Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c1d245f-0671-32f8-b982-d6428cca39be.roa
File: 3c1d245f-0671-32f8-b982-d6428cca39be.roa (raw, json)
Hash identifier: 4NSDrOQqIP4fmKr316bIDJddOzGjgBmdNPOoGF6M+gs=
Subject key identifier: 8E:F9:AF:B6:DE:EF:70:F8:E0:85:08:54:FF:83:4B:DC:AD:DD:36:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F85103CDB444514CD820DBB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c1d245f-0671-32f8-b982-d6428cca39be.roa
Signing time: Sun 09 Oct 2022 12:00:00 +0000
ROA not before: Sun 09 Oct 2022 12:00:00 +0000
ROA not after: Mon 14 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 130.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:85:10:3c:db:44:45:14:cd:82:0d:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 9 12:00:00 2022 GMT
Not After : Nov 14 05:00:00 2022 GMT
Subject: CN=0abd236b-ecf8-4573-85de-137655008dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:da:ce:b3:90:a5:18:73:c4:de:7b:f6:43:
cd:99:4a:5c:2e:c9:16:da:85:50:75:c0:36:7d:74:
4b:36:a5:8c:be:45:a8:1a:fe:6f:a3:4e:5b:0f:e4:
8b:37:df:04:3c:72:3d:ee:48:0d:c2:4b:3c:e1:d0:
ab:00:73:63:1a:1a:27:e7:bd:df:03:df:f0:a2:02:
a1:4a:00:e9:b8:cd:44:cc:b3:12:71:1f:89:e0:10:
e5:e9:42:ff:b4:0d:1d:ea:6c:6a:03:2d:54:84:41:
d5:c0:55:cb:f7:cb:d2:d1:93:f9:c7:b2:a3:33:4e:
9b:97:15:f8:2e:7c:61:70:14:8a:dd:65:ab:60:5f:
bd:b7:6e:c0:bc:d5:fd:a9:d3:36:34:da:66:96:ae:
f1:5b:e1:3b:6d:30:bb:68:0e:48:43:46:ab:5a:f8:
70:69:6b:25:d7:44:89:fe:89:cd:fd:02:17:98:6d:
20:30:da:cc:ad:c3:d8:5a:1a:43:94:55:30:38:0d:
30:9b:f6:1d:e9:53:42:c9:e7:24:e3:82:e8:0f:4f:
2e:33:7d:19:f4:7f:d3:2c:2a:92:ab:26:52:2a:b6:
b5:2c:51:b1:ad:43:dc:cd:b7:44:45:0d:59:4c:1f:
c8:52:7f:85:55:d3:88:48:c8:44:ce:99:7d:66:e4:
a9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F9:AF:B6:DE:EF:70:F8:E0:85:08:54:FF:83:4B:DC:AD:DD:36:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c1d245f-0671-32f8-b982-d6428cca39be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:77:42:8f:16:15:52:30:8c:cd:d7:cb:c4:15:b9:94:08:02:
a5:d8:5d:72:6d:6d:55:c6:31:c6:3f:22:ac:b7:e7:a9:ff:f2:
72:13:5e:6e:82:93:d6:e4:61:5e:51:9b:58:96:cb:f2:ec:dd:
82:1a:10:bc:73:d8:ac:86:14:93:d5:0a:34:c9:ac:b1:28:e2:
2a:84:fa:76:bd:32:34:86:f3:6e:85:cf:04:4a:af:29:3a:29:
18:f0:fc:85:88:af:69:bc:e9:4e:99:32:4e:7f:fb:27:28:3a:
c1:29:e1:7f:b5:30:bc:3a:c1:99:b7:05:58:ad:e4:3d:7a:98:
e2:44:9e:21:2a:82:15:eb:9f:bd:32:43:8f:01:f5:ac:c3:2d:
5f:79:13:61:f5:bf:20:1e:e7:74:1a:24:cb:96:af:66:19:17:
77:42:46:8e:49:b8:b8:54:bd:af:26:77:0e:eb:0e:9c:5d:66:
73:9a:b3:eb:52:9f:58:e9:06:33:fb:3b:be:d9:99:82:4d:c2:
b1:90:b5:b4:4f:b5:5a:5d:3f:74:19:12:1e:0c:6a:88:d9:5b:
07:c6:72:51:12:58:6e:eb:22:66:ad:ce:b0:8d:ab:03:9f:25:
c7:10:79:84:bb:22:43:2c:94:88:14:92:e4:ca:04:ee:ab:0d:
a8:b8:72:10
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+FEDzbREUUzYINu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAwOTEyMDAwMFoXDTIyMTExNDA1MDAwMFowLzEtMCsGA1UEAxMk
MGFiZDIzNmItZWNmOC00NTczLTg1ZGUtMTM3NjU1MDA4ZGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTbazrOQpRhzxN579kPNmUpcLskW2oVQdcA2
fXRLNqWMvkWoGv5vo05bD+SLN98EPHI97kgNwks84dCrAHNjGhon573fA9/wogKh
SgDpuM1EzLMScR+J4BDl6UL/tA0d6mxqAy1UhEHVwFXL98vS0ZP5x7KjM06blxX4
LnxhcBSK3WWrYF+9t27AvNX9qdM2NNpmlq7xW+E7bTC7aA5IQ0arWvhwaWsl10SJ
/onN/QIXmG0gMNrMrcPYWhpDlFUwOA0wm/Yd6VNCyeck44LoD08uM30Z9H/TLCqS
qyZSKra1LFGxrUPczbdERQ1ZTB/IUn+FVdOISMhEzpl9ZuSp7QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI75r7be73D44IUIVP+DS9yt3TalMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2MxZDI0NWYtMDY3MS0z
MmY4LWI5ODItZDY0MjhjY2EzOWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAghUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqXdCjxYVUjCMzdfLxBW5lAgCpdhdcm1tVcYxxj8irLfnqf/ychNeboKT
1uRhXlGbWJbL8uzdghoQvHPYrIYUk9UKNMmssSjiKoT6dr0yNIbzboXPBEqvKTop
GPD8hYivabzpTpkyTn/7Jyg6wSnhf7UwvDrBmbcFWK3kPXqY4kSeISqCFeufvTJD
jwH1rMMtX3kTYfW/IB7ndBoky5avZhkXd0JGjkm4uFS9ryZ3DusOnF1mc5qz61Kf
WOkGM/s7vtmZgk3CsZC1tE+1Wl0/dBkSHgxqiNlbB8ZyURJYbusiZq3OsI2rA58l
xxB5hLsiQyyUiBSS5MoE7qsNqLhyEA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:08 2025 by rpki-client