Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42095d10-2ffa-3c2e-b8b3-7d591a6b17d5.roa
File: 42095d10-2ffa-3c2e-b8b3-7d591a6b17d5.roa (raw, json)
Hash identifier: mNgKkzsYr+kf46H7Mj0b4Tb10TtYKLNe8+SAohEoldA=
Subject key identifier: DC:0C:65:68:23:8A:E3:6D:2B:84:65:F7:60:18:4A:FD:31:C4:75:A4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C970CC8ED9F9AD40B53213B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42095d10-2ffa-3c2e-b8b3-7d591a6b17d5.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:0c:c8:ed:9f:9a:d4:0b:53:21:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=6ad26a3d-859a-4e76-b987-c7e035dfff15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:b9:e6:3f:1e:67:92:4a:4b:8b:93:b5:45:
26:cf:4e:4f:27:39:9f:3f:28:93:f2:63:a1:c6:2f:
70:6d:7b:0c:54:79:bd:3b:48:4a:92:b3:f2:b9:6e:
36:79:05:37:31:cd:b0:bf:f8:7c:17:46:09:cc:02:
b1:f4:79:fc:02:20:13:13:c5:a4:c0:3b:ab:a2:48:
d3:2b:8e:ec:d6:f1:44:7f:0b:a6:6c:7b:cf:a2:89:
c0:cc:ec:67:da:cb:d1:ee:b0:df:46:a3:31:34:ec:
56:86:ee:30:01:66:37:bd:1e:6c:ca:d1:5d:bb:fd:
2e:94:01:99:7b:50:0d:44:ac:82:5d:eb:f6:4c:2c:
69:5a:2b:c4:b3:a2:b0:a5:e6:58:87:dd:42:96:f6:
3a:c5:4a:17:0b:83:23:bb:45:4f:ca:9b:28:1a:48:
24:1d:c8:ba:70:2f:47:d2:bb:c6:6f:21:d7:ae:45:
bd:da:bd:7b:d0:05:52:c3:2d:40:e2:e3:53:f3:32:
cb:a4:d8:0d:55:0d:cd:8c:cc:36:e4:59:75:a0:18:
a1:a1:90:e7:ef:5f:c4:c8:f3:5c:e1:47:31:ea:3d:
62:48:95:11:65:30:c1:0c:52:43:b8:28:71:c2:83:
55:e5:b2:b3:9f:69:94:cd:d1:98:87:e7:90:0b:37:
59:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0C:65:68:23:8A:E3:6D:2B:84:65:F7:60:18:4A:FD:31:C4:75:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42095d10-2ffa-3c2e-b8b3-7d591a6b17d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:5a:11:18:3f:20:ad:b3:a1:69:dc:aa:ff:6e:9b:70:74:4a:
ce:b7:e7:81:51:2d:68:9e:ef:9c:6b:14:87:c7:5f:a3:55:dd:
3e:e5:0b:04:e1:ef:0c:5a:46:90:bb:b3:e1:a3:40:99:1e:0d:
85:61:2c:25:3c:b4:12:93:5a:92:fa:14:19:d2:0a:98:84:f5:
97:46:e1:82:8a:e8:e2:bb:ad:16:4c:93:dc:81:61:be:33:80:
c6:fa:52:d9:a7:1b:5c:9d:f3:62:9e:3e:37:89:54:8e:26:5c:
8b:3a:85:0d:a4:64:74:f7:b3:5d:22:ec:e1:35:45:26:00:81:
56:9f:46:a8:78:9b:c9:c3:30:2c:14:2e:85:58:74:b2:7f:f9:
c1:ad:f7:17:fd:28:ce:58:90:90:8d:76:32:b8:ef:f1:ea:56:
8f:59:44:20:ae:80:f7:96:95:8d:d5:51:3e:0a:2a:45:a3:58:
e2:6b:37:15:27:5a:99:6e:f5:66:3f:4c:d1:d2:95:d6:ac:84:
c7:60:a3:43:8e:d1:03:a2:ea:8d:43:a1:d1:c5:a3:bf:10:5a:
cb:a2:ed:1e:10:fb:0f:5c:61:89:e8:35:32:06:01:53:58:83:
63:cd:3a:8c:40:2d:c9:40:f8:c6:3c:9b:16:79:1c:0d:94:b1:
8f:cc:b6:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDyXDMjtn5rUC1MhO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
NmFkMjZhM2QtODU5YS00ZTc2LWI5ODctYzdlMDM1ZGZmZjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfa55j8eZ5JKS4uTtUUmz05PJzmfPyiT8mOh
xi9wbXsMVHm9O0hKkrPyuW42eQU3Mc2wv/h8F0YJzAKx9Hn8AiATE8WkwDurokjT
K47s1vFEfwumbHvPoonAzOxn2svR7rDfRqMxNOxWhu4wAWY3vR5sytFdu/0ulAGZ
e1ANRKyCXev2TCxpWivEs6KwpeZYh91ClvY6xUoXC4Mju0VPypsoGkgkHci6cC9H
0rvGbyHXrkW92r170AVSwy1A4uNT8zLLpNgNVQ3NjMw25Fl1oBihoZDn71/EyPNc
4Ucx6j1iSJURZTDBDFJDuChxwoNV5bKzn2mUzdGYh+eQCzdZkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNwMZWgjiuNtK4Rl92AYSv0xxHWkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDIwOTVkMTAtMmZmYS0z
YzJlLWI4YjMtN2Q1OTFhNmIxN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmMDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFaERg/IK2zoWncqv9um3B0Ss6354FRLWie75xrFIfHX6NV3T7lCwTh
7wxaRpC7s+GjQJkeDYVhLCU8tBKTWpL6FBnSCpiE9ZdG4YKK6OK7rRZMk9yBYb4z
gMb6UtmnG1yd82KePjeJVI4mXIs6hQ2kZHT3s10i7OE1RSYAgVafRqh4m8nDMCwU
LoVYdLJ/+cGt9xf9KM5YkJCNdjK47/HqVo9ZRCCugPeWlY3VUT4KKkWjWOJrNxUn
Wplu9WY/TNHSldashMdgo0OO0QOi6o1DodHFo78QWsui7R4Q+w9cYYnoNTIGAVNY
g2PNOoxALclA+MY8mxZ5HA2UsY/Mtks=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:14:40 2025 by rpki-client