Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34d2bfb2-c5d4-300f-abc7-e72b1887c246.roa
File: 34d2bfb2-c5d4-300f-abc7-e72b1887c246.roa (raw, json)
Hash identifier: j5s6Uh4YjPrj90GOAHX/qAVYZZXSlvrJUKPBrrQLYI4=
Subject key identifier: EB:76:1E:42:D7:CE:3C:91:BF:F8:B8:F6:40:4E:CA:F2:33:C7:8B:A9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400DF21BFA052C4B8A74566E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34d2bfb2-c5d4-300f-abc7-e72b1887c246.roa
Signing time: Sun 27 Nov 2022 12:00:00 +0000
ROA not before: Sun 27 Nov 2022 12:00:00 +0000
ROA not after: Mon 02 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 192.251.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0d:f2:1b:fa:05:2c:4b:8a:74:56:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 27 12:00:00 2022 GMT
Not After : Jan 2 05:00:00 2023 GMT
Subject: CN=0681c5b1-25af-4d1a-987e-e853f580a534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:be:25:6a:fa:67:2f:62:a7:a3:49:a3:db:df:
0c:89:93:04:23:53:33:71:e6:2b:4f:f9:73:ff:6b:
48:96:80:7e:5d:3d:2c:2a:cf:a1:7a:d6:2a:fc:da:
74:18:16:cf:7d:26:bc:2b:4c:c0:a1:11:c3:9b:56:
b4:cb:b1:a7:34:a7:d5:ec:f0:0f:46:14:2e:52:cf:
11:75:63:f9:80:7d:3f:0f:6a:df:12:84:f6:91:14:
98:44:39:98:5a:60:32:e1:02:c3:4d:bc:20:9d:e8:
15:e8:b5:ab:c8:45:0c:01:1e:cf:12:cf:96:42:bf:
a0:d9:47:00:63:c6:01:ec:e6:ec:79:6e:4f:44:43:
e6:7f:5e:13:9e:de:a9:77:ea:15:f1:a2:cd:33:41:
c5:75:8c:7d:56:10:0d:45:5e:b3:a0:1e:00:4f:d2:
04:57:44:5f:5a:cf:57:c8:75:5d:b1:c7:a0:07:76:
db:f3:df:b2:8d:bf:95:e5:79:9a:e6:6d:a4:37:b2:
62:1d:61:3d:99:c1:e6:95:8d:80:a2:94:65:dd:a7:
0e:e0:10:c1:b2:4e:d6:02:17:1d:a3:18:35:39:d5:
4f:71:db:cd:75:18:d2:3a:b6:49:8e:f8:47:d3:71:
be:50:62:68:2f:d5:cf:6a:fe:cc:e8:ca:0e:44:53:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:76:1E:42:D7:CE:3C:91:BF:F8:B8:F6:40:4E:CA:F2:33:C7:8B:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34d2bfb2-c5d4-300f-abc7-e72b1887c246.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.251.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:d1:4e:1b:f4:7c:89:da:74:85:46:7f:3a:14:dc:72:04:4e:
2c:ca:cd:7d:74:bd:5c:1b:fc:e0:fb:c8:37:17:03:0a:f3:78:
cb:4b:c6:8c:35:09:c2:80:f2:39:ec:4f:d4:e0:89:9b:33:71:
ed:f4:85:35:f0:2d:ec:4d:55:e7:9c:ff:87:c0:d4:7c:1d:05:
6b:ca:fa:09:bd:a8:0c:cb:2f:e7:23:77:6a:86:87:f6:ec:f7:
e7:8c:94:71:2d:72:79:d1:12:63:99:ce:80:b6:3d:3a:32:6d:
bf:7f:65:32:df:a6:5c:99:33:01:0b:e4:cd:75:5e:36:a5:42:
db:13:b0:b1:02:fe:22:ff:e5:8e:47:b4:bc:fb:b7:9a:5d:84:
f4:ab:51:74:9d:42:28:f6:04:3f:72:50:50:6f:eb:00:4b:bb:
dc:63:6e:8d:b5:cd:95:22:51:ae:ea:fe:f9:d5:ac:87:e3:f7:
ea:91:bc:b2:f5:2e:f3:91:72:c3:7f:50:65:e1:a3:da:c2:4f:
69:53:5f:88:f1:f3:d7:5b:44:8c:cb:3d:26:8c:07:87:ee:b4:
57:9b:9b:55:ed:25:04:da:28:6d:a9:06:5c:d3:c9:9f:59:25:
0d:33:5b:ae:77:25:aa:12:76:fe:fe:30:98:66:3d:44:b7:ac:
22:1f:4b:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAN8hv6BSxLinRWbgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyNzEyMDAwMFoXDTIzMDEwMjA1MDAwMFowLzEtMCsGA1UEAxMk
MDY4MWM1YjEtMjVhZi00ZDFhLTk4N2UtZTg1M2Y1ODBhNTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh74lavpnL2Kno0mj298MiZMEI1MzceYrT/lz
/2tIloB+XT0sKs+hetYq/Np0GBbPfSa8K0zAoRHDm1a0y7GnNKfV7PAPRhQuUs8R
dWP5gH0/D2rfEoT2kRSYRDmYWmAy4QLDTbwgnegV6LWryEUMAR7PEs+WQr+g2UcA
Y8YB7ObseW5PREPmf14Tnt6pd+oV8aLNM0HFdYx9VhANRV6zoB4AT9IEV0RfWs9X
yHVdscegB3bb89+yjb+V5Xma5m2kN7JiHWE9mcHmlY2AopRl3acO4BDBsk7WAhcd
oxg1OdVPcdvNdRjSOrZJjvhH03G+UGJoL9XPav7M6MoORFPZ+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOt2HkLXzjyRv/i49kBOyvIzx4upMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzRkMmJmYjItYzVkNC0z
MDBmLWFiYzctZTcyYjE4ODdjMjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPuNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHbRThv0fInadIVGfzoU3HIETizKzX10vVwb/OD7yDcXAwrzeMtLxow1
CcKA8jnsT9TgiZszce30hTXwLexNVeec/4fA1HwdBWvK+gm9qAzLL+cjd2qGh/bs
9+eMlHEtcnnREmOZzoC2PToybb9/ZTLfplyZMwEL5M11XjalQtsTsLEC/iL/5Y5H
tLz7t5pdhPSrUXSdQij2BD9yUFBv6wBLu9xjbo21zZUiUa7q/vnVrIfj9+qRvLL1
LvORcsN/UGXho9rCT2lTX4jx89dbRIzLPSaMB4futFebm1XtJQTaKG2pBlzTyZ9Z
JQ0zW653JaoSdv7+MJhmPUS3rCIfS+k=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:11:35 2025 by rpki-client