Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/338f7894-9bd8-38a3-ba0d-7ed4c308e160.roa
File: 338f7894-9bd8-38a3-ba0d-7ed4c308e160.roa (raw, json)
Hash identifier: KVIrgPz1mSGbZp324jPPMoEI/zqxp9j6BrEfx5dg1r4=
Subject key identifier: C2:45:CF:2A:CA:4E:D0:CC:F6:76:61:C9:22:8B:0C:41:E4:2F:46:FE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584048BF761D81C702C63D6B7480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/338f7894-9bd8-38a3-ba0d-7ed4c308e160.roa
Signing time: Sun 18 Dec 2022 12:00:00 +0000
ROA not before: Sun 18 Dec 2022 12:00:00 +0000
ROA not after: Mon 23 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 153.12.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:48:bf:76:1d:81:c7:02:c6:3d:6b:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 18 12:00:00 2022 GMT
Not After : Jan 23 05:00:00 2023 GMT
Subject: CN=881bfe9d-9073-4ce5-bbce-0431ed37dc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:50:a7:e0:09:12:45:cb:7e:cf:5e:3f:b1:83:
b2:cd:a4:7a:f6:93:18:e9:ec:f3:ee:86:a4:cc:43:
33:63:ef:50:15:65:81:c9:97:71:e2:05:26:f2:9c:
ae:1d:18:8e:ce:4e:7e:72:4a:b5:5a:4b:a7:50:4a:
a0:be:d4:e6:6b:5a:eb:2a:69:4d:fd:bf:ff:58:85:
6f:84:32:96:69:f6:16:c1:b5:15:69:62:0f:da:b1:
ee:ec:60:a5:7d:aa:c8:bf:75:2e:47:d2:69:9f:2e:
78:6b:c7:9f:e1:88:8d:c9:1f:0e:f8:45:10:0c:0c:
29:ad:0d:ab:e9:30:eb:24:b3:7c:e9:e3:01:8c:74:
19:1e:0c:e0:69:35:e0:56:29:e2:c7:62:48:39:9b:
e5:e8:98:00:38:2e:ce:2f:79:7c:8d:0c:cc:5c:be:
a7:d3:c0:74:88:58:d1:5e:2a:c2:b5:87:a1:5b:de:
44:8f:be:b8:d1:61:91:e6:b5:e5:fa:76:68:50:bc:
b7:d2:3a:6d:7a:fe:95:f0:84:2c:1f:70:bd:d6:7c:
5f:e7:40:21:0e:7b:34:28:8b:18:46:ff:d5:51:95:
e4:cd:42:62:31:e0:bf:0a:e5:ce:f5:a6:8e:1b:c3:
80:9c:75:66:78:d0:64:67:d5:d9:93:c0:95:6b:72:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:45:CF:2A:CA:4E:D0:CC:F6:76:61:C9:22:8B:0C:41:E4:2F:46:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/338f7894-9bd8-38a3-ba0d-7ed4c308e160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.12.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:6c:c6:9f:af:f9:ea:e5:7a:25:e8:6f:21:c2:14:a7:6f:50:
ee:be:dc:cc:b2:14:09:23:47:99:fb:d5:8d:27:13:d5:88:b5:
4b:51:c7:af:c6:e5:bf:86:92:37:00:71:ee:d6:f0:16:36:82:
fa:de:e3:5d:2f:1a:b5:c9:9b:9b:db:07:98:1d:f7:62:ef:25:
bb:19:c7:9d:bf:bb:94:7b:0c:03:9b:d0:fc:80:e4:00:42:4f:
48:1b:e4:0b:a8:82:fa:06:94:a1:2a:c0:8d:8c:87:29:77:13:
f1:a3:cf:00:55:ce:aa:38:7c:85:ec:d0:34:79:58:1f:56:45:
4f:b4:37:a1:1b:00:76:e4:87:53:35:2e:33:c4:9c:d0:90:0f:
40:41:78:f6:8d:7a:8e:ee:a4:33:30:23:0e:e2:7e:a5:ad:27:
22:f9:9e:f8:67:6f:9b:f4:d4:5d:5a:b5:0e:fd:53:47:4d:0c:
a9:9d:0f:2f:5e:29:8d:9a:f7:42:97:f2:37:27:06:98:88:68:
82:bc:41:ee:e8:63:6b:9f:36:88:44:3b:7c:15:a2:2b:2b:f6:
23:79:f4:7c:ed:cc:7d:aa:ed:2f:64:57:63:79:66:8a:c3:7c:
d5:69:55:60:8c:12:02:b4:b1:55:fa:a9:31:95:57:aa:98:b0:
11:1f:db:c5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBIv3YdgccCxj1rdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxODEyMDAwMFoXDTIzMDEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
ODgxYmZlOWQtOTA3My00Y2U1LWJiY2UtMDQzMWVkMzdkYzU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFCn4AkSRct+z14/sYOyzaR69pMY6ezz7oak
zEMzY+9QFWWByZdx4gUm8pyuHRiOzk5+ckq1WkunUEqgvtTma1rrKmlN/b//WIVv
hDKWafYWwbUVaWIP2rHu7GClfarIv3UuR9Jpny54a8ef4YiNyR8O+EUQDAwprQ2r
6TDrJLN86eMBjHQZHgzgaTXgVinix2JIOZvl6JgAOC7OL3l8jQzMXL6n08B0iFjR
XirCtYehW95Ej7640WGR5rXl+nZoULy30jptev6V8IQsH3C91nxf50AhDns0KIsY
Rv/VUZXkzUJiMeC/CuXO9aaOG8OAnHVmeNBkZ9XZk8CVa3JS+wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMJFzyrKTtDM9nZhySKLDEHkL0b+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzM4Zjc4OTQtOWJkOC0z
OGEzLWJhMGQtN2VkNGMzMDhlMTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmQwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEGzGn6/56uV6JehvIcIUp29Q7r7czLIUCSNHmfvVjScT1Yi1S1HHr8bl
v4aSNwBx7tbwFjaC+t7jXS8atcmbm9sHmB33Yu8luxnHnb+7lHsMA5vQ/IDkAEJP
SBvkC6iC+gaUoSrAjYyHKXcT8aPPAFXOqjh8hezQNHlYH1ZFT7Q3oRsAduSHUzUu
M8Sc0JAPQEF49o16ju6kMzAjDuJ+pa0nIvme+Gdvm/TUXVq1Dv1TR00MqZ0PL14p
jZr3QpfyNycGmIhogrxB7uhja582iEQ7fBWiKyv2I3n0fO3MfartL2RXY3lmisN8
1WlVYIwSArSxVfqpMZVXqpiwER/bxQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:24 2025 by rpki-client