Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29630154-dbf3-3fb1-9cd0-23d6528f072a.roa
File: 29630154-dbf3-3fb1-9cd0-23d6528f072a.roa (raw, json)
Hash identifier: Yybv0F5gw2VObShkTXijdeEnfdUISZ9zQNxD3l0oCM8=
Subject key identifier: D6:DA:ED:CE:D5:F8:A5:C3:7B:A9:F5:E0:0D:F4:BA:D3:A2:9E:05:E7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A8E24DEC052304EC3245158
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29630154-dbf3-3fb1-9cd0-23d6528f072a.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:8e:24:de:c0:52:30:4e:c3:24:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=2cbc473f-5bac-4268-ba23-5f94cfee6cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:58:de:be:e5:9b:80:44:fb:1b:86:a4:47:
48:ce:e5:1e:f3:08:05:04:88:31:72:06:f2:9a:08:
0e:83:a1:d0:ae:5b:b1:c7:89:17:f7:90:14:fe:36:
96:36:14:fe:69:68:71:ab:a0:71:b8:fd:85:b4:3c:
af:ac:b9:7d:1b:3c:f7:df:86:0c:b0:59:b8:4c:38:
7a:ac:a9:a1:47:14:9b:68:11:4a:cf:25:f9:3a:68:
8f:c5:9d:cd:0b:a6:f7:a4:0e:12:c2:c8:98:2a:63:
bd:54:7e:21:27:7c:1c:ea:8a:34:10:b4:b2:32:87:
c5:7b:30:65:95:fd:2f:30:7f:9c:f6:03:be:72:de:
8d:33:6a:6f:b6:8c:9b:73:ee:97:4b:39:36:ff:37:
83:62:00:5c:ca:ee:aa:ee:d1:d7:7a:1f:c6:da:04:
fa:8d:cd:9e:8b:b1:75:50:45:80:62:a5:8a:d6:59:
28:c8:71:aa:f6:33:f0:a6:84:0a:14:9f:de:ee:1e:
54:c4:f7:c9:e0:89:06:29:e5:ac:96:92:90:f6:23:
18:b5:79:de:b7:d6:ad:fb:dd:73:6a:0b:80:1d:a3:
73:e4:f8:81:5a:01:fa:67:96:5e:0b:58:03:e8:89:
2c:25:73:f5:60:d1:0f:03:ac:96:46:11:96:1c:a9:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DA:ED:CE:D5:F8:A5:C3:7B:A9:F5:E0:0D:F4:BA:D3:A2:9E:05:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29630154-dbf3-3fb1-9cd0-23d6528f072a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:c8:ba:45:60:f9:1a:6e:4e:9e:b9:a0:ca:f8:5d:35:20:27:
b6:0e:89:b4:73:b2:02:e3:0f:ee:28:dc:62:57:75:14:9b:0e:
8c:05:e1:5c:8b:37:81:ec:76:82:7d:b5:e4:18:35:e5:29:87:
34:de:7f:5b:b2:4d:f2:19:4b:a0:ed:ea:9b:75:e6:a1:78:53:
32:e0:47:a8:5c:ba:19:4c:56:f0:99:ec:5d:9e:53:a8:df:5b:
26:a4:2e:d0:62:d9:8d:5d:69:11:c7:ed:fc:e8:14:4b:17:f5:
52:0a:99:7a:fa:4e:ed:be:63:60:3b:74:8e:aa:e1:09:51:06:
f0:dd:e2:38:11:27:e0:e4:d1:9a:ee:bd:29:df:86:83:05:d8:
52:63:a6:c8:0f:22:3b:30:47:7d:f0:49:e5:67:30:78:14:43:
96:e7:ca:81:d2:ea:a6:50:77:fb:a6:75:9c:9a:18:37:59:66:
47:eb:ee:91:5f:57:99:41:70:ea:9b:c9:70:67:bf:b4:cf:dd:
ce:eb:ed:84:55:3d:f8:dc:1b:6a:c5:4b:a3:9a:5f:ac:d5:ea:
29:ef:dd:b5:d4:29:25:fb:7d:0d:9f:49:50:0c:7e:49:d7:7a:
15:16:7a:06:4e:dd:7c:80:f0:f2:5e:e3:6a:c9:65:a1:14:7e:
83:f5:e3:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1ajiTewFIwTsMkUVgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
MmNiYzQ3M2YtNWJhYy00MjY4LWJhMjMtNWY5NGNmZWU2Y2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhtY3r7lm4BE+xuGpEdIzuUe8wgFBIgxcgby
mggOg6HQrluxx4kX95AU/jaWNhT+aWhxq6BxuP2FtDyvrLl9Gzz334YMsFm4TDh6
rKmhRxSbaBFKzyX5OmiPxZ3NC6b3pA4SwsiYKmO9VH4hJ3wc6oo0ELSyMofFezBl
lf0vMH+c9gO+ct6NM2pvtoybc+6XSzk2/zeDYgBcyu6q7tHXeh/G2gT6jc2ei7F1
UEWAYqWK1lkoyHGq9jPwpoQKFJ/e7h5UxPfJ4IkGKeWslpKQ9iMYtXnet9at+91z
aguAHaNz5PiBWgH6Z5ZeC1gD6IksJXP1YNEPA6yWRhGWHKm1AwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNba7c7V+KXDe6n14A30utOingXnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjk2MzAxNTQtZGJmMy0z
ZmIxLTljZDAtMjNkNjUyOGYwNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmMCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTIukVg+RpuTp65oMr4XTUgJ7YOibRzsgLjD+4o3GJXdRSbDowF4VyL
N4HsdoJ9teQYNeUphzTef1uyTfIZS6Dt6pt15qF4UzLgR6hcuhlMVvCZ7F2eU6jf
WyakLtBi2Y1daRHH7fzoFEsX9VIKmXr6Tu2+Y2A7dI6q4QlRBvDd4jgRJ+Dk0Zru
vSnfhoMF2FJjpsgPIjswR33wSeVnMHgUQ5bnyoHS6qZQd/umdZyaGDdZZkfr7pFf
V5lBcOqbyXBnv7TP3c7r7YRVPfjcG2rFS6OaX6zV6inv3bXUKSX7fQ2fSVAMfknX
ehUWegZO3XyA8PJe42rJZaEUfoP14yM=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:52 2025 by rpki-client