Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d4cd5c3-4dbd-3ecf-9702-4f627daec849.roa
File: 3d4cd5c3-4dbd-3ecf-9702-4f627daec849.roa (raw, json)
Hash identifier: TGzR9LAFJhSXVAqShMJCC4PW5L+AC/hDEf9aru01K1M=
Subject key identifier: 39:D0:2F:9C:E8:7E:35:D7:DD:B2:49:9A:EB:3C:86:52:75:80:E0:61
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406FA0D1264BD9123C86B05A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d4cd5c3-4dbd-3ecf-9702-4f627daec849.roa
Signing time: Sun 01 Jan 2023 12:00:00 +0000
ROA not before: Sun 01 Jan 2023 12:00:00 +0000
ROA not after: Mon 06 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 160.209.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6f:a0:d1:26:4b:d9:12:3c:86:b0:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 1 12:00:00 2023 GMT
Not After : Feb 6 05:00:00 2023 GMT
Subject: CN=bc3334dd-17fc-4d66-aecf-77e00f8fbd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5a:04:bd:3c:39:bf:0b:f2:ea:cb:09:a0:26:
a6:3f:37:ba:1a:3e:56:fc:a1:98:48:55:0c:d9:5c:
81:2a:f3:41:76:8a:a3:24:7a:76:36:38:6b:97:2f:
1c:8d:97:fc:14:a0:b2:0f:16:f2:f3:8e:b2:cd:d1:
5f:de:08:81:6c:9a:8e:46:6b:2b:b3:91:69:97:f9:
12:3b:b0:5c:18:ac:e2:1a:92:ae:89:09:34:e2:11:
bf:63:eb:10:2a:97:ee:47:81:8e:e9:2a:dd:6d:63:
4f:a0:31:23:64:09:ea:9d:a5:0a:26:c6:0a:74:c3:
25:45:95:b5:e8:ff:a5:25:9b:6d:a7:17:5d:39:ce:
77:27:d2:8a:f7:12:cb:d9:ad:79:f2:d8:f9:51:ae:
31:ea:68:78:26:26:60:da:a6:ef:55:fe:ea:6e:ff:
88:af:c0:a0:f7:07:20:64:5a:37:c5:9b:f0:d8:f4:
7f:f1:3f:ae:92:b3:24:c3:d2:06:c0:a8:62:98:f2:
5c:42:a0:5b:7b:1a:fe:cf:be:98:bd:d6:ab:87:a6:
0c:27:78:4c:2d:b2:4b:c9:7a:aa:f7:b1:c5:3a:a7:
4f:cc:ae:07:e8:04:c8:64:87:f9:ca:e9:7a:64:89:
e0:aa:2d:4a:bd:5f:d4:12:0d:c5:01:12:ce:24:f8:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D0:2F:9C:E8:7E:35:D7:DD:B2:49:9A:EB:3C:86:52:75:80:E0:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d4cd5c3-4dbd-3ecf-9702-4f627daec849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
160.209.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:4f:60:e7:15:48:87:a4:4b:08:3f:e3:b5:86:aa:d9:50:1b:
b5:a8:d9:a3:a7:76:e2:16:f3:01:05:d3:a1:d6:ce:b3:21:06:
73:ae:f5:ae:b8:2d:c1:86:05:a9:8f:94:6f:38:46:c7:56:4f:
f5:8d:2f:dc:b8:04:d0:4d:c8:16:82:27:7e:1e:fb:12:df:53:
6f:b6:ea:14:e3:e3:c6:15:7c:0f:bb:5e:56:c0:72:f6:a8:c3:
07:39:44:88:ca:e6:cd:1e:bd:9f:88:26:1e:93:06:7c:49:41:
95:7e:b2:aa:c7:d0:4f:c6:fa:21:e2:18:b2:6c:46:79:08:41:
76:eb:c4:b2:7b:52:ec:47:0c:85:b4:58:e2:99:c4:1a:f9:62:
20:38:4d:29:20:88:77:3b:dc:cc:83:a1:15:11:1f:d9:2e:ea:
1d:89:0b:a4:f0:7a:e8:26:73:07:21:30:18:72:be:69:4c:68:
9c:2f:37:07:76:0c:a3:11:31:24:31:a4:fa:b2:ae:a8:e8:c4:
89:a0:aa:eb:35:c1:d9:8b:9a:d1:aa:83:24:b2:50:e4:47:33:
65:29:29:e6:11:f0:b7:d5:10:b8:d5:c9:2b:01:95:bc:5a:b2:
ce:b1:47:1c:a7:49:f2:fd:d4:b2:a0:95:52:7a:93:28:f8:d3:
a7:61:c7:00
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBvoNEmS9kSPIawWoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwMTEyMDAwMFoXDTIzMDIwNjA1MDAwMFowLzEtMCsGA1UEAxMk
YmMzMzM0ZGQtMTdmYy00ZDY2LWFlY2YtNzdlMDBmOGZiZDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVoEvTw5vwvy6ssJoCamPze6Gj5W/KGYSFUM
2VyBKvNBdoqjJHp2Njhrly8cjZf8FKCyDxby846yzdFf3giBbJqORmsrs5Fpl/kS
O7BcGKziGpKuiQk04hG/Y+sQKpfuR4GO6SrdbWNPoDEjZAnqnaUKJsYKdMMlRZW1
6P+lJZttpxddOc53J9KK9xLL2a158tj5Ua4x6mh4JiZg2qbvVf7qbv+Ir8Cg9wcg
ZFo3xZvw2PR/8T+ukrMkw9IGwKhimPJcQqBbexr+z76Yvdarh6YMJ3hMLbJLyXqq
97HFOqdPzK4H6ATIZIf5yul6ZIngqi1KvV/UEg3FARLOJPiLbQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDnQL5zofjXX3bJJmus8hlJ1gOBhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2Q0Y2Q1YzMtNGRiZC0z
ZWNmLTk3MDItNGY2MjdkYWVjODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoNEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAl09g5xVIh6RLCD/jtYaq2VAbtajZo6d24hbzAQXTodbOsyEGc671rrgt
wYYFqY+UbzhGx1ZP9Y0v3LgE0E3IFoInfh77Et9Tb7bqFOPjxhV8D7teVsBy9qjD
BzlEiMrmzR69n4gmHpMGfElBlX6yqsfQT8b6IeIYsmxGeQhBduvEsntS7EcMhbRY
4pnEGvliIDhNKSCIdzvczIOhFREf2S7qHYkLpPB66CZzByEwGHK+aUxonC83B3YM
oxExJDGk+rKuqOjEiaCq6zXB2Yua0aqDJLJQ5EczZSkp5hHwt9UQuNXJKwGVvFqy
zrFHHKdJ8v3UsqCVUnqTKPjTp2HHAA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:30 2025 by rpki-client