Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bceabd7-e88f-3e35-9dda-3879a10604d7.roa
File: 2bceabd7-e88f-3e35-9dda-3879a10604d7.roa (raw, json)
Hash identifier: YiOWZHx9AQGfvdAmz0ja+GZyJoB2G+1mVJNspSZ/rcc=
Subject key identifier: 06:4D:DF:6F:7B:5C:4E:20:2A:C0:83:DE:35:15:C5:77:3D:D9:5D:A4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C642196DB8764540E2243EA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bceabd7-e88f-3e35-9dda-3879a10604d7.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 128.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c6:42:19:6d:b8:76:45:40:e2:24:3e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=39772cd6-6ab1-4fd6-8b36-43caf8bf84e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:70:73:87:5f:78:d5:46:d3:30:b5:32:f0:12:
c6:ec:1a:3d:cc:16:22:23:58:63:5d:fd:62:11:2d:
c5:75:68:92:ca:0a:34:98:52:8d:98:4f:0f:fe:80:
c5:ba:4e:f6:5d:71:db:95:e7:b0:0b:e1:6a:f3:f6:
c7:47:b9:39:bb:9f:42:9a:0d:32:89:9d:54:21:51:
13:3b:fe:62:d8:02:34:80:9e:50:28:35:eb:d4:1c:
07:23:83:a0:39:fb:ec:9a:cc:3f:a7:af:ba:1d:f2:
9c:79:53:00:ea:1f:03:e3:f6:63:3e:13:a1:da:66:
71:7a:fc:ed:05:d4:16:9d:ac:b1:e2:b7:fe:53:3c:
4f:f5:bc:5d:c1:7e:35:5e:1f:ec:fa:5a:9e:21:9c:
34:6e:78:21:08:6d:13:b9:8b:7c:52:30:43:6b:e2:
60:c3:e7:d8:ba:f8:55:a5:26:a9:b5:8c:9b:26:8f:
6e:ee:37:2d:5a:ad:77:cf:c2:ea:71:90:fe:3e:84:
87:c5:26:0c:da:2c:37:a4:e3:f8:02:6d:d4:f7:98:
7b:ea:b2:89:84:e8:d7:83:bd:55:64:38:f8:97:54:
cc:53:d5:74:1e:ac:78:b3:5c:b9:ff:e5:4a:3f:c2:
88:b0:ea:2c:22:4a:29:e8:ab:09:9e:0c:d0:50:85:
f5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4D:DF:6F:7B:5C:4E:20:2A:C0:83:DE:35:15:C5:77:3D:D9:5D:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2bceabd7-e88f-3e35-9dda-3879a10604d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:39:d4:cb:6d:3a:1b:d0:ef:17:28:a5:93:65:05:ed:b8:2b:
9a:a9:f1:c8:d4:b8:ed:3d:75:75:b0:23:92:1f:8d:b4:51:d9:
db:1e:fe:0d:23:68:05:49:34:ad:15:59:68:d7:e5:b4:29:78:
c2:bc:c7:1d:08:bf:2f:6e:24:ba:88:e7:ca:c9:6c:d8:d6:b0:
a3:0e:3a:c8:4a:b2:c9:d4:a1:9d:8d:64:47:d8:e7:64:be:3a:
1e:2f:01:43:e2:c2:1a:f3:b9:1d:9d:57:28:99:36:35:5d:98:
61:4e:4c:10:0c:69:7c:97:b6:55:e6:0d:11:d5:b2:25:19:54:
69:13:87:6a:66:48:5d:e3:8c:bf:62:be:c0:06:9f:fa:91:6c:
e7:1b:b8:37:9b:1a:8f:0a:cd:1f:e9:93:68:7b:5a:28:46:20:
7c:a9:53:5b:aa:71:0b:d0:52:a1:aa:a7:6e:13:9f:45:83:bf:
0c:8b:02:ef:4b:87:14:73:2c:ca:fa:2c:69:ad:2a:6a:49:d0:
7e:75:4d:09:3f:33:46:d1:bb:9d:cf:0b:4a:31:70:83:fd:26:
8a:6d:5a:3f:2e:a1:a2:8a:ed:cf:6b:96:47:12:2e:2e:a3:d7:
43:c3:8b:a2:6c:48:6e:7d:64:30:e1:9f:c0:ee:e2:cd:8b:e2:
58:c0:7b:1d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDGQhltuHZFQOIkPqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDIwMTEyMDAwMFoXDTIzMDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
Mzk3NzJjZDYtNmFiMS00ZmQ2LThiMzYtNDNjYWY4YmY4NGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HBzh1941UbTMLUy8BLG7Bo9zBYiI1hjXf1i
ES3FdWiSygo0mFKNmE8P/oDFuk72XXHbleewC+Fq8/bHR7k5u59Cmg0yiZ1UIVET
O/5i2AI0gJ5QKDXr1BwHI4OgOfvsmsw/p6+6HfKceVMA6h8D4/ZjPhOh2mZxevzt
BdQWnayx4rf+UzxP9bxdwX41Xh/s+lqeIZw0bnghCG0TuYt8UjBDa+Jgw+fYuvhV
pSaptYybJo9u7jctWq13z8LqcZD+PoSHxSYM2iw3pOP4Am3U95h76rKJhOjXg71V
ZDj4l1TMU9V0Hqx4s1y5/+VKP8KIsOosIkop6KsJngzQUIX1TwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAZN3297XE4gKsCD3jUVxXc92V2kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmJjZWFiZDctZTg4Zi0z
ZTM1LTlkZGEtMzg3OWExMDYwNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgKcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdjnUy206G9DvFyilk2UF7bgrmqnxyNS47T11dbAjkh+NtFHZ2x7+DSNo
BUk0rRVZaNfltCl4wrzHHQi/L24kuojnysls2Nawow46yEqyydShnY1kR9jnZL46
Hi8BQ+LCGvO5HZ1XKJk2NV2YYU5MEAxpfJe2VeYNEdWyJRlUaROHamZIXeOMv2K+
wAaf+pFs5xu4N5sajwrNH+mTaHtaKEYgfKlTW6pxC9BSoaqnbhOfRYO/DIsC70uH
FHMsyvosaa0qaknQfnVNCT8zRtG7nc8LSjFwg/0mim1aPy6hoortz2uWRxIuLqPX
Q8OLomxIbn1kMOGfwO7izYviWMB7HQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:20 2025 by rpki-client