Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33ad29d0-a335-3ed2-935a-8ad9eb3ebaf7.roa
File: 33ad29d0-a335-3ed2-935a-8ad9eb3ebaf7.roa (raw, json)
Hash identifier: o7Fl8qTFH+KgKp3PFCVcQjvqg6XkBg9MRSWxU3B39ow=
Subject key identifier: 5A:35:68:CA:0D:DC:E3:68:72:70:A3:55:AB:3C:79:F2:34:83:D7:7B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6DBEB952C527E5CE67447800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33ad29d0-a335-3ed2-935a-8ad9eb3ebaf7.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 192.189.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6d:be:b9:52:c5:27:e5:ce:67:44:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=f3653a98-f8d8-4110-b078-011475958e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:86:6e:e2:8a:9a:8f:04:8d:8d:15:cd:4a:
78:41:e3:73:67:23:e3:7e:47:4b:f1:21:dd:ad:fe:
d3:35:24:0c:14:e1:ed:81:cd:ec:ff:63:78:73:eb:
f8:b7:40:eb:ad:34:98:ea:15:b0:60:50:0b:67:06:
89:e1:b3:17:8c:a1:c1:fc:0b:65:32:04:ef:7b:48:
75:4d:f4:72:bc:c2:2e:60:03:79:ef:7d:5d:93:23:
48:98:70:4c:e1:e2:bb:ea:91:44:71:ee:f1:9a:86:
9a:3c:12:92:5b:54:e8:d6:ce:c7:0c:d4:df:a8:b8:
88:10:b5:69:16:f1:16:48:97:42:cc:4e:ef:df:c9:
fc:02:7f:3f:ab:b0:78:15:6f:58:f6:e1:62:b1:f0:
cb:83:8f:f9:66:1b:31:80:9e:b4:c3:a4:e5:b2:88:
fb:e6:4f:02:e5:26:00:e6:64:ba:54:71:f8:43:67:
d1:ac:7e:73:dc:27:01:09:20:cd:0b:6d:c6:72:88:
43:f9:a0:ec:b3:cf:3f:3e:52:40:ca:6e:2c:26:8c:
5b:59:02:c6:ce:03:cc:ea:a5:b0:70:fe:bd:a6:1d:
26:80:46:c8:58:a7:7d:aa:ea:d3:d1:5b:98:20:85:
0d:02:87:b2:48:fe:6d:e5:c5:18:41:01:16:06:8d:
9d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:35:68:CA:0D:DC:E3:68:72:70:A3:55:AB:3C:79:F2:34:83:D7:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33ad29d0-a335-3ed2-935a-8ad9eb3ebaf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:bc:43:d4:52:c0:72:7a:62:fe:f8:d7:57:9a:66:f9:41:f7:
4a:67:14:d4:8a:91:5a:34:6f:44:8b:30:19:a7:40:4f:04:7d:
f8:ab:12:77:46:dc:76:2f:3c:1b:5a:76:68:63:e0:a6:a9:ca:
f5:64:5e:c1:78:a3:d5:ca:e9:e5:d2:e3:9c:28:92:bd:8e:4e:
e1:75:d6:15:d3:7c:d6:62:be:9d:d1:c7:64:38:d5:12:f6:af:
a5:83:86:94:80:8c:29:d9:dc:97:31:5b:17:03:a0:c2:c9:7f:
68:2c:f4:1b:17:be:fd:2a:14:8f:31:42:06:4d:2b:b0:5d:c0:
0c:ee:92:7d:bf:22:29:c6:d9:f9:d8:5d:3a:cd:ba:ec:34:74:
5c:28:c1:64:a0:af:1d:64:94:42:9f:54:b0:df:fc:a9:e5:fd:
0f:1c:e1:9c:cb:ca:2f:03:76:fe:f1:5a:96:01:4a:71:d6:65:
dc:d0:d3:bc:c2:c5:eb:0f:c3:39:8d:72:6a:ee:46:37:61:91:
d7:8c:15:3e:35:19:f2:e8:c9:76:62:70:91:eb:26:a4:5f:37:
e3:a0:96:24:e2:a7:0c:e4:04:72:03:f2:1c:08:67:b2:52:55:
c3:5c:86:f1:71:16:5e:0c:d9:ef:35:f3:eb:96:93:52:f8:3d:
dd:1a:bc:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5tvrlSxSflzmdEeAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcwMTEyMDAwMFoXDTIyMDgwNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZjM2NTNhOTgtZjhkOC00MTEwLWIwNzgtMDExNDc1OTU4ZThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF+GbuKKmo8EjY0VzUp4QeNzZyPjfkdL8SHd
rf7TNSQMFOHtgc3s/2N4c+v4t0DrrTSY6hWwYFALZwaJ4bMXjKHB/AtlMgTve0h1
TfRyvMIuYAN5731dkyNImHBM4eK76pFEce7xmoaaPBKSW1To1s7HDNTfqLiIELVp
FvEWSJdCzE7v38n8An8/q7B4FW9Y9uFisfDLg4/5ZhsxgJ60w6Tlsoj75k8C5SYA
5mS6VHH4Q2fRrH5z3CcBCSDNC23GcohD+aDss88/PlJAym4sJoxbWQLGzgPM6qWw
cP69ph0mgEbIWKd9qurT0VuYIIUNAoeySP5t5cUYQQEWBo2dmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFo1aMoN3ONocnCjVas8efI0g9d7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzNhZDI5ZDAtYTMzNS0z
ZWQyLTkzNWEtOGFkOWViM2ViYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL3GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFu8Q9RSwHJ6Yv7411eaZvlB90pnFNSKkVo0b0SLMBmnQE8EffirEndG
3HYvPBtadmhj4KapyvVkXsF4o9XK6eXS45wokr2OTuF11hXTfNZivp3Rx2Q41RL2
r6WDhpSAjCnZ3JcxWxcDoMLJf2gs9BsXvv0qFI8xQgZNK7BdwAzukn2/IinG2fnY
XTrNuuw0dFwowWSgrx1klEKfVLDf/Knl/Q8c4ZzLyi8Ddv7xWpYBSnHWZdzQ07zC
xesPwzmNcmruRjdhkdeMFT41GfLoyXZicJHrJqRfN+OgliTipwzkBHID8hwIZ7JS
VcNchvFxFl4M2e818+uWk1L4Pd0avJU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:07 2025 by rpki-client