Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2818031b-4933-3e3e-b1a1-a692e911c1c1.roa
File: 2818031b-4933-3e3e-b1a1-a692e911c1c1.roa (raw, json)
Hash identifier: M2ZQbnv79cAA3m6aldMU1ygUkjzhEoQlPw0/DVftQtI=
Subject key identifier: 0E:34:E9:4B:4D:3B:74:B7:5F:23:6D:34:36:80:55:6E:84:B7:4C:18
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD8365B7548460527672E62C6
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2818031b-4933-3e3e-b1a1-a692e911c1c1.roa
Signing time: Sun 08 May 2022 12:00:00 +0000
ROA not before: Sun 08 May 2022 12:00:00 +0000
ROA not after: Mon 13 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 153.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d8:36:5b:75:48:46:05:27:67:2e:62:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 8 12:00:00 2022 GMT
Not After : Jun 13 04:00:00 2022 GMT
Subject: CN=3a667561-e7eb-495f-b241-9e5c21c9d3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:b3:01:57:d1:d5:1b:4a:b7:d3:cc:a3:2e:
0f:a9:aa:ff:db:02:d2:fe:31:56:35:2c:81:aa:0c:
5f:88:40:cf:ef:88:f0:d0:4f:1d:e5:dc:09:44:12:
8b:4e:9d:b6:2f:45:e8:44:cf:84:f7:d1:be:68:d5:
45:81:23:29:cf:f1:d5:48:87:40:8f:ec:85:e4:50:
28:48:a4:03:22:d9:2e:7d:f6:e4:e0:35:8f:7f:93:
c9:dc:33:4e:5a:1c:59:4e:af:75:ae:69:2a:31:77:
c9:dd:37:ec:1c:64:f1:07:1d:2f:4b:69:db:25:94:
a6:d5:25:1c:74:f5:c2:91:77:e0:31:0d:f9:b3:2f:
31:87:0f:54:aa:2b:e2:6c:d9:f7:45:05:e9:85:33:
19:cf:9e:ad:17:fd:46:f9:ec:01:78:7c:e9:ad:43:
0e:29:20:c3:68:c9:d1:4d:49:37:d2:89:77:8e:95:
f4:a9:30:11:b1:06:d0:a4:d0:84:a6:15:39:0f:41:
fa:d2:2a:ec:88:6b:c3:dc:95:3b:4f:c8:09:6b:df:
09:76:46:b6:a0:f7:45:96:48:05:13:4a:ae:5c:34:
09:a0:7b:b7:fe:ea:ca:e7:18:41:45:34:8f:1a:51:
65:fc:91:a4:c1:97:ef:87:05:2e:c9:08:14:ea:8f:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:34:E9:4B:4D:3B:74:B7:5F:23:6D:34:36:80:55:6E:84:B7:4C:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2818031b-4933-3e3e-b1a1-a692e911c1c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:1a:ce:d9:7c:da:86:e3:5d:52:38:2b:27:23:48:41:92:be:
12:2e:1b:b4:82:78:77:bc:27:c0:99:b0:4b:3e:c8:9b:db:82:
74:10:04:79:9b:7b:ea:6b:7b:4d:9c:de:eb:3d:4c:d1:6c:9e:
9f:9f:f8:55:50:0a:78:4a:d8:3a:24:f0:28:7e:8d:21:eb:ce:
d7:e3:26:fd:a8:a5:fe:57:13:96:51:f0:93:8e:43:5a:9b:51:
cd:11:20:e4:6b:e5:4b:ac:b6:48:d0:2e:1e:52:d3:64:eb:5e:
66:17:dc:2e:e2:52:86:f1:41:2f:72:41:2f:82:d9:23:bb:8d:
3c:57:13:01:ff:46:4a:63:a1:c6:13:76:e7:9a:c9:0d:fd:43:
ee:f2:1b:46:15:74:4a:7f:fa:6b:9d:6d:29:61:4d:c5:6a:be:
d6:a8:65:c5:10:7d:10:fd:43:64:77:d0:f3:87:36:b3:c9:f7:
c7:8d:b9:ef:f8:3e:6b:16:da:2c:a4:08:b3:ce:d6:46:0b:bd:
8a:1b:46:51:c5:9f:a3:64:08:a3:38:28:f9:ae:0c:ba:d8:1a:
58:12:cd:db:d7:67:16:1d:5b:cf:ab:34:c0:a0:a2:93:a4:cb:
77:7c:60:80:6a:11:b0:5d:ba:31:a9:3e:cf:c0:1f:30:04:3f:
42:e8:e5:bc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3YNlt1SEYFJ2cuYsYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUwODEyMDAwMFoXDTIyMDYxMzA0MDAwMFowLzEtMCsGA1UEAxMk
M2E2Njc1NjEtZTdlYi00OTVmLWIyNDEtOWU1YzIxYzlkM2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstizAVfR1RtKt9PMoy4Pqar/2wLS/jFWNSyB
qgxfiEDP74jw0E8d5dwJRBKLTp22L0XoRM+E99G+aNVFgSMpz/HVSIdAj+yF5FAo
SKQDItkuffbk4DWPf5PJ3DNOWhxZTq91rmkqMXfJ3TfsHGTxBx0vS2nbJZSm1SUc
dPXCkXfgMQ35sy8xhw9UqivibNn3RQXphTMZz56tF/1G+ewBeHzprUMOKSDDaMnR
TUk30ol3jpX0qTARsQbQpNCEphU5D0H60irsiGvD3JU7T8gJa98Jdka2oPdFlkgF
E0quXDQJoHu3/urK5xhBRTSPGlFl/JGkwZfvhwUuyQgU6o94ewIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA406UtNO3S3XyNtNDaAVW6Et0wYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjgxODAzMWItNDkzMy0z
ZTNlLWIxYTEtYTY5MmU5MTFjMWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmQwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATxrO2XzahuNdUjgrJyNIQZK+Ei4btIJ4d7wnwJmwSz7Im9uCdBAEeZt7
6mt7TZze6z1M0Wyen5/4VVAKeErYOiTwKH6NIevO1+Mm/ail/lcTllHwk45DWptR
zREg5GvlS6y2SNAuHlLTZOteZhfcLuJShvFBL3JBL4LZI7uNPFcTAf9GSmOhxhN2
55rJDf1D7vIbRhV0Sn/6a51tKWFNxWq+1qhlxRB9EP1DZHfQ84c2s8n3x4257/g+
axbaLKQIs87WRgu9ihtGUcWfo2QIozgo+a4MutgaWBLN29dnFh1bz6s0wKCik6TL
d3xggGoRsF26Mak+z8AfMAQ/QujlvA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 19:06:29 2025 by rpki-client