Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2dbc5afd-3a1c-3326-bb0d-a8f694f372cb.roa
File: 2dbc5afd-3a1c-3326-bb0d-a8f694f372cb.roa (raw, json)
Hash identifier: xSvxhXhESEILpn4C+uwy6hqRqXUQm/WkjrBb7u74HoM=
Subject key identifier: E2:8E:82:85:E8:EE:5C:87:6C:B1:8D:22:A1:54:46:B6:7B:61:A3:AD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F9B56D653DD51D5BDE7CE4A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2dbc5afd-3a1c-3326-bb0d-a8f694f372cb.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 78.12.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9b:56:d6:53:dd:51:d5:bd:e7:ce:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=3ccc5a75-e7f6-4d0c-bb0d-14cc0c467af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1e:99:86:90:5c:81:f0:b6:5f:ed:92:a1:98:
7f:85:79:2c:15:81:28:70:c9:d3:53:59:0f:d0:63:
1a:df:c9:1a:be:24:95:f9:45:bb:0e:40:77:a7:a7:
46:c4:01:d7:a9:7b:e3:52:46:46:aa:d0:1f:b1:ac:
7d:ce:3b:44:16:68:6e:a6:21:69:95:f8:99:6f:b5:
2e:3e:22:b5:1c:bf:88:9d:4e:b2:0a:13:05:b9:6d:
be:f6:e5:61:18:3c:60:08:b4:f4:af:bd:fa:5f:42:
c3:38:b1:cd:e7:cd:ea:41:ab:c2:f1:51:0e:3b:ab:
5e:b4:71:1a:63:d2:82:5d:6b:bf:58:ff:73:a5:29:
b3:29:25:ba:b8:c5:9b:7f:4e:54:2e:e2:52:53:78:
6d:eb:f2:b8:70:47:44:af:4b:a6:cd:da:2d:bc:0c:
06:9e:94:03:7c:1f:9b:10:39:86:06:d0:87:10:f7:
0b:1b:ce:e1:17:7d:02:30:df:3c:3b:49:ab:36:05:
48:a2:bf:8c:80:ef:d9:4c:20:67:3b:f8:28:4c:88:
af:f2:d0:9d:d9:0d:29:05:66:70:97:36:36:87:85:
d6:2d:45:58:b5:bc:04:47:2d:f7:ba:8e:12:53:77:
c8:43:8e:db:ff:67:8c:9c:46:1b:c7:92:1e:7e:46:
33:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8E:82:85:E8:EE:5C:87:6C:B1:8D:22:A1:54:46:B6:7B:61:A3:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2dbc5afd-3a1c-3326-bb0d-a8f694f372cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
78.12.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:2c:fc:13:b1:88:8d:aa:38:89:44:92:fb:68:66:d5:c4:b6:
d4:66:dc:45:80:ab:ad:87:bb:4d:71:7a:a3:c5:92:dd:41:a8:
17:64:e5:68:b4:3a:9a:27:11:7a:16:b5:9d:4a:f2:9b:a7:36:
3e:38:d4:1b:01:84:e7:d1:9c:02:88:a0:83:be:1f:f6:2c:53:
39:5c:22:09:f9:c4:b4:90:44:b7:9f:f2:c3:3d:fc:ba:68:63:
5f:39:5c:d3:76:c6:e3:d1:12:78:0d:67:ae:05:2e:31:db:51:
e7:dc:c1:12:2d:ba:d8:4a:01:d7:ec:13:89:e7:80:e8:71:9e:
40:ee:78:86:ab:ca:a5:d0:83:13:e6:9f:65:69:12:78:6e:a9:
f8:6f:3e:5c:51:d5:9c:6a:d9:49:74:13:00:aa:b2:48:77:ee:
95:37:fc:08:41:4f:fc:4c:f0:5f:59:7d:9f:f2:48:26:7b:59:
db:c3:f1:ea:b1:ea:41:76:e0:75:c4:1b:79:b6:e3:80:14:a5:
b7:92:3b:bc:ff:5e:8b:41:0b:4d:06:91:0c:bc:61:41:00:a5:
79:4f:3a:c6:b1:bc:82:ac:96:35:61:09:eb:6c:f2:1e:f8:d7:
46:e4:e8:64:6e:19:5a:b1:65:99:a8:ee:d8:c5:a2:cd:d2:a0:
a2:5b:d3:c1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+bVtZT3VHVvefOSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxNzEyMDAwMFoXDTIyMTEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
M2NjYzVhNzUtZTdmNi00ZDBjLWJiMGQtMTRjYzBjNDY3YWY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx6ZhpBcgfC2X+2SoZh/hXksFYEocMnTU1kP
0GMa38kaviSV+UW7DkB3p6dGxAHXqXvjUkZGqtAfsax9zjtEFmhupiFplfiZb7Uu
PiK1HL+InU6yChMFuW2+9uVhGDxgCLT0r736X0LDOLHN583qQavC8VEOO6tetHEa
Y9KCXWu/WP9zpSmzKSW6uMWbf05ULuJSU3ht6/K4cEdEr0umzdotvAwGnpQDfB+b
EDmGBtCHEPcLG87hF30CMN88O0mrNgVIor+MgO/ZTCBnO/goTIiv8tCd2Q0pBWZw
lzY2h4XWLUVYtbwERy33uo4SU3fIQ47b/2eMnEYbx5IefkYzIQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOKOgoXo7lyHbLGNIqFURrZ7YaOtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmRiYzVhZmQtM2ExYy0z
MzI2LWJiMGQtYThmNjk0ZjM3MmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCTgwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQyz8E7GIjao4iUSS+2hm1cS21GbcRYCrrYe7TXF6o8WS3UGoF2TlaLQ6
micReha1nUrym6c2PjjUGwGE59GcAoigg74f9ixTOVwiCfnEtJBEt5/ywz38umhj
Xzlc03bG49ESeA1nrgUuMdtR59zBEi262EoB1+wTieeA6HGeQO54hqvKpdCDE+af
ZWkSeG6p+G8+XFHVnGrZSXQTAKqySHfulTf8CEFP/EzwX1l9n/JIJntZ28Px6rHq
QXbgdcQbebbjgBSlt5I7vP9ei0ELTQaRDLxhQQCleU86xrG8gqyWNWEJ62zyHvjX
RuToZG4ZWrFlmaju2MWizdKgolvTwQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:14 2025 by rpki-client