Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40dea580-bdff-3ff0-8122-0c714f4a270f.roa
File: 40dea580-bdff-3ff0-8122-0c714f4a270f.roa (raw, json)
Hash identifier: mkAzfTUrlgKrK3OBId2pyx+hvS9jbwSfl4zaX6YUhMs=
Subject key identifier: 7E:8F:AD:41:72:01:53:C1:2C:37:E1:4D:A7:EF:B1:3E:7D:93:8C:42
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EEE65A174D0BDA7D6D48D8680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40dea580-bdff-3ff0-8122-0c714f4a270f.roa
Signing time: Tue 16 Aug 2022 12:00:00 +0000
ROA not before: Tue 16 Aug 2022 12:00:00 +0000
ROA not after: Wed 21 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 170.15.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ee:65:a1:74:d0:bd:a7:d6:d4:8d:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 16 12:00:00 2022 GMT
Not After : Sep 21 04:00:00 2022 GMT
Subject: CN=9b298a95-e610-4f74-8798-e8daddf7c6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:46:a9:ee:f0:b0:20:75:70:5d:e1:fb:57:
1e:2e:75:ce:03:f5:38:b2:71:54:3e:d9:52:30:aa:
f6:1a:25:52:a0:d9:10:85:b1:27:1b:bc:8e:11:36:
1e:f4:0e:0c:ef:a6:9a:8a:02:3b:79:ce:7d:e4:92:
07:e3:ac:76:ea:d8:9a:3e:70:6c:4f:f2:25:9c:74:
d4:17:e3:d3:cf:cb:9f:ef:74:9b:40:27:00:27:29:
63:e2:ed:31:8d:78:01:eb:40:31:57:3b:61:5e:64:
fc:48:fa:4c:41:a8:8f:ea:49:18:7e:b2:02:18:71:
44:dd:b0:8a:2f:bb:a8:df:fa:69:38:b2:60:e6:fa:
b9:8b:e2:36:76:05:9c:83:bd:78:09:91:97:e7:a1:
31:ef:d8:52:ab:49:1e:f6:43:44:86:f2:bc:d5:e2:
ca:ff:00:1e:82:c3:76:30:02:fa:2f:72:a0:d9:8d:
ec:74:f6:9f:c3:ae:e8:c4:d6:11:37:43:11:c1:4d:
82:ec:ff:06:60:a5:dd:dc:5f:10:c0:53:a3:53:d4:
ee:84:71:54:7e:22:aa:f6:f3:15:34:f1:eb:21:9c:
c2:ea:0e:c8:74:8e:39:f8:0e:8d:59:e3:33:5a:3f:
81:90:05:51:c8:41:91:71:4d:5d:90:00:3f:f3:00:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8F:AD:41:72:01:53:C1:2C:37:E1:4D:A7:EF:B1:3E:7D:93:8C:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/40dea580-bdff-3ff0-8122-0c714f4a270f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
170.15.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:a4:c2:ad:bb:e5:54:10:ba:09:45:96:b3:4c:b3:bb:a4:b4:
e3:ce:63:31:44:1c:99:18:e7:cd:ff:92:95:0f:df:93:8d:6a:
5a:92:fe:71:d2:3f:e4:bb:f1:59:9f:72:20:b7:0c:be:37:2a:
2c:b0:f0:56:55:0f:2d:f5:cb:d0:8f:a1:32:2d:45:ed:89:ea:
7b:95:9d:0e:90:13:79:55:e4:5c:8e:5d:ce:89:b2:cb:1b:7b:
8d:c6:4a:2a:e9:67:9b:f7:c0:ff:77:e7:d0:be:54:90:ca:6a:
78:9e:a0:ba:97:ac:39:59:b8:11:d9:4d:01:bb:b8:c0:4e:37:
84:f7:dd:f2:f3:16:57:96:56:b4:ed:d1:61:e5:cb:7b:03:43:
b0:05:75:d8:fe:b9:14:8e:63:a9:ca:ae:1d:6d:f5:c1:c1:57:
86:25:54:17:9a:a5:07:61:59:34:12:c8:90:66:70:7f:6f:13:
72:85:c7:d8:97:6f:63:6b:71:21:2c:28:ec:03:d6:80:e1:98:
6a:35:d8:4f:0a:a7:07:67:be:af:76:c3:13:df:20:b8:a9:eb:
64:e1:e9:68:0c:58:53:34:9c:06:cb:f7:01:72:d9:55:e0:1e:
4b:47:cc:77:1b:be:49:6f:32:e2:94:5e:8f:8d:c5:36:8d:25:
48:f3:47:15
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7uZaF00L2n1tSNhoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxNjEyMDAwMFoXDTIyMDkyMTA0MDAwMFowLzEtMCsGA1UEAxMk
OWIyOThhOTUtZTYxMC00Zjc0LTg3OTgtZThkYWRkZjdjNmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvepGqe7wsCB1cF3h+1ceLnXOA/U4snFUPtlS
MKr2GiVSoNkQhbEnG7yOETYe9A4M76aaigI7ec595JIH46x26tiaPnBsT/IlnHTU
F+PTz8uf73SbQCcAJylj4u0xjXgB60AxVzthXmT8SPpMQaiP6kkYfrICGHFE3bCK
L7uo3/ppOLJg5vq5i+I2dgWcg714CZGX56Ex79hSq0ke9kNEhvK81eLK/wAegsN2
MAL6L3Kg2Y3sdPafw67oxNYRN0MRwU2C7P8GYKXd3F8QwFOjU9TuhHFUfiKq9vMV
NPHrIZzC6g7IdI45+A6NWeMzWj+BkAVRyEGRcU1dkAA/8wDGCwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH6PrUFyAVPBLDfhTafvsT59k4xCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDBkZWE1ODAtYmRmZi0z
ZmYwLTgxMjItMGM3MTRmNGEyNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqg8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQqTCrbvlVBC6CUWWs0yzu6S0485jMUQcmRjnzf+SlQ/fk41qWpL+cdI/
5LvxWZ9yILcMvjcqLLDwVlUPLfXL0I+hMi1F7Ynqe5WdDpATeVXkXI5dzomyyxt7
jcZKKulnm/fA/3fn0L5UkMpqeJ6gupesOVm4EdlNAbu4wE43hPfd8vMWV5ZWtO3R
YeXLewNDsAV12P65FI5jqcquHW31wcFXhiVUF5qlB2FZNBLIkGZwf28TcoXH2Jdv
Y2txISwo7APWgOGYajXYTwqnB2e+r3bDE98guKnrZOHpaAxYUzScBsv3AXLZVeAe
S0fMdxu+SW8y4pRej43FNo0lSPNHFQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:26 2025 by rpki-client