Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4268d8e3-6ad9-35a2-8873-b4776783003e.roa
File: 4268d8e3-6ad9-35a2-8873-b4776783003e.roa (raw, json)
Hash identifier: XtP04M16a4hKdWs4tzX74IdRWzv4KuFfEYg7Tp8nteE=
Subject key identifier: EC:B3:9F:0E:E4:FF:3C:9B:97:5A:B8:9B:1A:35:D9:68:FA:26:38:D4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6F6999B1060AD94AFFBFFA78
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4268d8e3-6ad9-35a2-8873-b4776783003e.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 75.2.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:69:99:b1:06:0a:d9:4a:ff:bf:fa:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=e57473aa-385a-4505-b6e8-e5e39afac9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:ec:9c:59:02:e7:d1:69:a0:7f:8c:23:9f:
27:2b:1c:34:93:2a:ac:8e:ea:b2:e7:ae:26:df:3b:
80:d9:3a:22:e4:a3:d7:bb:04:1e:65:a1:e2:1f:91:
92:bb:18:09:14:9c:1d:16:60:17:98:83:12:73:4a:
30:f9:d2:58:50:f3:72:94:d5:69:60:da:d2:53:88:
58:47:72:90:ca:94:eb:32:b7:df:20:15:91:6e:bb:
2e:13:6d:e6:da:d8:aa:92:55:a2:97:70:4d:97:f8:
f0:5a:54:00:50:ad:bb:cb:10:31:66:b5:04:41:bf:
d2:6d:94:ce:c5:1c:dc:6e:a9:69:bf:dd:5c:1b:e6:
46:c2:c7:f9:38:79:8a:66:d4:d2:99:dd:05:51:18:
56:4c:f3:d9:47:d2:51:18:b4:59:9a:a3:2e:67:3d:
51:90:93:86:0b:a3:ef:c9:2d:8c:d7:23:56:ae:54:
31:e3:5b:83:9a:9b:21:26:c8:7a:fe:1b:72:3f:1c:
35:38:da:98:19:76:7f:40:8d:36:f1:a1:98:b4:bd:
53:c0:79:8d:6b:ee:58:43:17:3a:ea:eb:f3:e4:85:
87:34:ae:2a:96:30:92:7f:c2:cd:08:3a:f2:a1:04:
c7:38:4a:f1:e0:09:27:7f:cd:ee:dd:7b:3a:33:43:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:9F:0E:E4:FF:3C:9B:97:5A:B8:9B:1A:35:D9:68:FA:26:38:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4268d8e3-6ad9-35a2-8873-b4776783003e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
75.2.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:f4:34:5b:82:83:0c:7f:06:49:cc:7f:a5:82:3c:98:11:0f:
28:74:30:4d:03:12:ef:7a:93:2f:93:44:29:7c:04:8a:03:51:
e2:00:4c:b0:01:18:41:bb:d8:9a:4f:7d:37:ca:e1:7e:90:91:
ca:4d:14:55:cd:6f:44:71:df:b7:9f:95:4a:9e:fb:a3:e1:69:
d1:1b:9d:4c:39:0e:2d:30:96:89:01:fc:1f:b4:f6:07:de:16:
72:96:e9:0c:60:c4:14:57:ca:c0:05:83:68:40:ee:52:89:b6:
6e:a0:fe:b9:39:72:87:ee:af:8f:7f:bd:1b:25:7c:59:d4:75:
a6:15:28:91:03:17:72:bb:35:a7:40:53:5f:61:7b:b7:0c:8a:
95:ad:6a:99:ed:59:92:d5:3b:2c:44:b9:41:95:c7:12:b8:4b:
e0:de:93:8e:cf:d9:bc:9f:43:4e:37:bf:46:30:f6:56:11:3c:
52:5d:d1:6e:ec:2e:0b:59:22:aa:af:40:10:f2:79:d0:19:6d:
8a:0f:bf:35:93:fe:7c:96:7c:1b:b9:9a:96:bf:01:04:47:b6:
5c:dd:b4:a2:00:b9:9f:eb:ad:a0:ed:67:36:42:c3:5f:21:ec:
b2:1a:6e:15:96:72:ee:2a:65:6e:b5:0d:20:3d:ba:b6:a8:36:
be:c8:f9:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxvaZmxBgrZSv+/+ngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZTU3NDczYWEtMzg1YS00NTA1LWI2ZTgtZTVlMzlhZmFjOWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5jsnFkC59FpoH+MI58nKxw0kyqsjuqy564m
3zuA2Toi5KPXuwQeZaHiH5GSuxgJFJwdFmAXmIMSc0ow+dJYUPNylNVpYNrSU4hY
R3KQypTrMrffIBWRbrsuE23m2tiqklWil3BNl/jwWlQAUK27yxAxZrUEQb/SbZTO
xRzcbqlpv91cG+ZGwsf5OHmKZtTSmd0FURhWTPPZR9JRGLRZmqMuZz1RkJOGC6Pv
yS2M1yNWrlQx41uDmpshJsh6/htyPxw1ONqYGXZ/QI028aGYtL1TwHmNa+5YQxc6
6uvz5IWHNK4qljCSf8LNCDryoQTHOErx4Aknf83u3Xs6M0NOOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOyznw7k/zybl1q4mxo12Wj6JjjUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDI2OGQ4ZTMtNmFkOS0z
NWEyLTg4NzMtYjQ3NzY3ODMwMDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSwIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJL0NFuCgwx/BknMf6WCPJgRDyh0ME0DEu96ky+TRCl8BIoDUeIATLAB
GEG72JpPfTfK4X6QkcpNFFXNb0Rx37eflUqe+6PhadEbnUw5Di0wlokB/B+09gfe
FnKW6QxgxBRXysAFg2hA7lKJtm6g/rk5cofur49/vRslfFnUdaYVKJEDF3K7NadA
U19he7cMipWtapntWZLVOyxEuUGVxxK4S+Dek47P2byfQ043v0Yw9lYRPFJd0W7s
LgtZIqqvQBDyedAZbYoPvzWT/nyWfBu5mpa/AQRHtlzdtKIAuZ/rraDtZzZCw18h
7LIabhWWcu4qZW61DSA9uraoNr7I+YY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:32 2025 by rpki-client