Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/351325b4-c942-3e13-8cf0-4514286c506b.roa
File: 351325b4-c942-3e13-8cf0-4514286c506b.roa (raw, json)
Hash identifier: I4mNEE/XQdLu3kaGl000CvPLIPUj9AruD2TnIog+b1A=
Subject key identifier: B3:E2:E3:3B:D0:6C:43:C6:31:D2:86:29:49:D5:26:FD:16:8C:64:77
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF867C9EB831EA87FDFD76300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/351325b4-c942-3e13-8cf0-4514286c506b.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 192.189.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f8:67:c9:eb:83:1e:a8:7f:df:d7:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=0be56f8f-d1c7-4628-94cc-5193c925dec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:88:58:8b:7d:1b:4a:c0:66:c1:c9:59:2a:
db:38:47:ff:29:10:d2:e5:6f:e0:71:2b:b4:1b:4e:
cd:a7:bc:e3:b5:80:c3:b6:24:67:e3:df:0e:21:c3:
25:69:50:b6:38:ee:6f:53:61:d2:ac:aa:d7:1e:23:
9e:62:dd:34:1f:79:94:18:4d:7b:c1:8c:3d:8b:25:
3c:f3:82:a9:59:53:72:5b:35:f2:f5:50:8e:17:f2:
37:eb:15:48:4b:db:e5:8d:5b:82:0b:0a:65:f0:25:
10:7e:48:9f:d4:aa:07:c5:3f:53:29:b0:4a:0b:ac:
9e:68:1d:cf:d4:99:50:b4:3b:be:19:fd:03:d9:91:
58:7f:8a:b5:cf:61:90:2b:9a:5d:3f:8a:98:84:d7:
79:92:65:8e:d5:1a:f1:19:00:3c:dd:c4:e4:ba:b5:
db:92:6f:fc:2c:bf:8a:71:45:45:42:25:d4:c7:d0:
c6:f6:45:d7:83:7e:18:21:e4:ed:d7:aa:03:35:6b:
5e:30:4e:2c:8d:5c:57:48:b3:bb:59:d1:da:3c:71:
27:a6:ab:46:7f:c3:c9:60:33:fd:86:1d:c8:2a:d7:
1f:10:75:43:73:7d:a3:31:01:c5:13:5f:a7:c9:7b:
6d:f5:2d:08:50:ef:eb:4c:03:3e:c7:df:ed:d5:e0:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E2:E3:3B:D0:6C:43:C6:31:D2:86:29:49:D5:26:FD:16:8C:64:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/351325b4-c942-3e13-8cf0-4514286c506b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:4a:d8:8b:76:25:bb:32:1c:f9:ef:7b:fc:a3:e7:43:e2:df:
45:db:dc:0b:4e:cc:38:c1:b8:14:a4:b3:90:ce:f6:bb:dc:0c:
fa:36:8b:50:54:2f:86:2c:2a:10:ef:d3:9a:b0:23:86:82:86:
e7:19:47:74:4b:2d:27:55:b9:94:08:48:bd:7c:ab:0a:72:fe:
30:1e:69:92:11:ad:ea:96:be:34:0f:e7:af:b6:c2:19:2b:2a:
74:20:46:f9:12:5d:21:0c:84:64:ed:82:81:68:9a:b7:0c:66:
f3:b6:b1:5b:58:2d:b5:0b:a7:0d:a1:e5:81:3b:85:0b:9a:2e:
5a:fb:51:bd:28:d0:22:18:1d:d7:ed:cf:0d:6f:ca:44:4b:16:
48:b1:23:f7:aa:e7:37:33:96:9f:78:22:04:31:c4:85:bc:6d:
1f:5b:b7:f6:4b:c5:55:2f:c4:02:49:db:e6:8f:26:fd:3e:95:
54:1e:68:a4:e9:e7:c1:5b:c6:11:79:ad:c3:fd:5c:6a:9c:59:
d6:d1:f3:5b:bb:74:97:19:c2:0c:d3:e0:64:1f:49:bc:b1:db:
35:cc:6d:32:47:7e:16:a8:ea:42:5c:e3:b8:bb:52:aa:9e:12:
88:42:5d:c6:cf:88:15:ba:8d:62:d1:18:b5:08:9c:7e:78:3a:
7d:2d:6c:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD34Z8nrgx6of9/XYwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
MGJlNTZmOGYtZDFjNy00NjI4LTk0Y2MtNTE5M2M5MjVkZWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9uIWIt9G0rAZsHJWSrbOEf/KRDS5W/gcSu0
G07Np7zjtYDDtiRn498OIcMlaVC2OO5vU2HSrKrXHiOeYt00H3mUGE17wYw9iyU8
84KpWVNyWzXy9VCOF/I36xVIS9vljVuCCwpl8CUQfkif1KoHxT9TKbBKC6yeaB3P
1JlQtDu+Gf0D2ZFYf4q1z2GQK5pdP4qYhNd5kmWO1RrxGQA83cTkurXbkm/8LL+K
cUVFQiXUx9DG9kXXg34YIeTt16oDNWteME4sjVxXSLO7WdHaPHEnpqtGf8PJYDP9
hh3IKtcfEHVDc32jMQHFE1+nyXtt9S0IUO/rTAM+x9/t1eDNawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLPi4zvQbEPGMdKGKUnVJv0WjGR3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzUxMzI1YjQtYzk0Mi0z
ZTEzLThjZjAtNDUxNDI4NmM1MDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL3GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALFK2It2JbsyHPnve/yj50Pi30Xb3AtOzDjBuBSks5DO9rvcDPo2i1BU
L4YsKhDv05qwI4aChucZR3RLLSdVuZQISL18qwpy/jAeaZIRreqWvjQP56+2whkr
KnQgRvkSXSEMhGTtgoFomrcMZvO2sVtYLbULpw2h5YE7hQuaLlr7Ub0o0CIYHdft
zw1vykRLFkixI/eq5zczlp94IgQxxIW8bR9bt/ZLxVUvxAJJ2+aPJv0+lVQeaKTp
58FbxhF5rcP9XGqcWdbR81u7dJcZwgzT4GQfSbyx2zXMbTJHfhao6kJc47i7Uqqe
EohCXcbPiBW6jWLRGLUInH54On0tbN0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:27 2025 by rpki-client