Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d02e967-001c-3907-9eac-a7a88d04a6fe.roa
File: 3d02e967-001c-3907-9eac-a7a88d04a6fe.roa (raw, json)
Hash identifier: bedY8YWVwuNWmgRgwQX8N+jnlNxWwHCVL+fXAXPhFCA=
Subject key identifier: BC:41:02:AE:29:92:8A:9C:07:1C:18:C8:0B:5C:35:0A:92:1F:51:F2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA85E343C8A627D88666DA080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d02e967-001c-3907-9eac-a7a88d04a6fe.roa
Signing time: Fri 21 Oct 2022 16:30:08 +0000
ROA not before: Fri 21 Oct 2022 16:30:08 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 108.128.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a8:5e:34:3c:8a:62:7d:88:66:6d:a0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 21 16:30:08 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=8707d1ec-9df3-43c2-95e9-90d2f0972531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:d3:41:ce:3e:06:12:e8:b1:ff:42:ac:27:
cf:03:f3:5c:14:e0:76:32:b4:cf:6a:b1:88:9c:51:
62:45:42:be:25:ce:27:01:a8:c2:79:b3:d7:90:97:
92:b8:5b:e5:10:70:9c:e7:99:24:a7:e4:30:16:f9:
9e:c1:c4:8f:00:75:e8:9a:e8:b7:30:b8:23:c6:95:
23:c1:6e:2d:6f:db:cc:34:01:41:23:e1:63:6b:a1:
a0:80:b2:f5:fb:51:79:e3:27:36:e1:aa:86:21:3e:
31:01:8c:10:b9:4a:9f:13:0b:8d:fb:ac:b4:fe:5f:
8b:e5:22:32:ec:4d:30:98:41:39:5b:ff:a5:62:62:
96:42:44:ba:9c:68:b7:bf:d5:e0:e5:14:2a:55:28:
0a:40:ce:15:48:24:c2:b9:21:d8:fa:cf:b8:90:a9:
e3:42:3c:e6:0a:8a:24:5d:4d:20:18:21:b3:79:11:
9e:c1:ed:c3:dd:4e:b6:78:49:32:e1:64:70:04:43:
cf:56:c8:76:25:92:5f:dc:83:30:bd:d8:d5:a4:f8:
24:74:16:9b:4e:d9:46:f1:1f:18:8d:c5:d8:ba:d3:
dc:e4:75:01:13:75:40:d4:3e:8f:7d:13:63:33:11:
a5:64:9f:4a:3f:fe:c7:f9:1f:12:4d:34:9c:87:0e:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:41:02:AE:29:92:8A:9C:07:1C:18:C8:0B:5C:35:0A:92:1F:51:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d02e967-001c-3907-9eac-a7a88d04a6fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.128.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:19:8b:f7:ac:7a:08:b5:47:66:38:7f:ae:0b:df:37:d0:ae:
d8:ac:f6:b3:8f:e6:a9:d4:3c:ea:8d:46:dd:65:71:7f:6e:e2:
c9:26:e8:c6:29:69:22:0f:f2:c2:c7:cb:5a:d3:6c:41:b2:54:
0e:df:7b:6a:05:0a:56:bc:cf:6b:6c:c0:d7:72:85:d7:c3:c5:
10:32:91:d5:d0:be:17:b3:69:e3:00:8d:41:54:dc:de:51:c2:
0f:11:d5:26:df:d0:fe:aa:3f:d4:43:21:8a:f6:cb:d0:2a:10:
44:17:e3:65:d5:28:0d:ba:f2:cb:d2:82:58:f0:37:21:1b:d3:
be:3d:0f:8d:03:6b:86:d3:9c:8e:d7:12:33:21:26:53:fb:b3:
6a:1d:15:63:19:40:a6:9e:69:e5:84:b7:dc:af:d5:a8:b4:ed:
e5:a1:ad:b3:21:74:a3:49:c0:13:86:b8:3c:6f:a7:d5:b6:e9:
44:08:ed:f2:a8:98:9e:fe:d3:7c:f1:84:72:9f:11:c9:fc:95:
da:8e:1f:e4:57:ce:80:3e:e6:bf:f2:e0:c2:87:d8:aa:59:f6:
45:8e:db:ff:c5:20:ad:42:5f:b9:49:72:7c:53:c6:21:21:de:
c0:1f:ed:9a:71:49:e6:1a:87:38:24:e0:38:b3:0d:b3:c0:b8:
d9:7f:43:f4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+oXjQ8imJ9iGZtoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyMTE2MzAwOFoXDTIyMTEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
ODcwN2QxZWMtOWRmMy00M2MyLTk1ZTktOTBkMmYwOTcyNTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwXTQc4+BhLosf9CrCfPA/NcFOB2MrTParGI
nFFiRUK+Jc4nAajCebPXkJeSuFvlEHCc55kkp+QwFvmewcSPAHXomui3MLgjxpUj
wW4tb9vMNAFBI+Fja6GggLL1+1F54yc24aqGIT4xAYwQuUqfEwuN+6y0/l+L5SIy
7E0wmEE5W/+lYmKWQkS6nGi3v9Xg5RQqVSgKQM4VSCTCuSHY+s+4kKnjQjzmCook
XU0gGCGzeRGewe3D3U62eEky4WRwBEPPVsh2JZJf3IMwvdjVpPgkdBabTtlG8R8Y
jcXYutPc5HUBE3VA1D6PfRNjMxGlZJ9KP/7H+R8STTSchw4qFwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLxBAq4pkoqcBxwYyAtcNQqSH1HyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2QwMmU5NjctMDAxYy0z
OTA3LTllYWMtYTdhODhkMDRhNmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDbIAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbBmL96x6CLVHZjh/rgvfN9Cu2Kz2s4/mqdQ86o1G3WVxf27iySboxilp
Ig/ywsfLWtNsQbJUDt97agUKVrzPa2zA13KF18PFEDKR1dC+F7Np4wCNQVTc3lHC
DxHVJt/Q/qo/1EMhivbL0CoQRBfjZdUoDbryy9KCWPA3IRvTvj0PjQNrhtOcjtcS
MyEmU/uzah0VYxlApp5p5YS33K/VqLTt5aGtsyF0o0nAE4a4PG+n1bbpRAjt8qiY
nv7TfPGEcp8RyfyV2o4f5FfOgD7mv/LgwofYqln2RY7b/8UgrUJfuUlyfFPGISHe
wB/tmnFJ5hqHOCTgOLMNs8C42X9D9A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:51:55 2025 by rpki-client