Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33b59429-a3bb-3bdd-a9ab-3851ee532f60.roa
File: 33b59429-a3bb-3bdd-a9ab-3851ee532f60.roa (raw, json)
Hash identifier: Fm4I2G7WRR4JhnKFVyuC2cYr6L3UhE6CH5+DpblFc3U=
Subject key identifier: B0:4F:7F:12:F6:FB:C3:EE:96:63:52:42:2D:25:D8:11:59:E8:88:0E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FEC9E9430301B3948D18C3D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33b59429-a3bb-3bdd-a9ab-3851ee532f60.roa
Signing time: Tue 15 Nov 2022 15:06:07 +0000
ROA not before: Tue 15 Nov 2022 15:06:07 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 129.235.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ec:9e:94:30:30:1b:39:48:d1:8c:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 15 15:06:07 2022 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=8026ffec-230e-4421-be22-ccdda182ad9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:97:7a:d2:0f:3c:c9:04:16:00:83:95:45:
cc:9c:d3:d1:c0:7b:4d:f9:83:45:5c:ff:6c:b8:5d:
d1:ab:fd:b3:3b:5e:a4:fb:3f:45:81:e0:89:5e:e0:
06:06:4c:27:24:8a:f8:4f:6c:1a:80:25:23:11:e0:
ac:56:f1:2b:d0:87:10:5d:00:21:41:85:ed:89:8d:
6d:ed:f4:66:3c:4c:ef:c9:d0:f6:83:c7:5c:ad:a2:
10:81:37:a1:e0:14:1c:c9:92:74:bb:f9:65:a1:fa:
5d:27:75:d7:96:d0:9b:59:cb:e0:61:6b:6d:4b:49:
9a:9a:f6:71:48:b8:85:aa:40:b8:75:62:67:54:28:
23:c3:f6:99:33:d4:06:97:f4:f4:91:0f:c1:64:00:
98:f0:19:55:3f:35:64:47:42:d5:b8:dd:e7:42:fc:
32:85:0d:73:c6:2e:b5:73:ac:a0:9a:3c:ec:63:a8:
b2:c6:73:0c:86:02:70:4d:99:1c:c3:cb:a8:39:ca:
a6:13:ba:05:64:a2:c2:31:aa:6b:6f:f3:eb:66:a1:
45:1f:d4:7b:14:5b:58:4b:3f:6c:e8:17:f2:ad:da:
ab:5f:30:bf:bc:b9:0a:9e:0a:a6:c3:68:01:21:be:
49:f6:25:23:c0:18:16:33:87:b7:b6:10:68:f2:0f:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4F:7F:12:F6:FB:C3:EE:96:63:52:42:2D:25:D8:11:59:E8:88:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33b59429-a3bb-3bdd-a9ab-3851ee532f60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.235.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:0a:d0:a8:16:24:fc:0d:0c:ec:bb:9e:f4:a7:30:83:c5:32:
fd:ea:41:b4:b1:20:97:6e:51:8d:a9:37:73:0b:93:d2:e6:0d:
3b:cf:3d:70:66:00:57:e2:5a:5d:90:b7:03:5b:40:df:ed:41:
57:78:f4:3c:7d:20:37:1b:ab:fa:d4:14:ad:c4:74:93:75:4b:
6e:27:e8:af:d0:82:3b:4e:28:78:ca:70:68:63:fb:03:be:f0:
2f:9f:cb:f4:7f:bc:4f:c3:54:00:59:96:4f:98:d5:11:be:78:
7a:18:03:b0:9e:b8:fe:57:6a:48:05:a7:f0:37:4e:cc:8f:d6:
61:7e:27:fc:9d:56:89:fc:c9:33:51:72:e1:be:3a:37:b7:a3:
67:74:bf:6e:ae:c8:5a:b2:08:64:60:21:01:fe:8e:69:c0:d1:
da:ef:cb:5b:08:a3:b9:e2:7b:b8:43:f4:86:87:b0:90:b1:93:
1f:fe:d9:23:8e:37:b8:bb:f5:47:8f:35:c1:8e:62:e1:b6:3d:
06:9e:18:e5:d4:43:77:54:d5:a9:b7:d4:bb:ee:b8:f7:7e:01:
c3:68:69:1a:cf:ad:45:43:91:72:d0:26:5e:bc:ba:36:2a:a9:
75:f7:83:09:49:42:04:a6:de:40:7e:d0:95:a9:04:ca:fe:27:
ec:da:7a:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/snpQwMBs5SNGMPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNTE1MDYwN1oXDTIyMTIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
ODAyNmZmZWMtMjMwZS00NDIxLWJlMjItY2NkZGExODJhZDlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFaXetIPPMkEFgCDlUXMnNPRwHtN+YNFXP9s
uF3Rq/2zO16k+z9FgeCJXuAGBkwnJIr4T2wagCUjEeCsVvEr0IcQXQAhQYXtiY1t
7fRmPEzvydD2g8dcraIQgTeh4BQcyZJ0u/llofpdJ3XXltCbWcvgYWttS0mamvZx
SLiFqkC4dWJnVCgjw/aZM9QGl/T0kQ/BZACY8BlVPzVkR0LVuN3nQvwyhQ1zxi61
c6ygmjzsY6iyxnMMhgJwTZkcw8uoOcqmE7oFZKLCMaprb/PrZqFFH9R7FFtYSz9s
6BfyrdqrXzC/vLkKngqmw2gBIb5J9iUjwBgWM4e3thBo8g+LtQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLBPfxL2+8PulmNSQi0l2BFZ6IgOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzNiNTk0MjktYTNiYi0z
YmRkLWE5YWItMzg1MWVlNTMyZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgeswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmQrQqBYk/A0M7Lue9Kcwg8Uy/epBtLEgl25Rjak3cwuT0uYNO889cGYA
V+JaXZC3A1tA3+1BV3j0PH0gNxur+tQUrcR0k3VLbifor9CCO04oeMpwaGP7A77w
L5/L9H+8T8NUAFmWT5jVEb54ehgDsJ64/ldqSAWn8DdOzI/WYX4n/J1WifzJM1Fy
4b46N7ejZ3S/bq7IWrIIZGAhAf6OacDR2u/LWwijueJ7uEP0hoewkLGTH/7ZI443
uLv1R481wY5i4bY9Bp4Y5dRDd1TVqbfUu+64934Bw2hpGs+tRUORctAmXry6Niqp
dfeDCUlCBKbeQH7QlakEyv4n7Np6Pg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:48:11 2025 by rpki-client