Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fca7e1e-7e9d-30f8-95f4-7171bb735202.roa
File: 3fca7e1e-7e9d-30f8-95f4-7171bb735202.roa (raw, json)
Hash identifier: uY+IV/dtsxQEiGoUfmrpUSCQ/bLhxV/nfbL3qv3TxBA=
Subject key identifier: D9:42:9D:CE:3B:D7:D7:4B:17:1A:7A:3B:99:75:68:A3:99:08:8B:BE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81ABE4BCD20D7636F7A69E40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fca7e1e-7e9d-30f8-95f4-7171bb735202.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 192.189.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:ab:e4:bc:d2:0d:76:36:f7:a6:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=2277e961-3892-4efd-a8e2-da91b426fc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:a3:e2:c8:1c:e5:32:24:50:1a:bd:7e:2b:
58:df:ac:90:d1:7c:b8:7d:fb:0c:43:a5:c8:31:5b:
6d:09:f0:dc:34:99:56:bc:93:d5:d0:1d:15:fa:d1:
1b:a9:4d:16:63:78:e3:ad:d6:3b:eb:68:f0:01:28:
7b:04:51:ce:ef:c2:4f:6c:0b:1d:14:86:a6:a4:77:
0e:7b:14:5c:08:2c:ab:07:19:5c:32:19:b3:ec:2f:
26:17:57:14:f7:ce:44:6e:ff:6f:c0:c5:20:9a:44:
96:23:9d:35:b3:62:09:7a:ff:6b:05:b7:da:1e:db:
c3:32:bc:39:f5:26:c3:02:2c:9f:07:26:a0:31:9f:
84:7c:ad:00:65:59:2f:be:d9:49:68:df:fe:73:e6:
cd:ce:57:21:6f:d2:d8:59:96:57:ba:48:4e:c9:55:
93:14:dd:f1:7d:4b:78:a8:6c:fb:ca:78:ba:d5:7a:
a3:20:d6:d1:47:4a:36:4c:35:7f:cb:76:60:4b:29:
39:a1:2b:8e:cd:ec:38:9a:b3:7a:23:1a:c1:66:b4:
37:da:a0:30:1b:9f:84:82:4c:21:63:76:f3:ae:1a:
45:9b:c5:2f:bb:6a:9f:a2:3f:3d:65:6c:36:8b:c1:
79:8f:7f:b0:b9:52:2a:fd:21:da:38:47:66:00:75:
19:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:42:9D:CE:3B:D7:D7:4B:17:1A:7A:3B:99:75:68:A3:99:08:8B:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3fca7e1e-7e9d-30f8-95f4-7171bb735202.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
192.189.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:46:10:f3:72:04:5a:a8:4e:18:c8:d5:42:45:3d:de:a7:a7:
6d:c8:3d:2e:14:72:32:b2:07:df:17:eb:46:4b:1c:bf:18:2d:
e3:66:72:c4:05:42:22:f7:11:4e:c7:8b:52:9d:0e:3e:51:4e:
b0:3f:13:5c:0d:01:6b:9c:d1:43:61:39:51:42:fa:3a:ba:f5:
f2:97:d9:7b:44:61:f0:9d:3e:a8:5f:dd:c9:2e:9b:32:dd:09:
7b:40:4a:0e:1c:c8:15:8b:ca:48:f2:93:c8:17:fd:9f:b2:3a:
60:37:15:f0:e7:98:7e:f3:c4:47:25:df:70:f6:49:ca:cb:32:
23:f3:23:00:ac:e7:8e:ff:54:f2:51:44:ab:68:5e:a2:d9:a9:
91:ec:44:df:59:01:10:13:f5:dc:a5:cc:06:53:1a:24:51:04:
02:1a:ed:7d:29:4c:0c:4f:61:7f:ff:ba:e0:24:34:59:98:09:
f2:7d:c8:ae:6a:42:e4:54:e1:c1:53:db:b7:2e:9f:6c:5e:8b:
d3:f6:b6:81:b0:21:64:e8:43:ba:7a:b8:56:77:7d:54:97:a0:
99:2f:6b:a2:6d:5e:e9:ad:62:b8:bb:c1:b1:e5:8a:19:27:29:
f2:c4:2c:11:6b:16:f8:81:fc:2a:9b:ba:e3:d9:79:e6:33:dd:
88:9d:b8:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2Bq+S80g12NvemnkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
MjI3N2U5NjEtMzg5Mi00ZWZkLWE4ZTItZGE5MWI0MjZmYzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAKj4sgc5TIkUBq9fitY36yQ0Xy4ffsMQ6XI
MVttCfDcNJlWvJPV0B0V+tEbqU0WY3jjrdY762jwASh7BFHO78JPbAsdFIampHcO
exRcCCyrBxlcMhmz7C8mF1cU985Ebv9vwMUgmkSWI501s2IJev9rBbfaHtvDMrw5
9SbDAiyfByagMZ+EfK0AZVkvvtlJaN/+c+bNzlchb9LYWZZXukhOyVWTFN3xfUt4
qGz7yni61XqjINbRR0o2TDV/y3ZgSyk5oSuOzew4mrN6IxrBZrQ32qAwG5+Egkwh
Y3bzrhpFm8Uvu2qfoj89ZWw2i8F5j3+wuVIq/SHaOEdmAHUZPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNlCnc4719dLFxp6O5l1aKOZCIu+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2ZjYTdlMWUtN2U5ZC0z
MGY4LTk1ZjQtNzE3MWJiNzM1MjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwL3GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERGEPNyBFqoThjI1UJFPd6np23IPS4UcjKyB98X60ZLHL8YLeNmcsQF
QiL3EU7Hi1KdDj5RTrA/E1wNAWuc0UNhOVFC+jq69fKX2XtEYfCdPqhf3ckumzLd
CXtASg4cyBWLykjyk8gX/Z+yOmA3FfDnmH7zxEcl33D2ScrLMiPzIwCs547/VPJR
RKtoXqLZqZHsRN9ZARAT9dylzAZTGiRRBAIa7X0pTAxPYX//uuAkNFmYCfJ9yK5q
QuRU4cFT27cun2xei9P2toGwIWToQ7p6uFZ3fVSXoJkva6JtXumtYri7wbHlihkn
KfLELBFrFviB/CqbuuPZeeYz3YiduMY=
-----END CERTIFICATE-----
Generated at Wed Apr 16 16:39:24 2025 by rpki-client