Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/289e52be-5650-36d5-b942-e9541128c014.roa
File: 289e52be-5650-36d5-b942-e9541128c014.roa (raw, json)
Hash identifier: LV3DVte5meWj6VmjxT6RtgynK4asOEnGXkAEXJHa92Y=
Subject key identifier: 0B:7D:CB:E0:28:93:B2:77:2F:11:44:19:45:C9:E1:92:A2:B6:32:92
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D32EBC76C2B1D81DDB1A347C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/289e52be-5650-36d5-b942-e9541128c014.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 71.141.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:eb:c7:6c:2b:1d:81:dd:b1:a3:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=af171ca2-bc64-4f63-ad1b-48882429c304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:f9:5f:81:8f:79:14:07:c9:df:3b:5d:ca:
57:3d:bd:1c:c1:fb:64:85:a8:3e:f9:24:b6:80:b0:
9e:24:6a:a9:1e:d6:3e:0e:3b:06:19:bd:86:13:d3:
ec:a5:3d:3b:2c:10:24:39:67:b1:5a:13:ab:41:62:
b9:4e:44:49:ef:82:d4:36:ee:d1:76:20:6e:90:2f:
bd:86:70:2b:58:f2:ea:1a:a0:db:8a:35:68:56:2c:
d9:94:56:90:7e:de:df:54:ba:50:a7:0d:eb:53:85:
91:c5:f7:e2:ee:e1:e7:bf:5c:4d:50:da:73:7b:28:
a7:0a:e9:d3:35:ee:7d:62:fb:0a:cc:cc:f1:e2:d6:
78:2b:15:f1:99:02:bc:0d:6f:97:8e:c6:ad:f9:4e:
6a:94:5f:99:10:08:83:61:34:58:64:ee:6f:43:46:
63:17:dd:a2:1e:fc:34:b3:90:d0:99:cb:7a:e1:50:
03:fa:89:81:a7:66:85:07:54:2e:f9:77:c7:b4:3b:
54:8d:ff:87:07:10:ee:01:3a:75:68:d4:03:da:24:
41:45:69:08:a3:7b:5b:23:98:56:23:27:dc:03:1f:
5d:9d:a4:98:2a:68:ad:4f:23:d6:8d:01:ad:09:a1:
48:71:08:a4:56:f4:fa:1d:26:44:30:27:84:30:ad:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7D:CB:E0:28:93:B2:77:2F:11:44:19:45:C9:E1:92:A2:B6:32:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/289e52be-5650-36d5-b942-e9541128c014.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.141.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:cd:ed:c4:1a:d8:9c:2f:fe:fc:3d:1a:f4:2f:7c:0d:39:0a:
66:2d:ad:91:d8:16:d9:9f:0b:1d:b1:98:17:43:84:f5:70:1c:
68:ca:6a:db:e5:83:94:d1:7c:00:84:7e:93:31:57:35:dd:bd:
ff:04:19:b8:d8:9e:0a:9c:dc:08:79:03:08:7b:00:42:99:40:
bd:fe:0f:ef:e7:55:e1:61:b5:a0:5f:41:31:7e:f7:32:32:71:
28:08:9a:47:23:68:30:bc:02:c1:a6:7a:be:3f:e2:7d:f7:49:
e1:23:05:1f:fe:a9:fa:b2:e9:e4:21:4f:af:03:68:94:05:e8:
0a:ba:4d:69:a7:5d:4b:a3:04:ba:84:ca:ae:e2:72:6d:24:c1:
76:cd:bc:60:55:4d:e9:0f:cc:89:f8:06:cc:70:85:92:13:68:
ab:65:19:c3:26:f0:6c:16:09:50:31:22:a1:93:01:8c:f5:4c:
9d:d9:da:3b:62:55:f0:19:82:cc:62:96:a8:59:21:9f:cc:bb:
bd:b0:ad:9b:15:27:31:1d:aa:41:b4:cc:d2:a4:6c:c9:10:62:
1e:33:36:4f:1b:2c:fc:16:3d:e3:bf:3d:0a:9d:d0:fe:03:25:
8f:09:7d:f1:7b:bd:49:ac:d1:d6:52:95:1b:a5:58:40:fe:54:
8b:e0:5e:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0y68dsKx2B3bGjR8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
YWYxNzFjYTItYmM2NC00ZjYzLWFkMWItNDg4ODI0MjljMzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmX5X4GPeRQHyd87XcpXPb0cwftkhag++SS2
gLCeJGqpHtY+DjsGGb2GE9PspT07LBAkOWexWhOrQWK5TkRJ74LUNu7RdiBukC+9
hnArWPLqGqDbijVoVizZlFaQft7fVLpQpw3rU4WRxffi7uHnv1xNUNpzeyinCunT
Ne59YvsKzMzx4tZ4KxXxmQK8DW+Xjsat+U5qlF+ZEAiDYTRYZO5vQ0ZjF92iHvw0
s5DQmct64VAD+omBp2aFB1Qu+XfHtDtUjf+HBxDuATp1aNQD2iRBRWkIo3tbI5hW
IyfcAx9dnaSYKmitTyPWjQGtCaFIcQikVvT6HSZEMCeEMK0hawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAt9y+Aok7J3LxFEGUXJ4ZKitjKSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjg5ZTUyYmUtNTY1MC0z
NmQ1LWI5NDItZTk1NDExMjhjMDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGR42AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/N7cQa2Jwv/vw9GvQvfA05CmYtrZHYFtmfCx2xmBdDhPVwHGjKatvl
g5TRfACEfpMxVzXdvf8EGbjYngqc3Ah5Awh7AEKZQL3+D+/nVeFhtaBfQTF+9zIy
cSgImkcjaDC8AsGmer4/4n33SeEjBR/+qfqy6eQhT68DaJQF6Aq6TWmnXUujBLqE
yq7icm0kwXbNvGBVTekPzIn4BsxwhZITaKtlGcMm8GwWCVAxIqGTAYz1TJ3Z2jti
VfAZgsxilqhZIZ/Mu72wrZsVJzEdqkG0zNKkbMkQYh4zNk8bLPwWPeO/PQqd0P4D
JY8JffF7vUms0dZSlRulWED+VIvgXkA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:03 2025 by rpki-client