Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c5cb7e1-52b3-35b0-ae2e-17e862a99baa.roa
File: 3c5cb7e1-52b3-35b0-ae2e-17e862a99baa.roa (raw, json)
Hash identifier: ZGqq89gMqQYo9S/2+E3CpK/V59sXm2PA/bA9ELWmCfQ=
Subject key identifier: B5:0B:E2:9F:BA:D3:27:CB:C3:73:73:AA:F5:B0:95:80:F2:93:EB:1A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584035613ABB03C45891A3900180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c5cb7e1-52b3-35b0-ae2e-17e862a99baa.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 206.133.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:61:3a:bb:03:c4:58:91:a3:90:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=d598d73e-24cf-4ca4-9be0-5aacbe9d777e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:f6:8f:07:a6:18:6c:03:1b:81:a8:cb:88:
21:9c:f8:6c:b0:d4:19:8b:2d:66:54:08:c4:29:fe:
cb:54:02:46:c1:5d:0a:67:85:5c:ac:23:29:5a:06:
27:56:f9:ed:59:9a:6b:b2:5e:e2:b6:92:19:c1:3c:
86:03:bf:d0:5e:de:fd:60:68:59:b4:1c:19:2e:e9:
ce:47:35:5c:c6:77:20:8d:bb:5f:59:f4:82:e9:12:
21:83:61:df:e9:b6:ee:99:3f:75:67:b4:51:13:fb:
fe:99:4c:c6:b0:fd:06:81:31:10:31:c8:0a:0f:70:
31:96:69:d2:e1:ec:cd:e8:ca:7d:df:b6:4c:c2:bb:
a7:8d:d6:b7:b1:c1:cf:ab:29:0c:36:79:99:ad:98:
35:42:66:c1:e2:54:0d:8a:fd:36:cc:6e:b3:9d:fb:
f5:74:ae:29:0c:b8:b5:b5:cc:25:90:b3:19:4e:b9:
40:26:49:22:76:d3:76:a6:d0:b3:e7:be:ed:36:04:
64:c2:35:db:28:8e:14:da:4f:a2:62:cc:42:1f:25:
b1:19:84:e6:5f:0e:5e:f3:52:0e:f8:cc:64:d1:b1:
3c:03:b3:f9:56:ba:dd:13:c8:65:bb:36:76:fc:33:
db:54:48:44:f8:8b:7b:70:73:58:27:d9:79:f2:42:
00:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:E2:9F:BA:D3:27:CB:C3:73:73:AA:F5:B0:95:80:F2:93:EB:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c5cb7e1-52b3-35b0-ae2e-17e862a99baa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
206.133.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:59:51:ff:f1:61:9c:19:ad:ac:a8:b0:42:2b:75:f8:63:4a:
b0:0e:b0:f9:5c:b2:10:a1:6a:ad:9d:72:79:5a:30:f2:da:bd:
f9:8c:90:c4:a8:a7:60:5f:17:b9:01:ca:27:3b:88:5c:5e:5b:
79:a4:08:2b:38:4c:67:eb:34:04:be:16:50:f9:6b:bf:68:90:
f5:66:c6:80:e9:62:27:4f:60:d1:9d:0c:d7:c2:2a:02:c2:b7:
d6:af:06:ab:86:db:38:ff:f2:90:2f:5c:39:9f:3b:cb:f1:37:
5a:30:64:f7:b3:14:5e:29:99:7f:7e:21:a2:82:b6:41:ff:ed:
ab:ba:4b:a2:d1:c1:37:2a:e4:cc:69:69:4e:58:f0:63:d2:b8:
24:47:af:c3:8b:af:15:51:04:c5:92:7e:db:d0:5b:d9:c9:0f:
76:bb:ce:ac:35:11:4a:51:e8:cf:9b:68:dc:39:62:f2:3d:96:
82:d8:22:3a:fa:fd:43:55:5a:ad:79:3e:97:86:c2:ca:6c:49:
48:5f:22:37:b4:1a:3d:65:f7:7e:0a:e4:f0:aa:34:80:aa:d5:
f8:95:d5:99:cb:06:3a:ad:88:f1:3e:b9:b0:c8:66:d4:1c:aa:
25:f0:e2:47:7b:fd:4e:69:19:33:8c:c5:01:8d:78:51:e3:88:
96:28:05:7a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA1YTq7A8RYkaOQAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMTEyMDAwMFoXDTIzMDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZDU5OGQ3M2UtMjRjZi00Y2E0LTliZTAtNWFhY2JlOWQ3NzdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRL2jwemGGwDG4Goy4ghnPhssNQZiy1mVAjE
Kf7LVAJGwV0KZ4VcrCMpWgYnVvntWZprsl7itpIZwTyGA7/QXt79YGhZtBwZLunO
RzVcxncgjbtfWfSC6RIhg2Hf6bbumT91Z7RRE/v+mUzGsP0GgTEQMcgKD3AxlmnS
4ezN6Mp937ZMwrunjda3scHPqykMNnmZrZg1QmbB4lQNiv02zG6znfv1dK4pDLi1
tcwlkLMZTrlAJkkidtN2ptCz577tNgRkwjXbKI4U2k+iYsxCHyWxGYTmXw5e81IO
+Mxk0bE8A7P5VrrdE8hluzZ2/DPbVEhE+It7cHNYJ9l58kIA4QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLUL4p+60yfLw3NzqvWwlYDyk+saMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2M1Y2I3ZTEtNTJiMy0z
NWIwLWFlMmUtMTdlODYyYTk5YmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzoUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAf1lR//FhnBmtrKiwQit1+GNKsA6w+VyyEKFqrZ1yeVow8tq9+YyQxKin
YF8XuQHKJzuIXF5beaQIKzhMZ+s0BL4WUPlrv2iQ9WbGgOliJ09g0Z0M18IqAsK3
1q8Gq4bbOP/ykC9cOZ87y/E3WjBk97MUXimZf34hooK2Qf/tq7pLotHBNyrkzGlp
TljwY9K4JEevw4uvFVEExZJ+29Bb2ckPdrvOrDURSlHoz5to3Dli8j2WgtgiOvr9
Q1VarXk+l4bCymxJSF8iN7QaPWX3fgrk8Ko0gKrV+JXVmcsGOq2I8T65sMhm1Byq
JfDiR3v9TmkZM4zFAY14UeOIligFeg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:22:26 2025 by rpki-client