblTaTBRdp+Z3ZevK43aazYftAg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:24:50 2025 by rpki-client