Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37d028e9-9c66-36bd-bff4-109d3c3de016.roa
File: 37d028e9-9c66-36bd-bff4-109d3c3de016.roa (raw, json)
Hash identifier: Ln3hi1gP78vUg+QQd4S2kqHzVnVOi6OSQw2o4zdfSL8=
Subject key identifier: E2:C9:7D:C2:99:60:03:44:8E:F4:F0:65:04:3B:58:09:60:2E:17:69
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE537109395DDF2612DB95E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37d028e9-9c66-36bd-bff4-109d3c3de016.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:37:10:93:95:dd:f2:61:2d:b9:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=cf8d5aee-2dda-46e1-934a-7a05c04a6ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8c:47:2b:da:c4:40:0e:ec:da:1f:a7:2b:bb:
b5:bd:b9:6a:34:6f:04:32:a2:10:83:49:cb:6d:8b:
a3:ea:1c:8f:36:70:65:e5:a8:6d:12:ff:1d:3f:5e:
c7:25:ab:28:f9:fc:64:f7:d7:ff:ff:aa:17:9c:72:
b9:30:8c:7c:87:66:37:3c:5e:48:43:4f:ed:73:31:
3d:12:39:d1:de:7c:1a:96:d9:c3:e5:a6:73:a8:a1:
02:e3:9c:4f:a1:ce:df:64:f3:27:c6:63:22:ee:1d:
81:80:cf:d1:a5:6f:70:0e:f8:ce:80:f8:9d:f7:e7:
d1:9f:18:30:4f:ed:6c:cf:f8:3d:22:2e:f2:6b:77:
21:fa:09:8c:2d:99:e4:f8:00:de:07:ea:ac:41:52:
f2:94:ac:5e:fe:fc:36:57:f1:df:e3:b3:8f:8e:e8:
6f:d9:96:7c:e2:1c:b1:d9:8a:f7:19:05:93:d0:7f:
b7:07:f5:a0:6d:e2:50:a7:ca:16:40:29:34:48:d6:
5b:9a:82:ca:b5:0f:c8:81:ed:bf:ad:ab:2b:ff:77:
fe:88:1d:87:cf:16:0f:d6:d2:e3:7c:e4:83:74:9d:
a7:fc:fc:20:56:fe:0a:e5:8e:da:87:a1:5e:eb:6a:
e8:6a:49:88:fe:17:3c:e6:5f:a4:f7:5f:0e:6f:30:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C9:7D:C2:99:60:03:44:8E:F4:F0:65:04:3B:58:09:60:2E:17:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37d028e9-9c66-36bd-bff4-109d3c3de016.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:e6:e3:08:78:0e:d1:f7:c5:53:33:25:54:ac:18:c6:3e:fd:
bd:c2:da:8a:9a:8f:29:3e:23:43:06:9a:be:e0:17:5b:ca:4f:
0d:47:e9:15:bc:17:49:c9:5d:cb:af:a8:16:6f:8d:0d:ad:b6:
33:c7:8d:4a:e4:fd:de:da:56:c7:ef:25:54:9b:bc:80:b9:6d:
1e:4e:48:b8:21:84:a3:e4:f7:3f:8e:a8:19:21:88:a4:33:99:
1a:5e:35:22:f2:c6:09:85:ef:13:37:4b:c0:ba:ab:da:d9:30:
e4:36:0d:b4:46:50:ef:6f:6d:69:47:9f:37:88:d6:38:7b:17:
83:5f:e9:39:5c:18:92:52:2f:16:68:25:51:a8:af:fa:78:31:
ef:17:7b:2a:c7:f7:3b:d0:af:00:7b:34:1d:f7:fc:88:0c:de:
51:03:6c:48:03:7f:8b:b7:85:5e:be:a4:91:f7:d0:b6:e9:2f:
da:73:bf:bc:b8:bb:d8:f1:3b:90:f2:5d:31:69:fb:15:a6:d0:
18:df:51:49:29:13:1c:d4:08:90:e9:88:64:80:83:0d:70:af:
0a:a4:62:e3:9c:e0:36:73:83:4f:88:52:9f:5e:a5:39:30:df:
e9:73:7f:32:b2:d7:a5:f9:b7:b6:7a:f3:ac:8e:c4:41:b4:4c:
4e:78:6e:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzlNxCTld3yYS25XoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
Y2Y4ZDVhZWUtMmRkYS00NmUxLTkzNGEtN2EwNWMwNGE2ZmZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYxHK9rEQA7s2h+nK7u1vblqNG8EMqIQg0nL
bYuj6hyPNnBl5ahtEv8dP17HJaso+fxk99f//6oXnHK5MIx8h2Y3PF5IQ0/tczE9
EjnR3nwaltnD5aZzqKEC45xPoc7fZPMnxmMi7h2BgM/RpW9wDvjOgPid9+fRnxgw
T+1sz/g9Ii7ya3ch+gmMLZnk+ADeB+qsQVLylKxe/vw2V/Hf47OPjuhv2ZZ84hyx
2Yr3GQWT0H+3B/WgbeJQp8oWQCk0SNZbmoLKtQ/Ige2/rasr/3f+iB2HzxYP1tLj
fOSDdJ2n/PwgVv4K5Y7ah6Fe62roakmI/hc85l+k918ObzCmYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOLJfcKZYANEjvTwZQQ7WAlgLhdpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzdkMDI4ZTktOWM2Ni0z
NmJkLWJmZjQtMTA5ZDNjM2RlMDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmMCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTm4wh4DtH3xVMzJVSsGMY+/b3C2oqajyk+I0MGmr7gF1vKTw1H6RW8
F0nJXcuvqBZvjQ2ttjPHjUrk/d7aVsfvJVSbvIC5bR5OSLghhKPk9z+OqBkhiKQz
mRpeNSLyxgmF7xM3S8C6q9rZMOQ2DbRGUO9vbWlHnzeI1jh7F4Nf6TlcGJJSLxZo
JVGor/p4Me8XeyrH9zvQrwB7NB33/IgM3lEDbEgDf4u3hV6+pJH30LbpL9pzv7y4
u9jxO5DyXTFp+xWm0BjfUUkpExzUCJDpiGSAgw1wrwqkYuOc4DZzg0+IUp9epTkw
3+lzfzKy16X5t7Z686yOxEG0TE54bnY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:33 2025 by rpki-client