Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/351f9ef5-ad51-39f3-8916-8d9487321d60.roa
File: 351f9ef5-ad51-39f3-8916-8d9487321d60.roa (raw, json)
Hash identifier: cKja4Ym1NOa+c6KAR4HY87uSC4EOq6qtoxOESTwc50c=
Subject key identifier: F4:FE:36:F5:B5:6F:1A:27:F2:E9:23:4D:DF:30:4B:FA:02:71:38:CB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584048A8F152C3C715ABE390D1E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/351f9ef5-ad51-39f3-8916-8d9487321d60.roa
Signing time: Sun 18 Dec 2022 12:00:00 +0000
ROA not before: Sun 18 Dec 2022 12:00:00 +0000
ROA not after: Mon 23 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 192.43.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:48:a8:f1:52:c3:c7:15:ab:e3:90:d1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 18 12:00:00 2022 GMT
Not After : Jan 23 05:00:00 2023 GMT
Subject: CN=bea3ac70-c74f-4ca9-82b7-af6defd3c8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a7:2c:7d:6e:bd:88:67:5d:3d:2d:5e:75:ef:
7a:24:ab:83:9b:9e:4b:14:f3:be:d5:4d:ee:0d:6b:
38:0b:52:db:67:43:65:17:1f:1d:ac:70:a6:c9:62:
b5:8b:e0:bb:d5:3a:29:dc:dc:07:c5:b6:5b:28:90:
a5:ce:dc:49:9e:40:73:55:f0:b5:14:5a:92:08:8e:
5a:e9:f7:86:42:9d:78:12:13:7b:36:fd:43:d1:8f:
18:81:3d:e3:97:b1:b7:2f:aa:96:ed:03:fd:99:69:
48:fe:c0:67:dc:e1:0f:6c:04:f9:bf:d1:01:0e:7b:
66:03:23:ce:08:cf:62:84:f9:60:5c:ad:80:80:1b:
9b:81:c8:9b:f1:cb:af:e6:83:3d:e4:9b:dd:a8:99:
64:4d:de:4b:b6:1c:4a:63:ca:5f:48:b3:79:65:c9:
89:fc:48:ba:6a:2d:e5:3e:e8:56:1f:28:8b:69:a1:
8b:40:f2:87:3c:3a:9c:5c:17:1d:8f:f4:ab:f1:59:
0b:4e:83:1f:55:40:57:3f:7c:61:4e:1d:75:0e:5b:
68:9f:ea:62:45:e7:ca:d0:02:b2:33:34:5a:db:ee:
6c:58:17:31:1e:e4:e9:4e:11:11:13:f0:2f:9e:23:
2d:db:00:92:58:08:0d:74:98:89:8a:d3:1b:3c:dd:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FE:36:F5:B5:6F:1A:27:F2:E9:23:4D:DF:30:4B:FA:02:71:38:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/351f9ef5-ad51-39f3-8916-8d9487321d60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.43.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:23:f1:a8:16:0b:42:60:fd:b0:d7:7a:31:1a:81:13:f0:76:
21:3f:c8:9f:d6:e2:d7:d5:02:3b:d2:9e:d5:64:4c:c2:74:07:
d6:f9:89:54:2d:d0:a3:89:0d:49:ed:a8:bb:95:c1:78:11:bc:
27:0e:e7:b1:b4:ee:e4:1a:cf:ac:5e:51:00:66:32:81:87:f5:
0c:33:ff:65:22:e1:34:76:a8:77:52:0e:75:d8:c4:63:a9:08:
bf:db:52:45:0a:0d:69:0b:51:e8:d6:92:6d:d6:65:08:ba:1c:
f4:36:72:48:5e:8a:63:f2:e0:e2:4f:1a:d7:3a:36:de:ec:ca:
a0:29:d6:83:97:1d:98:b6:6a:8d:91:70:53:25:01:22:84:e4:
96:9f:58:a4:9f:ea:eb:c5:09:78:18:89:f8:65:98:2d:2e:71:
12:35:b6:1b:2e:29:00:3b:23:29:1a:cb:a5:8f:40:99:df:7c:
b9:31:cc:65:ba:19:19:55:0c:05:a8:62:1d:e4:fa:92:0a:73:
16:cf:0e:f0:65:ef:ad:ac:28:2f:e0:18:01:6d:6d:91:d9:07:
1e:75:0d:40:2f:2d:85:23:12:16:ad:15:bc:a8:46:bd:4b:9d:
ef:76:8d:b8:32:f0:96:93:89:df:d0:86:32:3b:ad:ad:c6:23:
e7:52:00:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBIqPFSw8cVq+OQ0eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxODEyMDAwMFoXDTIzMDEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
YmVhM2FjNzAtYzc0Zi00Y2E5LTgyYjctYWY2ZGVmZDNjOGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6csfW69iGddPS1ede96JKuDm55LFPO+1U3u
DWs4C1LbZ0NlFx8drHCmyWK1i+C71Top3NwHxbZbKJClztxJnkBzVfC1FFqSCI5a
6feGQp14EhN7Nv1D0Y8YgT3jl7G3L6qW7QP9mWlI/sBn3OEPbAT5v9EBDntmAyPO
CM9ihPlgXK2AgBubgcib8cuv5oM95JvdqJlkTd5LthxKY8pfSLN5ZcmJ/Ei6ai3l
PuhWHyiLaaGLQPKHPDqcXBcdj/Sr8VkLToMfVUBXP3xhTh11Dlton+piRefK0AKy
MzRa2+5sWBcxHuTpThERE/AvniMt2wCSWAgNdJiJitMbPN3ruwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPT+NvW1bxon8ukjTd8wS/oCcTjLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzUxZjllZjUtYWQ1MS0z
OWYzLTg5MTYtOGQ5NDg3MzIxZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCuvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHgj8agWC0Jg/bDXejEagRPwdiE/yJ/W4tfVAjvSntVkTMJ0B9b5iVQt
0KOJDUntqLuVwXgRvCcO57G07uQaz6xeUQBmMoGH9Qwz/2Ui4TR2qHdSDnXYxGOp
CL/bUkUKDWkLUejWkm3WZQi6HPQ2ckheimPy4OJPGtc6Nt7syqAp1oOXHZi2ao2R
cFMlASKE5JafWKSf6uvFCXgYifhlmC0ucRI1thsuKQA7Iykay6WPQJnffLkxzGW6
GRlVDAWoYh3k+pIKcxbPDvBl762sKC/gGAFtbZHZBx51DUAvLYUjEhatFbyoRr1L
ne92jbgy8JaTid/QhjI7ra3GI+dSAIc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:15 2025 by rpki-client