Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ae18f1c-830a-3e88-925d-6be69de29e9d.roa
File: 2ae18f1c-830a-3e88-925d-6be69de29e9d.roa (raw, json)
Hash identifier: 0GP0iMACN8TZVsZ9KhnW9nTRZqI8MWtGybc4hnZiIgQ=
Subject key identifier: A1:81:7E:50:A8:DC:C0:F6:48:F8:32:45:D8:AC:7F:C2:03:76:AB:9B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406B08584CC45250DD67187050
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ae18f1c-830a-3e88-925d-6be69de29e9d.roa
Signing time: Fri 30 Dec 2022 19:54:08 +0000
ROA not before: Fri 30 Dec 2022 19:54:08 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 76.223.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6b:08:58:4c:c4:52:50:dd:67:18:70:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 30 19:54:08 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=40cbc112-ee04-40ff-97db-46e14a7e1220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:70:a3:a6:23:d1:e2:20:99:22:6a:46:61:47:
e0:10:a6:55:8c:c8:52:38:17:f9:ba:07:97:a9:62:
8e:f9:45:80:1b:9b:ea:bc:32:ac:93:a4:bf:a4:0f:
70:ac:ea:43:e0:3f:3b:0e:05:da:c6:63:1e:7d:fb:
0e:d1:fb:f0:65:60:97:05:cb:05:fd:c1:d2:ba:67:
20:26:0c:70:51:30:22:b1:22:ae:ee:6d:db:ed:80:
37:8e:c8:fe:f5:cb:6b:28:a4:91:f7:ee:8e:f8:d1:
02:4c:36:3b:95:be:42:28:fb:61:06:4e:f1:2b:0b:
56:49:19:3b:23:82:9d:7b:52:cd:74:59:19:f3:e0:
d2:d4:d1:7e:a0:e4:63:76:e2:99:be:8b:c5:f1:c8:
e6:52:d1:aa:6b:69:7a:71:cb:56:ec:cf:7c:54:3c:
eb:78:35:59:9b:91:61:db:af:df:68:cd:87:a3:d2:
c9:db:28:ea:ce:c3:89:13:b0:36:28:06:8f:d1:24:
e0:3f:12:8a:e7:7e:fc:2b:7d:f5:2f:58:4b:65:b3:
63:83:d6:a6:72:19:9b:79:d5:eb:4a:ec:83:63:6b:
83:ed:3e:29:63:1e:97:24:2d:26:49:54:fc:84:84:
d0:23:ee:78:82:82:3e:a0:09:3a:2b:85:ab:ac:bd:
ca:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:81:7E:50:A8:DC:C0:F6:48:F8:32:45:D8:AC:7F:C2:03:76:AB:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ae18f1c-830a-3e88-925d-6be69de29e9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:1d:b3:50:b2:5c:74:30:fe:87:ef:43:b6:b4:e6:05:2e:ad:
43:26:5b:60:8a:86:32:7c:a5:10:1e:81:be:19:13:5b:d3:b4:
f6:e4:66:3e:86:d2:2b:eb:b9:fd:5c:e2:ca:ba:24:17:36:36:
c1:1d:b6:37:6c:d6:d7:5c:54:dd:7b:76:79:1c:02:04:5e:03:
52:44:df:c7:cd:09:c3:3d:e1:ac:2a:eb:b1:6e:8d:3e:2f:50:
fd:b4:f1:8a:7a:b0:27:fe:ff:63:c9:d0:ec:06:30:16:b7:32:
98:38:35:dc:3e:6d:97:53:3a:13:35:e9:5e:7e:41:07:ff:a6:
ce:d0:8e:0a:47:93:4a:07:11:bb:d5:23:a6:29:ba:fe:58:54:
df:8f:01:ee:de:6b:46:67:fd:63:fa:88:b4:1f:fd:58:1b:23:
ef:9c:fb:df:08:f6:ae:64:4e:94:36:c7:c4:4b:ae:a7:27:c6:
fc:2e:fc:0f:7c:35:8b:77:f8:be:84:09:eb:ff:49:b1:3b:2d:
78:3b:cb:69:e3:69:0e:e6:ae:f5:96:e9:56:00:db:d6:1d:bb:
3f:99:13:1c:8a:9f:4f:05:35:62:7b:1d:7c:40:79:09:5e:f2:
6c:4e:d9:19:c3:a7:b7:84:de:01:a7:8b:aa:dc:90:e6:42:67:
02:e2:16:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBrCFhMxFJQ3WcYcFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIzMDE5NTQwOFoXDTIzMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NDBjYmMxMTItZWUwNC00MGZmLTk3ZGItNDZlMTRhN2UxMjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnCjpiPR4iCZImpGYUfgEKZVjMhSOBf5ugeX
qWKO+UWAG5vqvDKsk6S/pA9wrOpD4D87DgXaxmMeffsO0fvwZWCXBcsF/cHSumcg
JgxwUTAisSKu7m3b7YA3jsj+9ctrKKSR9+6O+NECTDY7lb5CKPthBk7xKwtWSRk7
I4Kde1LNdFkZ8+DS1NF+oORjduKZvovF8cjmUtGqa2l6cctW7M98VDzreDVZm5Fh
26/faM2Ho9LJ2yjqzsOJE7A2KAaP0STgPxKK5378K331L1hLZbNjg9amchmbedXr
SuyDY2uD7T4pYx6XJC0mSVT8hITQI+54goI+oAk6K4WrrL3KawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKGBflCo3MD2SPgyRdisf8IDdqubMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmFlMThmMWMtODMwYS0z
ZTg4LTkyNWQtNmJlNjlkZTI5ZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTN+oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK8ds1CyXHQw/ofvQ7a05gUurUMmW2CKhjJ8pRAegb4ZE1vTtPbkZj6G
0ivruf1c4sq6JBc2NsEdtjds1tdcVN17dnkcAgReA1JE38fNCcM94awq67FujT4v
UP208Yp6sCf+/2PJ0OwGMBa3Mpg4Ndw+bZdTOhM16V5+QQf/ps7QjgpHk0oHEbvV
I6Ypuv5YVN+PAe7ea0Zn/WP6iLQf/VgbI++c+98I9q5kTpQ2x8RLrqcnxvwu/A98
NYt3+L6ECev/SbE7LXg7y2njaQ7mrvWW6VYA29Yduz+ZExyKn08FNWJ7HXxAeQle
8mxO2RnDp7eE3gGni6rckOZCZwLiFt0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:41 2025 by rpki-client