Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34658df0-5595-3f37-a7a0-5ff9e67db223.roa
File: 34658df0-5595-3f37-a7a0-5ff9e67db223.roa (raw, json)
Hash identifier: Bbnmt3kjltm/h+Ff00bI1jIjFi+xujAjkVUy8wUhhSI=
Subject key identifier: 9A:C4:55:D2:C8:4D:08:37:B0:BC:DE:4C:A6:3C:9E:C3:0B:D3:42:36
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CCAB1927B0CD3A61FA92B7800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34658df0-5595-3f37-a7a0-5ff9e67db223.roa
Signing time: Wed 02 Feb 2022 05:00:00 +0000
ROA not before: Wed 02 Feb 2022 05:00:00 +0000
ROA not after: Wed 09 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 152.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ca:b1:92:7b:0c:d3:a6:1f:a9:2b:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 2 05:00:00 2022 GMT
Not After : Mar 9 05:00:00 2022 GMT
Subject: CN=b312154c-8244-42eb-8a43-482d4376a815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:38:e6:f4:66:dc:0f:58:43:f6:33:26:8f:14:
01:ed:ca:e3:05:fa:91:d9:46:ad:23:78:cb:2d:cd:
31:52:37:ee:d1:35:03:58:42:82:73:4a:de:8f:00:
36:37:7e:95:67:93:10:1d:04:3d:d6:15:01:49:a4:
0f:f3:ec:37:6a:8f:cf:d5:37:dc:f3:a2:e0:04:22:
f1:d0:82:e5:a1:c4:75:e1:3b:df:59:18:c5:25:5f:
01:a0:18:db:87:18:e6:28:05:c3:08:09:b6:83:16:
56:d3:20:4c:5e:10:4f:e2:41:0e:b9:2c:ae:95:b9:
06:d4:57:98:53:ff:15:6b:55:85:49:79:e2:9d:f6:
16:96:fd:11:58:7e:7e:b2:36:ba:4d:5a:11:2f:f1:
b5:fb:1f:9a:a2:c1:92:0d:36:ae:01:c1:2c:ee:5a:
a2:05:dc:a4:0d:cc:73:52:a9:9f:c2:8c:0f:61:20:
e3:f6:53:64:73:02:04:a0:59:d4:69:f1:52:45:ad:
98:6d:6a:07:aa:f1:f9:e0:d4:af:97:b5:f3:ee:3f:
7a:f3:4d:d5:8d:97:6e:6a:f8:8c:a1:66:2b:02:84:
61:81:81:63:22:0d:d0:16:67:07:25:30:a9:4f:88:
e0:0b:e4:04:3d:b3:42:45:2d:fb:be:57:e2:9d:a0:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C4:55:D2:C8:4D:08:37:B0:BC:DE:4C:A6:3C:9E:C3:0B:D3:42:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34658df0-5595-3f37-a7a0-5ff9e67db223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:3f:f1:48:0c:53:3a:18:2d:0a:82:08:3f:4d:68:a5:d8:66:
a2:19:22:59:39:d3:3c:e5:f7:ac:7f:bf:db:b9:ff:b5:15:9e:
77:ab:cc:65:09:da:72:ea:57:90:72:a5:2b:c4:40:50:88:de:
02:7f:46:da:ad:f5:93:8d:53:ac:b3:ff:01:a6:df:a1:2d:92:
c2:a1:73:cf:60:e3:a4:d1:02:73:5b:14:ed:e6:8d:6a:74:c6:
0e:be:3f:0d:7b:6e:1a:d1:28:19:9e:97:43:41:54:01:6f:ab:
ce:33:36:5f:89:20:74:55:5d:97:d0:ae:6d:b4:bd:c6:36:1a:
c9:0b:0b:02:16:c9:84:c0:ac:67:3c:1a:49:49:42:2b:30:45:
dd:03:6f:a7:28:73:66:51:bd:7a:c0:1b:30:a7:a1:7f:81:5a:
c9:62:74:b2:e9:9d:d2:44:79:43:30:3c:ea:0e:2b:c7:6e:f7:
24:f6:01:dd:9c:22:63:39:59:b7:f4:a5:df:e6:51:c0:7b:c6:
61:a4:31:cf:b3:fb:1a:e4:bc:40:c1:33:f9:82:ca:70:bb:cd:
2e:b5:7f:93:e7:b4:54:6c:06:a9:d9:ba:10:86:3e:de:93:8b:
f9:9f:b8:1e:6c:e6:c8:4e:98:4d:39:a8:f1:1e:46:6d:77:63:
fb:d7:36:19
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzKsZJ7DNOmH6kreAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIwMjA1MDAwMFoXDTIyMDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
YjMxMjE1NGMtODI0NC00MmViLThhNDMtNDgyZDQzNzZhODE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDjm9GbcD1hD9jMmjxQB7crjBfqR2UatI3jL
Lc0xUjfu0TUDWEKCc0rejwA2N36VZ5MQHQQ91hUBSaQP8+w3ao/P1Tfc86LgBCLx
0ILlocR14TvfWRjFJV8BoBjbhxjmKAXDCAm2gxZW0yBMXhBP4kEOuSyulbkG1FeY
U/8Va1WFSXninfYWlv0RWH5+sja6TVoRL/G1+x+aosGSDTauAcEs7lqiBdykDcxz
UqmfwowPYSDj9lNkcwIEoFnUafFSRa2YbWoHqvH54NSvl7Xz7j96803VjZduaviM
oWYrAoRhgYFjIg3QFmcHJTCpT4jgC+QEPbNCRS37vlfinaDwxQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJrEVdLITQg3sLzeTKY8nsML00I2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzQ2NThkZjAtNTU5NS0z
ZjM3LWE3YTAtNWZmOWU2N2RiMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmOMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQT/xSAxTOhgtCoIIP01opdhmohkiWTnTPOX3rH+/27n/tRWed6vMZQna
cupXkHKlK8RAUIjeAn9G2q31k41TrLP/AabfoS2SwqFzz2DjpNECc1sU7eaNanTG
Dr4/DXtuGtEoGZ6XQ0FUAW+rzjM2X4kgdFVdl9CubbS9xjYayQsLAhbJhMCsZzwa
SUlCKzBF3QNvpyhzZlG9esAbMKehf4FayWJ0sumd0kR5QzA86g4rx273JPYB3Zwi
YzlZt/Sl3+ZRwHvGYaQxz7P7GuS8QMEz+YLKcLvNLrV/k+e0VGwGqdm6EIY+3pOL
+Z+4HmzmyE6YTTmo8R5GbXdj+9c2GQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:39 2025 by rpki-client