Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b0a2e0e-3821-3810-95f3-26cd6563a52b.roa
File: 3b0a2e0e-3821-3810-95f3-26cd6563a52b.roa (raw, json)
Hash identifier: BU18i6QrnTDeFCw7z6s/xr4EgJu6QJqmg5RKcQKvC0U=
Subject key identifier: 0F:5B:B5:8E:69:B6:E9:EC:F6:FE:28:0E:53:CD:8E:41:1A:4B:31:31
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA3FA077F0D940BF051DD9C50
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b0a2e0e-3821-3810-95f3-26cd6563a52b.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 167.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a3:fa:07:7f:0d:94:0b:f0:51:dd:9c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=528c349c-9783-414e-84a6-128e0cd5c25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:e9:97:a1:e3:95:41:b3:bc:94:fa:64:3c:
6f:72:0a:be:10:dd:fa:71:15:d1:d4:8b:f2:83:8d:
a2:26:72:fe:0b:81:1c:fa:92:20:f8:4e:b0:dd:dd:
62:87:9b:06:7f:5f:fc:2a:cc:b9:f2:63:c8:7b:ba:
c7:ad:c4:6c:ec:b7:01:c7:03:e6:63:af:93:c3:37:
90:a1:8a:2a:35:2b:e4:80:2e:e3:40:0d:84:fa:2e:
c5:65:1e:98:3c:14:4d:a8:e7:7e:10:0a:10:bc:61:
23:96:13:ac:0f:2a:77:c3:e6:d9:ed:61:f4:63:fb:
ea:77:03:2d:14:e5:81:98:b2:29:b6:5e:a5:91:13:
7d:5f:c2:65:67:0d:ae:e0:1b:6a:44:cd:da:8c:87:
26:e4:36:bf:77:2a:78:69:57:48:4f:b4:91:67:7e:
02:ae:5e:b2:ed:97:ee:04:b4:50:35:c7:c2:84:d3:
a1:78:db:dd:de:3e:79:23:89:fc:e3:03:f0:23:f2:
a4:28:c1:67:6b:23:ae:92:8b:ad:76:5a:f5:f3:78:
13:ec:d1:d4:b2:ef:52:fe:a8:6d:fc:c4:24:61:f7:
a0:c7:05:79:dc:c6:73:eb:71:4e:80:c7:1b:42:ef:
a5:c4:e7:17:d2:6c:72:b6:16:ce:60:1e:52:33:13:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5B:B5:8E:69:B6:E9:EC:F6:FE:28:0E:53:CD:8E:41:1A:4B:31:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3b0a2e0e-3821-3810-95f3-26cd6563a52b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:ee:56:73:a0:40:88:33:ef:97:e9:c6:09:fa:f3:2a:a9:35:
92:26:c4:dd:22:13:20:27:da:41:80:ff:6b:a2:d0:0c:ac:db:
be:78:16:76:db:63:61:6a:bd:5b:dd:15:c9:fc:8b:71:61:61:
72:3d:d6:23:3e:15:75:a4:8c:f9:89:27:08:48:d3:93:32:c4:
51:8a:6a:22:e8:cb:20:7d:26:45:78:3e:14:1a:59:fa:d4:f3:
05:36:4b:fa:40:94:34:2f:01:02:28:05:69:96:84:ef:51:97:
1f:c1:e9:15:81:ea:cd:3d:26:2d:1f:b5:85:11:ea:96:a7:e9:
c3:bc:36:aa:f9:73:eb:e5:4a:f2:93:af:12:44:05:6b:b9:09:
f7:61:a3:bc:89:5f:31:b4:29:0a:e4:44:c2:5d:90:85:62:a9:
b6:00:13:fb:69:86:cb:b3:22:e4:3e:72:e2:fd:51:ff:0a:c2:
8a:49:6e:46:9f:d7:30:7a:77:c7:99:39:38:3e:1d:06:9a:bd:
65:fd:a1:37:06:9d:e2:dc:dd:36:dd:0b:52:ef:d7:c5:99:81:
70:a6:16:64:00:48:8d:ab:a7:55:ac:cb:8a:6c:44:c2:26:1d:
5a:6a:62:74:ea:15:b6:52:e5:b5:e4:58:0a:e0:25:0f:d0:8a:
d4:a8:9c:0f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+j+gd/DZQL8FHdnFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyMDEyMDAwMFoXDTIyMTEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
NTI4YzM0OWMtOTc4My00MTRlLTg0YTYtMTI4ZTBjZDVjMjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpLpl6HjlUGzvJT6ZDxvcgq+EN36cRXR1Ivy
g42iJnL+C4Ec+pIg+E6w3d1ih5sGf1/8Ksy58mPIe7rHrcRs7LcBxwPmY6+TwzeQ
oYoqNSvkgC7jQA2E+i7FZR6YPBRNqOd+EAoQvGEjlhOsDyp3w+bZ7WH0Y/vqdwMt
FOWBmLIptl6lkRN9X8JlZw2u4BtqRM3ajIcm5Da/dyp4aVdIT7SRZ34Crl6y7Zfu
BLRQNcfChNOheNvd3j55I4n84wPwI/KkKMFnayOukoutdlr183gT7NHUsu9S/qht
/MQkYfegxwV53MZz63FOgMcbQu+lxOcX0mxythbOYB5SMxPRBQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA9btY5ptuns9v4oDlPNjkEaSzExMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2IwYTJlMGUtMzgyMS0z
ODEwLTk1ZjMtMjZjZDY1NjNhNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApwIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhO5Wc6BAiDPvl+nGCfrzKqk1kibE3SITICfaQYD/a6LQDKzbvngWdttj
YWq9W90VyfyLcWFhcj3WIz4VdaSM+YknCEjTkzLEUYpqIujLIH0mRXg+FBpZ+tTz
BTZL+kCUNC8BAigFaZaE71GXH8HpFYHqzT0mLR+1hRHqlqfpw7w2qvlz6+VK8pOv
EkQFa7kJ92GjvIlfMbQpCuREwl2QhWKptgAT+2mGy7Mi5D5y4v1R/wrCikluRp/X
MHp3x5k5OD4dBpq9Zf2hNwad4tzdNt0LUu/XxZmBcKYWZABIjaunVazLimxEwiYd
WmpidOoVtlLlteRYCuAlD9CK1KicDw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:08 2025 by rpki-client