Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27e4b953-4fe1-3c25-82b9-af9de2294d3d.roa
File: 27e4b953-4fe1-3c25-82b9-af9de2294d3d.roa (raw, json)
Hash identifier: MRNqQLx8CQsYAu637yGd2Gg29eZFnWeNBCigur3uSiI=
Subject key identifier: 9D:89:A6:9A:1C:15:AA:33:5F:3B:6C:C5:4C:19:43:5C:72:F3:92:6D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F3DD0EB8B5B5999B16ED93DC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27e4b953-4fe1-3c25-82b9-af9de2294d3d.roa
Signing time: Tue 13 Sep 2022 12:00:00 +0000
ROA not before: Tue 13 Sep 2022 12:00:00 +0000
ROA not after: Wed 19 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 152.24.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3d:d0:eb:8b:5b:59:99:b1:6e:d9:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 13 12:00:00 2022 GMT
Not After : Oct 19 04:00:00 2022 GMT
Subject: CN=23f71deb-45a0-4fe4-a517-b0e21983a82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:89:9b:0a:de:53:f2:2d:3d:98:cd:e6:cc:
a6:3a:53:8d:65:68:76:00:a8:2c:41:d4:26:81:54:
e8:cb:ec:ea:3e:10:6d:4c:d9:27:6c:79:4e:1f:0a:
a8:ac:25:91:a8:55:89:b3:e7:a3:b1:a9:3e:9f:f9:
eb:16:3f:16:a0:74:28:f3:29:75:74:06:ec:c7:c9:
73:0d:44:54:94:9f:bf:c8:08:90:22:f5:47:26:a7:
7e:b8:f3:96:f6:94:6a:36:ac:97:fc:68:b3:60:a4:
8b:61:80:46:71:d8:d8:4c:c6:6c:ae:2b:6c:0b:f8:
33:f5:ca:d8:b4:98:95:90:69:60:2d:77:25:a1:92:
f9:2a:8d:e1:e9:0c:0c:b3:82:64:cf:d6:be:57:ea:
81:c5:09:c0:9f:00:1a:a9:2e:79:16:74:18:1d:92:
ad:5c:0d:b1:d7:8e:37:c4:03:77:5e:1c:c8:d7:35:
57:fe:03:b1:68:df:40:b5:81:77:55:c1:ef:d2:78:
72:af:63:ca:c7:ea:0d:59:2c:85:94:25:55:29:d5:
56:18:a2:e6:4c:20:15:fe:d3:05:7d:18:d1:32:25:
a9:50:5e:f1:bb:47:7b:f8:5b:4f:a8:f9:60:97:40:
cb:14:ac:e1:e1:72:db:56:98:03:11:6b:45:b3:e4:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:89:A6:9A:1C:15:AA:33:5F:3B:6C:C5:4C:19:43:5C:72:F3:92:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/27e4b953-4fe1-3c25-82b9-af9de2294d3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.24.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:e1:a4:23:ea:88:b9:c4:11:a8:0b:85:a3:c0:a4:d5:ae:2d:
f5:43:94:fd:f0:34:7f:e3:e0:dd:ea:a0:1c:54:50:a5:46:29:
f3:7d:66:9d:13:35:e9:cb:3c:fb:69:47:c0:bd:55:b2:fe:a1:
f0:ea:66:f6:97:e3:db:85:d4:25:8e:31:aa:e2:50:41:01:07:
e1:d1:bb:53:c0:d4:77:a4:7c:4f:cd:d7:38:06:c1:ba:58:52:
f1:7f:08:60:85:e7:93:c7:77:d2:6f:92:06:12:6b:3e:a1:ba:
3f:d2:32:1d:93:31:9c:12:bc:30:37:cf:8b:43:3e:39:c2:38:
ee:fe:34:36:0f:a2:85:9a:43:9c:aa:9f:28:bd:f5:88:ff:1d:
e5:b2:3a:b0:d0:52:a7:5c:0e:2d:c0:4b:87:6a:81:91:4b:d2:
44:cc:55:cd:3f:ab:c7:2d:57:f2:2d:2b:c1:23:0c:34:70:21:
99:3b:63:13:3b:07:99:7e:95:4d:a5:9e:72:98:34:69:79:8b:
6d:70:72:0c:85:2a:da:d1:30:20:21:ba:8f:2a:2a:d4:bc:a4:
e2:c4:e3:16:3d:7a:4a:22:ec:6c:b2:85:01:24:94:d0:97:b4:
48:9f:3f:96:19:f9:fd:be:89:4f:c2:ff:35:15:3d:c5:1a:37:
02:b1:cf:12
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD890OuLW1mZsW7ZPcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkxMzEyMDAwMFoXDTIyMTAxOTA0MDAwMFowLzEtMCsGA1UEAxMk
MjNmNzFkZWItNDVhMC00ZmU0LWE1MTctYjBlMjE5ODNhODJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo2JmwreU/ItPZjN5symOlONZWh2AKgsQdQm
gVToy+zqPhBtTNknbHlOHwqorCWRqFWJs+ejsak+n/nrFj8WoHQo8yl1dAbsx8lz
DURUlJ+/yAiQIvVHJqd+uPOW9pRqNqyX/GizYKSLYYBGcdjYTMZsritsC/gz9crY
tJiVkGlgLXcloZL5Ko3h6QwMs4Jkz9a+V+qBxQnAnwAaqS55FnQYHZKtXA2x1443
xAN3XhzI1zVX/gOxaN9AtYF3VcHv0nhyr2PKx+oNWSyFlCVVKdVWGKLmTCAV/tMF
fRjRMiWpUF7xu0d7+FtPqPlgl0DLFKzh4XLbVpgDEWtFs+QEjQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ2JppocFaozXztsxUwZQ1xy85JtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjdlNGI5NTMtNGZlMS0z
YzI1LTgyYjktYWY5ZGUyMjk0ZDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALOGkI+qIucQRqAuFo8Ck1a4t9UOU/fA0f+Pg3eqgHFRQpUYp831mnRM1
6cs8+2lHwL1Vsv6h8Opm9pfj24XUJY4xquJQQQEH4dG7U8DUd6R8T83XOAbBulhS
8X8IYIXnk8d30m+SBhJrPqG6P9IyHZMxnBK8MDfPi0M+OcI47v40Ng+ihZpDnKqf
KL31iP8d5bI6sNBSp1wOLcBLh2qBkUvSRMxVzT+rxy1X8i0rwSMMNHAhmTtjEzsH
mX6VTaWecpg0aXmLbXByDIUq2tEwICG6jyoq1Lyk4sTjFj16SiLsbLKFASSU0Je0
SJ8/lhn5/b6JT8L/NRU9xRo3ArHPEg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 18:42:42 2025 by rpki-client