Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c90628c-6ea6-3918-8303-5a5722e85f10.roa
File: 2c90628c-6ea6-3918-8303-5a5722e85f10.roa (raw, json)
Hash identifier: fHhyntkZZ/ZiYVGKbVQyAeFuC7bpqP1hLfCrc930mO4=
Subject key identifier: A9:04:68:69:6C:FA:60:EF:9D:7B:AC:5D:8A:3E:F0:23:76:49:13:11
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FB4A3DEA95DBFB3D76470D220
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c90628c-6ea6-3918-8303-5a5722e85f10.roa
Signing time: Wed 26 Oct 2022 12:00:00 +0000
ROA not before: Wed 26 Oct 2022 12:00:00 +0000
ROA not after: Thu 01 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 128.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b4:a3:de:a9:5d:bf:b3:d7:64:70:d2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 26 12:00:00 2022 GMT
Not After : Dec 1 05:00:00 2022 GMT
Subject: CN=26a0047a-b008-4bb0-a23e-2536d62d3392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:a5:42:64:e6:b0:34:3c:e5:ce:ca:ca:a6:
86:73:8e:cb:9a:5b:b7:b5:9a:4a:11:a1:36:70:dc:
62:cc:aa:67:14:35:d2:2b:9b:63:e3:12:96:f3:ea:
04:d7:21:59:0b:35:71:86:f7:54:97:9c:e9:f7:9e:
4d:87:37:97:c7:1f:a8:b6:49:cc:fd:d7:a6:bc:09:
1d:3f:4f:2b:e0:c4:fb:ea:f0:c6:14:fc:77:7b:ce:
cb:b8:48:13:c5:62:81:23:aa:e4:2b:13:2a:08:2f:
a1:88:7a:d9:7e:f5:04:1d:d8:8f:fb:b2:58:f9:53:
d4:ca:60:33:1f:7f:46:eb:ed:55:52:68:a4:3b:47:
09:54:11:b8:ac:3c:60:9d:92:95:39:78:6f:b8:d0:
30:27:45:5a:73:f1:19:f2:c1:3b:fb:da:bf:87:25:
1c:fb:d6:aa:55:c9:29:1a:e9:77:f4:94:b5:4f:88:
c7:87:a5:eb:c5:1b:57:d9:f5:68:05:59:86:5a:b6:
cf:8a:bd:b4:20:19:5e:8e:5c:a1:b7:b2:2e:39:cb:
1b:b5:5f:18:19:52:c6:d7:3c:80:0c:13:b0:c6:05:
b9:26:f6:16:d6:5f:0f:e5:e9:4c:36:86:fc:be:92:
c5:da:69:02:ac:f1:41:56:17:79:da:11:91:45:c3:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:04:68:69:6C:FA:60:EF:9D:7B:AC:5D:8A:3E:F0:23:76:49:13:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c90628c-6ea6-3918-8303-5a5722e85f10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:fc:17:b5:20:b5:bf:bd:cd:b4:a6:ff:6f:1d:5a:ea:d7:04:
7e:19:be:f6:33:15:24:67:58:1b:a2:bd:5b:5e:5a:dd:74:57:
f3:25:94:b4:18:45:84:71:a4:e6:ef:18:a2:b0:47:c6:80:3a:
26:07:ff:ae:7f:ec:f6:7e:ca:a1:1e:37:35:70:07:b2:7a:82:
a7:06:c3:1b:a7:57:7d:71:45:ef:72:0b:84:41:8d:12:12:f3:
e5:d2:31:df:49:36:69:d9:df:b3:de:78:9a:ab:14:12:62:a3:
57:b4:1f:35:73:3f:20:e1:de:45:bb:b8:9d:60:28:fa:07:bc:
86:14:e9:4d:0b:51:03:1f:cd:f3:58:c1:95:70:df:3d:ed:71:
59:6f:34:b2:42:5e:53:92:96:39:64:2c:eb:83:ef:d4:c2:17:
20:a9:5c:71:e4:33:2c:3c:19:dd:64:70:56:e4:65:43:aa:c1:
d8:c2:dd:c4:1f:79:e8:9a:87:97:05:73:14:a1:94:66:a1:ea:
01:8d:3a:e9:3e:b3:03:53:06:59:84:c5:97:1f:93:90:ab:09:
5d:ba:6a:53:a4:10:62:29:43:02:ef:c2:55:a0:89:6e:cd:a4:
49:07:3e:ab:71:eb:1c:ad:d3:33:0d:28:c1:1b:9d:c9:9e:69:
69:43:9b:ee
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+0o96pXb+z12Rw0iAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNjEyMDAwMFoXDTIyMTIwMTA1MDAwMFowLzEtMCsGA1UEAxMk
MjZhMDA0N2EtYjAwOC00YmIwLWEyM2UtMjUzNmQ2MmQzMzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JqlQmTmsDQ85c7KyqaGc47Lmlu3tZpKEaE2
cNxizKpnFDXSK5tj4xKW8+oE1yFZCzVxhvdUl5zp955NhzeXxx+otknM/demvAkd
P08r4MT76vDGFPx3e87LuEgTxWKBI6rkKxMqCC+hiHrZfvUEHdiP+7JY+VPUymAz
H39G6+1VUmikO0cJVBG4rDxgnZKVOXhvuNAwJ0Vac/EZ8sE7+9q/hyUc+9aqVckp
Gul39JS1T4jHh6XrxRtX2fVoBVmGWrbPir20IBlejlyht7IuOcsbtV8YGVLG1zyA
DBOwxgW5JvYW1l8P5elMNob8vpLF2mkCrPFBVhd52hGRRcNz8wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKkEaGls+mDvnXusXYo+8CN2SRMRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmM5MDYyOGMtNmVhNi0z
OTE4LTgzMDMtNWE1NzIyZTg1ZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgKcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgvwXtSC1v73NtKb/bx1a6tcEfhm+9jMVJGdYG6K9W15a3XRX8yWUtBhF
hHGk5u8YorBHxoA6Jgf/rn/s9n7KoR43NXAHsnqCpwbDG6dXfXFF73ILhEGNEhLz
5dIx30k2adnfs954mqsUEmKjV7QfNXM/IOHeRbu4nWAo+ge8hhTpTQtRAx/N81jB
lXDfPe1xWW80skJeU5KWOWQs64Pv1MIXIKlcceQzLDwZ3WRwVuRlQ6rB2MLdxB95
6JqHlwVzFKGUZqHqAY066T6zA1MGWYTFlx+TkKsJXbpqU6QQYilDAu/CVaCJbs2k
SQc+q3HrHK3TMw0owRudyZ5paUOb7g==
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:41:16 2025 by rpki-client