Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c0f1236-bc37-3d3c-8b8b-2c93cfb8b4ee.roa
File: 2c0f1236-bc37-3d3c-8b8b-2c93cfb8b4ee.roa (raw, json)
Hash identifier: NqdKmP2Liexjw6cKEjcH6oECCftWfBtKnv4cSfeqkb8=
Subject key identifier: 80:45:F9:F0:28:BA:3A:B1:0F:4D:98:81:C2:27:73:84:CB:A7:0E:D0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F8B0E1A561B7FA5783761AA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c0f1236-bc37-3d3c-8b8b-2c93cfb8b4ee.roa
Signing time: Tue 11 Oct 2022 18:48:07 +0000
ROA not before: Tue 11 Oct 2022 18:48:07 +0000
ROA not after: Wed 16 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8b:0e:1a:56:1b:7f:a5:78:37:61:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 11 18:48:07 2022 GMT
Not After : Nov 16 05:00:00 2022 GMT
Subject: CN=2cf0aebf-e4d9-41f5-b4dd-05cab0eab86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:5f:72:90:f3:c4:88:fd:a8:09:92:41:ba:
29:1a:78:58:83:9b:16:d1:31:12:00:27:45:0c:36:
b8:8f:b4:e9:b0:d2:0d:06:a5:28:3c:c9:35:39:56:
80:ff:52:c3:0e:47:ef:58:40:47:7a:0d:3d:d2:c6:
4e:f0:3f:d3:13:c7:2a:a1:cd:94:ce:88:73:a9:0c:
12:e0:b0:7f:da:c4:87:83:b1:f6:8e:14:71:e4:1a:
44:0b:ad:85:2d:77:a7:cd:23:9c:1d:fb:09:27:93:
59:a5:52:16:d0:6f:6b:52:a5:e9:d6:2b:1d:68:41:
34:26:1f:e9:cf:ce:7a:e2:21:b2:9e:42:94:cc:cc:
1d:7a:57:53:45:c2:b2:9d:1b:0a:61:9b:da:a3:cc:
aa:9c:55:f4:25:d4:94:fa:75:6c:cd:86:ef:20:df:
04:1a:36:d1:bb:74:54:fe:dd:83:1b:3c:73:64:87:
b3:bc:d8:aa:c1:9e:3a:de:f2:e4:2e:04:11:3d:bb:
ac:c8:14:4a:99:7c:63:58:c8:11:64:39:cc:21:c3:
ba:9c:78:2b:15:a8:4f:46:6b:36:35:18:99:c6:10:
be:6e:5c:dd:fd:78:9d:fc:0b:48:a3:ad:42:d5:e3:
47:5a:22:18:50:6f:4c:ca:a8:ee:7b:49:dd:cf:17:
02:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:45:F9:F0:28:BA:3A:B1:0F:4D:98:81:C2:27:73:84:CB:A7:0E:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c0f1236-bc37-3d3c-8b8b-2c93cfb8b4ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:21:3f:13:f2:34:0f:32:ea:5e:b0:71:d9:35:d5:70:04:07:
70:e1:56:7a:bd:67:56:e5:d2:98:54:51:51:ba:08:96:83:a1:
fe:6c:6a:05:71:51:21:d5:98:4a:b9:17:41:01:3c:fb:e1:e0:
5c:15:a5:7a:b5:0b:2d:9f:48:8a:50:3d:00:99:8c:7f:9f:8d:
c0:07:43:0c:09:b5:94:35:fa:6a:28:3c:d6:90:04:99:1d:1d:
57:91:cc:28:45:0d:9a:7b:5b:18:58:83:5c:fc:1d:31:66:37:
a5:78:4d:af:54:d6:7c:6c:b4:27:9e:5e:40:bc:5a:02:a3:cb:
0b:2a:fa:f2:de:5d:39:f7:45:ea:da:41:65:a8:66:31:e0:f7:
c7:9a:cc:ba:71:c4:97:ca:47:c3:29:33:09:10:d2:98:d6:39:
9f:40:15:d9:27:df:4d:24:53:a1:78:06:0d:41:3d:f0:41:43:
10:0c:34:a3:20:b0:9b:6c:ee:84:01:b5:8c:b7:c3:c9:53:35:
10:ba:33:6d:ac:06:4a:a7:9c:ba:18:20:f0:0d:d2:8a:fc:ba:
e2:43:40:4b:0a:1e:96:f3:36:1c:67:e0:6c:2d:3f:5a:aa:dc:
6c:94:09:70:09:5d:9b:2d:ff:6a:c0:37:de:63:d8:96:97:d3:
e6:6d:ec:e5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+LDhpWG3+leDdhqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxMTE4NDgwN1oXDTIyMTExNjA1MDAwMFowLzEtMCsGA1UEAxMk
MmNmMGFlYmYtZTRkOS00MWY1LWI0ZGQtMDVjYWIwZWFiODZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl09fcpDzxIj9qAmSQbopGnhYg5sW0TESACdF
DDa4j7TpsNINBqUoPMk1OVaA/1LDDkfvWEBHeg090sZO8D/TE8cqoc2UzohzqQwS
4LB/2sSHg7H2jhRx5BpEC62FLXenzSOcHfsJJ5NZpVIW0G9rUqXp1isdaEE0Jh/p
z8564iGynkKUzMwdeldTRcKynRsKYZvao8yqnFX0JdSU+nVszYbvIN8EGjbRu3RU
/t2DGzxzZIezvNiqwZ463vLkLgQRPbusyBRKmXxjWMgRZDnMIcO6nHgrFahPRms2
NRiZxhC+blzd/Xid/AtIo61C1eNHWiIYUG9Myqjue0ndzxcCRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIBF+fAoujqxD02YgcInc4TLpw7QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmMwZjEyMzYtYmMzNy0z
ZDNjLThiOGItMmM5M2NmYjhiNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCKKwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZyE/E/I0DzLqXrBx2TXVcAQHcOFWer1nVuXSmFRRUboIloOh/mxqBXFR
IdWYSrkXQQE8++HgXBWlerULLZ9IilA9AJmMf5+NwAdDDAm1lDX6aig81pAEmR0d
V5HMKEUNmntbGFiDXPwdMWY3pXhNr1TWfGy0J55eQLxaAqPLCyr68t5dOfdF6tpB
ZahmMeD3x5rMunHEl8pHwykzCRDSmNY5n0AV2SffTSRToXgGDUE98EFDEAw0oyCw
m2zuhAG1jLfDyVM1ELozbawGSqecuhgg8A3Sivy64kNASwoelvM2HGfgbC0/Wqrc
bJQJcAldmy3/asA33mPYlpfT5m3s5Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:18 2025 by rpki-client