Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32940ecd-b66a-3356-9e68-3bb0b9997a46.roa
File: 32940ecd-b66a-3356-9e68-3bb0b9997a46.roa (raw, json)
Hash identifier: DATcCEfKZxVlaxF177DQOKZWUUG9tGPhcwyLHtapYWM=
Subject key identifier: FE:0F:7D:A1:95:5E:4F:34:A1:D6:01:F1:DD:BC:20:B2:F1:B7:95:94
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584040D67373C6ECCC5083BD3A30
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32940ecd-b66a-3356-9e68-3bb0b9997a46.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 161.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:d6:73:73:c6:ec:cc:50:83:bd:3a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=41d3932d-a3bf-49aa-8c01-de0d70da5450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8d:4d:e7:3b:eb:1c:1e:4b:73:bb:b2:07:de:
43:88:98:ab:86:fe:5d:6e:4a:73:4b:dd:73:21:2f:
51:45:3f:ea:a2:3e:e5:37:e4:ec:d5:d1:b2:3b:c6:
7b:8b:f9:79:f8:a0:35:4f:3f:eb:0e:cf:37:90:2a:
b6:b4:07:3f:bb:e4:4b:b2:18:ff:8e:60:5c:5e:20:
38:e1:b7:c0:c4:ae:1c:de:42:52:f0:85:a1:d8:79:
d8:01:60:40:54:4f:e7:9c:fb:60:5f:b3:93:4a:09:
bd:56:e9:a9:03:4c:ee:57:e0:2a:9d:00:ab:2e:0d:
85:63:02:ad:52:48:4e:2f:5a:14:4f:db:70:91:36:
29:4b:61:09:87:03:83:c6:78:38:27:95:9f:be:c4:
cd:0c:06:05:01:bf:b2:12:83:95:ed:0a:6e:bf:05:
f1:da:8b:19:5e:f3:32:42:83:48:49:d9:e3:83:32:
17:cb:c9:70:7e:e9:e2:69:89:ff:7c:41:2c:2a:68:
b6:bd:12:18:46:c0:44:2a:d7:0f:bc:72:58:42:d2:
56:95:79:ac:64:1f:eb:ad:15:b4:47:d1:01:12:07:
b8:36:ab:67:43:f3:d5:d0:f0:cf:b3:b1:1f:47:f6:
02:10:72:91:07:19:88:16:9e:7f:bb:40:d1:fa:63:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0F:7D:A1:95:5E:4F:34:A1:D6:01:F1:DD:BC:20:B2:F1:B7:95:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/32940ecd-b66a-3356-9e68-3bb0b9997a46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
161.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:ea:5c:b3:ca:f0:b7:59:9a:4c:5b:f3:fc:31:07:4e:53:73:
27:44:a0:d4:d2:05:89:f9:0d:fb:9e:f3:b8:7f:86:1d:84:ed:
05:6f:58:b8:e8:15:62:23:03:21:68:fe:65:60:c7:14:72:ad:
82:af:ab:3a:6f:b3:92:e4:ff:19:28:fc:0e:a7:d8:81:af:5c:
39:64:c7:28:19:45:5c:54:74:f4:f4:bf:85:4d:6c:21:4f:ff:
51:97:49:c2:15:42:82:0f:8e:1d:59:c0:36:08:14:23:0c:40:
d4:53:1e:f8:79:ad:7b:e4:b0:36:94:40:d7:ca:c8:fa:ce:9e:
bd:68:40:f6:17:35:3c:f1:67:20:ad:6a:1c:46:ef:15:36:b4:
11:4f:b1:ce:5f:61:39:96:20:72:ec:a7:07:ad:56:3d:8f:43:
da:ae:2e:75:6f:33:5b:15:0c:dd:07:16:de:85:b2:5f:44:8d:
db:dc:a9:5e:e0:1d:92:a5:84:9b:72:eb:a1:c7:0c:3d:eb:38:
22:65:18:84:4f:45:61:54:58:b7:d9:ad:58:d5:c7:bb:67:ae:
c5:45:ef:57:99:88:35:84:ef:36:0e:53:af:4c:b1:ab:99:33:
2d:03:00:b1:50:cc:77:1e:20:79:26:c8:35:09:09:54:22:b1:
82:87:c9:49
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBA1nNzxuzMUIO9OjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
NDFkMzkzMmQtYTNiZi00OWFhLThjMDEtZGUwZDcwZGE1NDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI1N5zvrHB5Lc7uyB95DiJirhv5dbkpzS91z
IS9RRT/qoj7lN+Ts1dGyO8Z7i/l5+KA1Tz/rDs83kCq2tAc/u+RLshj/jmBcXiA4
4bfAxK4c3kJS8IWh2HnYAWBAVE/nnPtgX7OTSgm9VumpA0zuV+AqnQCrLg2FYwKt
UkhOL1oUT9twkTYpS2EJhwODxng4J5WfvsTNDAYFAb+yEoOV7QpuvwXx2osZXvMy
QoNISdnjgzIXy8lwfuniaYn/fEEsKmi2vRIYRsBEKtcPvHJYQtJWlXmsZB/rrRW0
R9EBEge4NqtnQ/PV0PDPs7EfR/YCEHKRBxmIFp5/u0DR+mOtKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP4PfaGVXk80odYB8d28ILLxt5WUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzI5NDBlY2QtYjY2YS0z
MzU2LTllNjgtM2JiMGI5OTk3YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAobIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmupcs8rwt1maTFvz/DEHTlNzJ0Sg1NIFifkN+57zuH+GHYTtBW9YuOgV
YiMDIWj+ZWDHFHKtgq+rOm+zkuT/GSj8DqfYga9cOWTHKBlFXFR09PS/hU1sIU//
UZdJwhVCgg+OHVnANggUIwxA1FMe+Hmte+SwNpRA18rI+s6evWhA9hc1PPFnIK1q
HEbvFTa0EU+xzl9hOZYgcuynB61WPY9D2q4udW8zWxUM3QcW3oWyX0SN29ypXuAd
kqWEm3LroccMPes4ImUYhE9FYVRYt9mtWNXHu2euxUXvV5mINYTvNg5Tr0yxq5kz
LQMAsVDMdx4geSbINQkJVCKxgofJSQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:39 2025 by rpki-client