Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c1eca05-0901-3ad1-8123-25f46b261c6c.roa
File: 3c1eca05-0901-3ad1-8123-25f46b261c6c.roa (raw, json)
Hash identifier: aKY/URMnX8RQyS8f/DXUAUKWEJV8ZRIGBnSwznFAobQ=
Subject key identifier: 7A:A1:E0:4D:DE:6F:E4:9D:7B:83:09:AF:69:B5:D1:3B:B2:D0:33:4F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF2C39294FC104E6497DACD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c1eca05-0901-3ad1-8123-25f46b261c6c.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 40.164.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f2:c3:92:94:fc:10:4e:64:97:da:cd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=9267f137-a417-4537-857b-61d9d36b6b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:18:45:9c:3d:8f:01:4c:10:20:f5:c3:39:
a6:ce:9e:18:41:74:d2:51:0f:61:56:27:af:76:e9:
c8:58:34:9a:df:3e:da:d2:cb:d8:15:6d:ca:f0:75:
b2:99:e3:94:be:96:d1:49:25:e5:ff:67:5a:9d:5f:
13:ba:0c:29:dd:ae:71:15:7b:24:30:bc:b9:99:41:
d8:d0:04:24:ad:35:13:78:e8:14:4b:b1:6a:ff:53:
f3:89:67:7a:33:e3:5e:6f:99:06:5d:b1:54:28:1a:
49:e1:32:14:dd:dc:a0:59:2f:a5:e3:cb:0e:a7:9e:
8f:2d:03:40:8d:2f:de:54:5b:b2:2f:7e:53:7e:ad:
ee:b6:2c:4f:6f:0c:65:78:2d:41:04:3c:47:45:35:
07:de:f3:89:db:db:38:48:27:01:86:9f:2d:d0:55:
cb:de:cd:3d:d9:58:b2:6a:15:d2:dc:a3:d5:20:e3:
4f:8a:22:00:63:d3:7a:e6:eb:96:cd:ee:7d:09:1b:
b6:8a:ac:7f:97:c4:56:c6:ae:ac:d1:fb:9c:93:44:
1e:2a:e2:c0:4b:1c:e5:06:f8:3b:e6:96:57:c8:ae:
6c:0f:31:c8:05:f1:bc:cc:18:1f:36:77:6a:81:0f:
89:be:3a:84:5e:b4:be:ee:20:ce:17:8b:56:fd:29:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A1:E0:4D:DE:6F:E4:9D:7B:83:09:AF:69:B5:D1:3B:B2:D0:33:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c1eca05-0901-3ad1-8123-25f46b261c6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.164.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:2f:6f:f9:b5:75:28:28:6d:3a:1e:e4:b5:43:b7:be:c5:2a:
0a:4b:f1:c4:6e:69:f8:34:ab:7b:2d:c9:dd:ec:89:2e:38:d0:
ea:72:10:a5:80:d4:e5:dd:cf:dd:9e:31:09:a6:25:15:9f:da:
38:b5:9c:aa:42:e9:0a:5d:c3:30:22:c8:66:88:81:5c:de:a3:
1a:3e:9c:f3:0b:7e:05:34:07:28:bc:fa:3c:57:45:32:f1:be:
1b:7a:b3:31:6a:cb:b2:fc:34:33:8f:c4:a9:78:a4:01:3d:fa:
fd:94:b3:b0:e8:56:42:9b:0f:66:82:84:b2:29:0f:a0:dc:d3:
b1:d0:15:54:e3:9a:91:dd:21:d1:00:ca:9f:c0:60:43:af:a0:
3c:e1:9e:f7:22:18:57:a2:c5:9c:9d:2e:a2:0b:df:5f:7b:52:
11:48:f6:75:e8:43:d3:c9:ba:93:54:e8:e8:e8:28:3a:3c:85:
5d:3b:60:1f:15:7f:56:b1:41:60:fa:19:32:9e:77:1d:7c:c7:
66:17:6b:5c:b1:50:70:46:b2:ee:77:60:73:e7:11:87:5f:0f:
96:01:84:d5:90:ce:c0:dc:ed:cf:a6:13:3c:8a:88:38:df:01:
84:02:72:14:65:4d:81:8c:e4:7f:6f:d4:3b:bd:b9:25:4e:f1:
a1:63:72:1b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3yw5KU/BBOZJfazYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUxODEyMDAwMFoXDTIyMDYyMzA0MDAwMFowLzEtMCsGA1UEAxMk
OTI2N2YxMzctYTQxNy00NTM3LTg1N2ItNjFkOWQzNmI2YjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5IYRZw9jwFMECD1wzmmzp4YQXTSUQ9hViev
dunIWDSa3z7a0svYFW3K8HWymeOUvpbRSSXl/2danV8Tugwp3a5xFXskMLy5mUHY
0AQkrTUTeOgUS7Fq/1PziWd6M+Neb5kGXbFUKBpJ4TIU3dygWS+l48sOp56PLQNA
jS/eVFuyL35Tfq3utixPbwxleC1BBDxHRTUH3vOJ29s4SCcBhp8t0FXL3s092Viy
ahXS3KPVIONPiiIAY9N65uuWze59CRu2iqx/l8RWxq6s0fuck0QeKuLASxzlBvg7
5pZXyK5sDzHIBfG8zBgfNndqgQ+JvjqEXrS+7iDOF4tW/SkB1QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHqh4E3eb+Sde4MJr2m10Tuy0DNPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2MxZWNhMDUtMDkwMS0z
YWQxLTgxMjMtMjVmNDZiMjYxYzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgi9v+bV1KChtOh7ktUO3vsUqCkvxxG5p+DSrey3J3eyJLjjQ6nIQpYDU
5d3P3Z4xCaYlFZ/aOLWcqkLpCl3DMCLIZoiBXN6jGj6c8wt+BTQHKLz6PFdFMvG+
G3qzMWrLsvw0M4/EqXikAT36/ZSzsOhWQpsPZoKEsikPoNzTsdAVVOOakd0h0QDK
n8BgQ6+gPOGe9yIYV6LFnJ0uogvfX3tSEUj2dehD08m6k1To6OgoOjyFXTtgHxV/
VrFBYPoZMp53HXzHZhdrXLFQcEay7ndgc+cRh18PlgGE1ZDOwNztz6YTPIqION8B
hAJyFGVNgYzkf2/UO725JU7xoWNyGw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:01 2025 by rpki-client