Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/255af25d-2e8c-3418-8bba-9e130d15ca20.roa
File: 255af25d-2e8c-3418-8bba-9e130d15ca20.roa (raw, json)
Hash identifier: Ji3Cuku/rrwS+6DiB4X9CEDxvVCmEV9WWZJHSxrlX5o=
Subject key identifier: 03:7D:FC:E3:56:43:4F:DE:80:F2:73:90:35:89:E0:FC:AB:75:DD:4E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408EE3D5E684433E989E939C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/255af25d-2e8c-3418-8bba-9e130d15ca20.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 70.240.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8e:e3:d5:e6:84:43:3e:98:9e:93:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=9b7d4c5f-1913-4672-a575-d524156edd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:63:73:96:0d:b6:f9:d8:36:87:47:0c:97:41:
53:5a:f6:35:95:fd:20:38:de:ae:f1:96:a5:47:2b:
6d:de:36:09:3e:a6:4d:3e:95:b6:3d:13:5e:45:99:
38:71:db:ae:2b:1e:c0:1f:87:90:75:90:f0:94:25:
88:65:d6:b6:28:67:e1:82:b2:af:06:78:bb:7d:b7:
ce:2d:3b:c0:01:db:5e:1f:11:40:85:09:df:55:e6:
5f:cf:94:d1:d7:d4:9c:a9:dd:ae:a7:6c:67:b9:91:
d5:c2:1f:ec:99:0d:1c:a6:1a:c2:05:b6:45:c0:6b:
a4:29:36:10:d2:ca:7d:fb:e4:0f:a6:27:8f:dc:79:
d8:b9:3b:88:cb:dc:94:20:d4:23:8d:cc:a4:e0:7a:
d6:64:a3:a3:61:f1:f7:0e:f1:cc:de:d5:c7:bd:ea:
e0:73:41:46:1e:17:bf:79:6d:4b:0b:84:f1:6f:21:
34:da:0e:25:1e:ac:2e:15:73:cc:b4:f0:8b:54:b8:
67:da:2b:2a:a2:4d:d3:81:01:ef:53:25:4d:14:3a:
2e:7a:10:a4:f8:ff:77:ae:7f:e6:75:75:6c:1a:0e:
c3:a0:4f:f4:0c:cd:47:d7:06:39:fe:e0:be:50:62:
9d:ab:6a:92:66:1f:a5:fa:6c:f1:45:89:19:71:be:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7D:FC:E3:56:43:4F:DE:80:F2:73:90:35:89:E0:FC:AB:75:DD:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/255af25d-2e8c-3418-8bba-9e130d15ca20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.240.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:8f:0c:61:29:d3:34:4e:72:c0:4e:08:a5:fe:0e:2f:60:f3:
e8:fe:38:d8:47:90:ca:4f:e2:38:0d:37:ea:e3:6b:55:d6:b1:
e2:26:b7:78:b3:0c:ef:73:d9:7a:9b:0f:45:29:1a:97:4e:1a:
c8:32:4a:7e:fb:b4:65:60:f3:68:e6:57:cb:15:df:ae:2c:93:
f6:97:6d:3a:88:65:49:7f:d5:37:c6:4a:1a:62:38:9a:26:45:
bd:9a:ae:24:f2:17:29:8e:e4:68:ae:cd:e7:b2:25:b9:5c:81:
f3:1a:f4:50:3b:93:31:32:db:95:e6:4a:1f:08:43:74:69:ec:
c2:ac:a3:f6:63:d2:4c:fb:d6:6f:5f:2e:05:1f:40:1d:e2:d3:
2b:8e:4b:97:bc:9c:7f:b2:19:aa:79:03:23:68:00:58:28:ad:
53:01:0e:e5:0c:10:3b:96:67:1e:53:20:28:f1:e6:0b:28:7c:
8e:30:67:2c:62:cd:1a:6d:b4:47:30:8d:92:75:3e:68:56:3f:
4b:a9:22:28:ea:7d:43:91:09:9e:0d:26:ae:2e:46:25:e6:b4:
38:4e:75:fd:4a:c0:2f:41:ed:a7:b4:af:36:59:19:27:2c:52:
2b:3d:e6:fd:6f:8a:c3:d3:c6:9a:08:1f:54:40:de:0f:5b:cf:
ab:7a:bd:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECO49XmhEM+mJ6TnAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMjEyMDAwMFoXDTIzMDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
OWI3ZDRjNWYtMTkxMy00NjcyLWE1NzUtZDUyNDE1NmVkZDZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGNzlg22+dg2h0cMl0FTWvY1lf0gON6u8Zal
Rytt3jYJPqZNPpW2PRNeRZk4cduuKx7AH4eQdZDwlCWIZda2KGfhgrKvBni7fbfO
LTvAAdteHxFAhQnfVeZfz5TR19Scqd2up2xnuZHVwh/smQ0cphrCBbZFwGukKTYQ
0sp9++QPpieP3HnYuTuIy9yUINQjjcyk4HrWZKOjYfH3DvHM3tXHvergc0FGHhe/
eW1LC4TxbyE02g4lHqwuFXPMtPCLVLhn2isqok3TgQHvUyVNFDouehCk+P93rn/m
dXVsGg7DoE/0DM1H1wY5/uC+UGKdq2qSZh+l+mzxRYkZcb5J2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAN9/ONWQ0/egPJzkDWJ4Pyrdd1OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjU1YWYyNWQtMmU4Yy0z
NDE4LThiYmEtOWUxMzBkMTVjYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRvBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSPDGEp0zROcsBOCKX+Di9g8+j+ONhHkMpP4jgNN+rja1XWseImt3iz
DO9z2XqbD0UpGpdOGsgySn77tGVg82jmV8sV364sk/aXbTqIZUl/1TfGShpiOJom
Rb2ariTyFymO5GiuzeeyJblcgfMa9FA7kzEy25XmSh8IQ3Rp7MKso/Zj0kz71m9f
LgUfQB3i0yuOS5e8nH+yGap5AyNoAFgorVMBDuUMEDuWZx5TICjx5gsofI4wZyxi
zRpttEcwjZJ1PmhWP0upIijqfUORCZ4NJq4uRiXmtDhOdf1KwC9B7ae0rzZZGScs
Uis95v1visPTxpoIH1RA3g9bz6t6vWk=
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:26:30 2025 by rpki-client