Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37c3a06c-e98c-3808-bac8-d273831c1a9f.roa
File: 37c3a06c-e98c-3808-bac8-d273831c1a9f.roa (raw, json)
Hash identifier: mRZNz7mgHkE6QNxxYHw04UMqmOxaDf9MjhG30RL6p7k=
Subject key identifier: 8D:BB:3C:CE:6B:68:47:C5:37:D2:77:6F:AF:05:35:91:60:03:99:87
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E51DB6DA9CDB4FAB3387159B0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37c3a06c-e98c-3808-bac8-d273831c1a9f.roa
Signing time: Tue 21 Jun 2022 12:00:00 +0000
ROA not before: Tue 21 Jun 2022 12:00:00 +0000
ROA not after: Wed 27 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 159.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:51:db:6d:a9:cd:b4:fa:b3:38:71:59:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 21 12:00:00 2022 GMT
Not After : Jul 27 04:00:00 2022 GMT
Subject: CN=3865094d-4d25-44cd-af87-bec188931093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:61:9d:c4:5c:4b:21:c4:ff:84:a4:ff:38:be:
4e:63:45:7d:d4:5d:66:7c:a5:64:af:78:f7:ed:bb:
8c:c9:db:44:f1:8f:11:2a:fd:ca:08:86:da:98:41:
a5:8d:f1:9f:3a:14:0a:ed:92:56:67:ef:16:16:ca:
f5:0c:49:d7:1d:5a:18:83:5e:e7:1d:f7:60:47:ce:
c5:71:b6:a5:a6:3f:6a:88:73:74:8e:df:b0:90:cd:
d4:a5:5b:d4:ac:bc:c2:3d:2e:5c:46:4e:96:11:ae:
68:9b:fb:96:78:23:d0:88:45:5e:42:5d:f4:ce:30:
ff:a4:c4:ad:c6:47:dc:a6:e3:b7:35:bd:86:77:38:
9c:c8:c9:a0:30:d1:80:fe:17:1b:32:3f:fc:54:6f:
9a:41:ee:95:2c:ef:6a:ad:3a:b6:d4:ac:03:cc:10:
f9:03:71:cc:ae:05:39:d8:67:45:61:90:fe:73:6e:
e4:01:4e:eb:c1:5c:18:90:98:66:64:4c:43:ff:70:
db:05:3a:d7:21:61:d6:10:55:a7:a2:2e:4b:5c:c7:
b9:0b:32:ef:3a:b9:97:4a:19:92:f3:be:57:1d:f1:
ae:74:91:b4:c0:09:46:4b:96:3e:fa:e0:2d:2f:fc:
b9:43:1f:1f:bb:aa:fc:c1:a8:20:47:2d:28:e6:67:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BB:3C:CE:6B:68:47:C5:37:D2:77:6F:AF:05:35:91:60:03:99:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37c3a06c-e98c-3808-bac8-d273831c1a9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:8e:a7:a3:0c:50:9c:c6:7a:df:e6:5d:a0:89:f4:ac:36:ab:
60:3e:4e:7b:32:1a:b0:e0:48:82:ad:5a:64:2c:d7:99:1b:31:
6d:6c:bd:ae:64:9d:3e:c0:a7:3c:19:ec:e2:cf:38:a3:31:80:
6c:83:24:0c:a3:05:c5:cd:b3:f1:c3:c6:f6:d3:a9:60:8a:41:
fb:20:5a:c8:3f:c6:52:95:6e:0f:a5:f0:ac:64:d1:2d:6f:18:
8e:b8:43:0f:ce:95:b4:0c:06:da:d2:71:f7:ea:69:be:37:a3:
46:4c:b7:eb:02:68:99:31:9a:3e:10:2a:4b:fe:52:e6:0e:6c:
ec:ef:41:ab:b7:20:8e:6f:3e:2e:f2:02:9c:a2:00:4e:69:d7:
ea:92:a1:63:42:e8:65:87:bb:1f:96:79:06:76:96:1f:48:a2:
96:61:88:74:5e:55:59:3f:7e:fa:c4:22:35:b2:10:3f:f3:b5:
fb:98:2e:1f:ae:c9:ed:b3:a2:d4:d6:bd:f8:f8:fe:9c:fb:ec:
18:57:61:8f:40:9a:28:01:e0:d9:44:eb:23:eb:bb:89:56:2f:
6e:7f:48:e0:4a:a0:4c:be:3f:5d:9a:4c:11:a3:9a:15:fe:62:
4a:95:28:37:27:03:54:a8:b5:df:55:71:28:14:79:24:c2:b8:
a3:f8:2c:aa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5R222pzbT6szhxWbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYyMTEyMDAwMFoXDTIyMDcyNzA0MDAwMFowLzEtMCsGA1UEAxMk
Mzg2NTA5NGQtNGQyNS00NGNkLWFmODctYmVjMTg4OTMxMDkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWGdxFxLIcT/hKT/OL5OY0V91F1mfKVkr3j3
7buMydtE8Y8RKv3KCIbamEGljfGfOhQK7ZJWZ+8WFsr1DEnXHVoYg17nHfdgR87F
cbalpj9qiHN0jt+wkM3UpVvUrLzCPS5cRk6WEa5om/uWeCPQiEVeQl30zjD/pMSt
xkfcpuO3Nb2GdzicyMmgMNGA/hcbMj/8VG+aQe6VLO9qrTq21KwDzBD5A3HMrgU5
2GdFYZD+c27kAU7rwVwYkJhmZExD/3DbBTrXIWHWEFWnoi5LXMe5CzLvOrmXShmS
875XHfGudJG0wAlGS5Y++uAtL/y5Qx8fu6r8waggRy0o5mfRLwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI27PM5raEfFN9J3b68FNZFgA5mHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzdjM2EwNmMtZTk4Yy0z
ODA4LWJhYzgtZDI3MzgzMWMxYTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnwswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEY6nowxQnMZ63+ZdoIn0rDarYD5OezIasOBIgq1aZCzXmRsxbWy9rmSd
PsCnPBns4s84ozGAbIMkDKMFxc2z8cPG9tOpYIpB+yBayD/GUpVuD6XwrGTRLW8Y
jrhDD86VtAwG2tJx9+ppvjejRky36wJomTGaPhAqS/5S5g5s7O9Bq7cgjm8+LvIC
nKIATmnX6pKhY0LoZYe7H5Z5BnaWH0iilmGIdF5VWT9++sQiNbIQP/O1+5guH67J
7bOi1Na9+Pj+nPvsGFdhj0CaKAHg2UTrI+u7iVYvbn9I4EqgTL4/XZpMEaOaFf5i
SpUoNycDVKi131VxKBR5JMK4o/gsqg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:28 2025 by rpki-client