Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35f52aea-2565-3b43-ab95-38cb3f9d1238.roa
File: 35f52aea-2565-3b43-ab95-38cb3f9d1238.roa (raw, json)
Hash identifier: NJUxrub8uAtamUSmFcxKluVhK+nKnTnhxw2+PWK1++s=
Subject key identifier: 67:7E:5B:93:FF:76:DD:82:E5:AE:33:0F:49:16:38:A0:62:B0:B7:97
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402008A449E4868F8C89AEA540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35f52aea-2565-3b43-ab95-38cb3f9d1238.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 76.255.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:20:08:a4:49:e4:86:8f:8c:89:ae:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=b47c8ae8-2456-4bea-ad42-d8a045644192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:23:d5:92:08:05:40:e3:0c:e2:5f:b0:0f:5e:
d3:66:70:94:5f:c3:79:31:bc:08:81:6c:ba:b1:d1:
ba:65:e5:fa:90:6e:b3:d0:2d:1a:1a:fe:c3:e4:14:
b2:d5:92:00:0d:49:96:1d:5e:62:63:8f:12:b6:30:
aa:b3:0e:19:24:ef:f6:29:a1:dd:56:6a:3d:93:a1:
80:58:7a:3a:ec:74:11:da:75:11:24:90:c6:e1:84:
46:8a:8a:55:b4:c6:c7:4b:f7:5a:61:35:05:33:27:
39:ee:ee:7c:c8:62:1b:e1:6a:b7:8e:45:54:62:d0:
10:b1:56:27:72:dc:d7:68:52:37:bb:69:36:4f:8a:
eb:26:1c:89:02:fa:ba:89:61:62:16:c1:fd:90:57:
88:ae:da:e3:23:d7:92:b1:34:28:38:aa:2d:46:7d:
d1:20:d3:41:3f:dd:1f:3a:7a:ac:9d:9d:bd:3c:dc:
3a:4e:99:49:d5:f4:66:14:ed:4c:b4:22:55:ca:ed:
d6:62:d9:70:02:11:b1:92:b0:7f:14:89:38:52:05:
af:36:c2:6f:e9:de:37:eb:9d:cf:87:27:25:d1:5a:
77:b7:fb:d4:82:cb:51:e8:2b:1a:28:3f:a7:7d:6b:
e7:99:d5:af:af:eb:1b:f3:d0:ac:c9:43:b2:7c:d7:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7E:5B:93:FF:76:DD:82:E5:AE:33:0F:49:16:38:A0:62:B0:B7:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/35f52aea-2565-3b43-ab95-38cb3f9d1238.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.255.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:75:82:ec:91:9f:50:6e:41:0c:19:b5:9c:f2:e0:d1:95:7a:
9b:ca:7d:64:84:03:8b:f2:71:e8:9f:92:91:8c:64:1d:e9:88:
24:e5:a6:c4:8c:2d:01:43:06:f0:90:81:39:53:28:ac:ee:2e:
15:86:57:b7:7c:96:76:eb:94:1b:10:87:16:04:0c:d5:d2:44:
b8:63:28:fd:56:dc:8e:0d:ee:ab:99:10:1d:96:2d:6f:f8:94:
b1:54:5f:98:fa:0b:4e:cf:8c:5e:c3:3c:d4:93:c8:4a:bb:60:
9c:f7:f6:75:dc:b7:60:dc:57:a5:3c:fb:9c:c0:45:44:28:b7:
59:0f:94:77:e6:63:e5:6a:25:88:1d:78:24:3d:bc:15:75:8d:
bc:cd:b8:a9:87:fd:60:66:15:30:ea:cc:99:79:9b:2b:ca:46:
ae:60:c4:c0:0d:fa:49:92:b3:48:83:b9:60:68:b7:f2:34:2b:
ff:f5:d0:1c:13:52:26:86:c0:0b:8a:b6:5a:1e:b7:81:8c:fb:
4e:5d:f5:4f:7c:c5:5a:d8:cd:09:48:a5:fa:66:0c:d9:c5:6b:
d8:32:d3:10:89:76:08:b8:6b:ec:17:0d:2a:fd:af:37:8f:b0:
61:33:f9:02:9c:9c:9b:55:80:20:ae:af:6a:ea:f9:4c:a5:49:
7d:72:43:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAgCKRJ5IaPjImupUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMzEyMDAwMFoXDTIzMDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
YjQ3YzhhZTgtMjQ1Ni00YmVhLWFkNDItZDhhMDQ1NjQ0MTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCPVkggFQOMM4l+wD17TZnCUX8N5MbwIgWy6
sdG6ZeX6kG6z0C0aGv7D5BSy1ZIADUmWHV5iY48StjCqsw4ZJO/2KaHdVmo9k6GA
WHo67HQR2nURJJDG4YRGiopVtMbHS/daYTUFMyc57u58yGIb4Wq3jkVUYtAQsVYn
ctzXaFI3u2k2T4rrJhyJAvq6iWFiFsH9kFeIrtrjI9eSsTQoOKotRn3RINNBP90f
OnqsnZ29PNw6TplJ1fRmFO1MtCJVyu3WYtlwAhGxkrB/FIk4UgWvNsJv6d43653P
hycl0Vp3t/vUgstR6CsaKD+nfWvnmdWvr+sb89CsyUOyfNd3lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGd+W5P/dt2C5a4zD0kWOKBisLeXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzVmNTJhZWEtMjU2NS0z
YjQzLWFiOTUtMzhjYjNmOWQxMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGTP9AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKp1guyRn1BuQQwZtZzy4NGVepvKfWSEA4vyceifkpGMZB3piCTlpsSM
LQFDBvCQgTlTKKzuLhWGV7d8lnbrlBsQhxYEDNXSRLhjKP1W3I4N7quZEB2WLW/4
lLFUX5j6C07PjF7DPNSTyEq7YJz39nXct2DcV6U8+5zARUQot1kPlHfmY+VqJYgd
eCQ9vBV1jbzNuKmH/WBmFTDqzJl5myvKRq5gxMAN+kmSs0iDuWBot/I0K//10BwT
UiaGwAuKtloet4GM+05d9U98xVrYzQlIpfpmDNnFa9gy0xCJdgi4a+wXDSr9rzeP
sGEz+QKcnJtVgCCur2rq+UylSX1yQ9I=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:00 2025 by rpki-client