Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43c7eff3-b3c2-3afe-a9b8-61f57442863c.roa
File: 43c7eff3-b3c2-3afe-a9b8-61f57442863c.roa (raw, json)
Hash identifier: 8PQ07OQXrDv3gt0ioj/wpgxf/BdskdAW4lXQdsKxRV0=
Subject key identifier: 98:BC:2E:8E:46:E5:38:90:BD:54:D5:FB:16:19:D9:2D:B3:84:8B:61
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBE296D4EF7C18A335957AC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43c7eff3-b3c2-3afe-a9b8-61f57442863c.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 204.236.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:29:6d:4e:f7:c1:8a:33:59:57:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=4a7a0c65-ed38-4c05-bbeb-0bee83084069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3e:60:be:ef:d0:fc:b5:21:f5:0e:12:21:de:
41:c1:97:17:fc:e4:d2:00:1a:35:df:2c:8a:4c:9b:
33:64:cd:d5:f8:e0:b2:bb:18:dd:dc:6a:04:c2:06:
74:c3:5d:e7:f2:8e:28:c1:e6:32:03:86:2a:8d:d3:
ee:ce:82:31:76:9a:90:00:65:54:e3:d8:25:5a:41:
67:35:00:06:d4:34:cd:f9:b1:22:37:d4:60:dd:95:
25:36:be:76:42:d9:3f:a2:47:91:ab:ae:9a:3b:61:
7f:0b:79:2c:86:0d:da:f2:66:ac:cb:3e:95:2f:80:
a4:3e:ef:3c:db:7f:bf:5b:3c:0d:e9:ec:af:cb:4f:
3a:a0:d2:84:68:78:e8:46:ee:5a:c2:56:92:a4:e2:
97:88:9d:2d:39:c2:a0:d4:d7:b7:95:03:38:75:a0:
a7:65:02:63:ce:c0:90:32:fc:af:5a:23:9b:1a:df:
69:6a:4b:c7:54:2f:6e:24:6b:ed:ae:6c:2a:15:1c:
a2:d0:d5:92:3c:2f:3b:89:ed:e6:7a:c7:9d:e2:16:
55:bb:e2:13:ce:d8:05:94:7f:b1:19:aa:97:c8:98:
82:a4:d1:96:6e:26:3e:06:7f:13:79:97:1c:86:29:
9b:f4:c8:d0:2e:b2:a8:f4:db:27:66:58:b4:2b:f4:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BC:2E:8E:46:E5:38:90:BD:54:D5:FB:16:19:D9:2D:B3:84:8B:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43c7eff3-b3c2-3afe-a9b8-61f57442863c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.236.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:f6:68:89:99:ac:15:40:27:58:cb:3a:a5:03:0e:b2:4e:1e:
65:55:02:c6:04:5d:7a:53:3c:71:11:06:59:ed:93:c1:5b:3a:
fb:c2:0a:37:ca:6c:47:6f:21:ee:55:82:47:71:4d:fe:d2:3a:
3d:70:e2:d6:38:f9:b6:63:74:65:74:85:94:fc:6f:95:ec:7c:
58:59:3c:2d:75:43:12:8f:09:3a:d0:ba:75:e0:9b:dc:b7:d9:
82:e5:7c:36:d1:42:49:0e:35:d9:2f:7a:de:b4:26:1f:7e:b8:
ba:67:bc:43:45:5f:d6:23:63:98:a1:40:47:8c:bf:97:70:94:
83:87:f0:bd:90:53:3e:f9:3f:02:25:61:77:c1:7e:7b:97:8f:
49:4d:0a:a4:ca:f6:db:56:6c:d2:3a:69:cc:73:81:04:76:05:
2b:ca:74:04:c3:24:cc:4d:92:d3:44:0a:1c:31:69:82:06:47:
64:56:24:fa:04:2d:de:46:38:81:fb:1f:aa:09:69:8a:d4:d6:
9a:25:2f:25:ed:f0:e3:ab:92:a3:d9:bd:f7:ea:76:5d:20:68:
16:8e:c5:bf:f5:d7:c3:fb:2d:5a:64:a3:76:c8:5f:50:2d:8a:
6b:27:a9:36:d3:8b:5e:06:b5:3a:3c:46:27:f1:78:41:25:0a:
f3:cd:45:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDy+KW1O98GKM1lXrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NGE3YTBjNjUtZWQzOC00YzA1LWJiZWItMGJlZTgzMDg0MDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD5gvu/Q/LUh9Q4SId5BwZcX/OTSABo13yyK
TJszZM3V+OCyuxjd3GoEwgZ0w13n8o4oweYyA4YqjdPuzoIxdpqQAGVU49glWkFn
NQAG1DTN+bEiN9Rg3ZUlNr52Qtk/okeRq66aO2F/C3kshg3a8masyz6VL4CkPu88
23+/WzwN6eyvy086oNKEaHjoRu5awlaSpOKXiJ0tOcKg1Ne3lQM4daCnZQJjzsCQ
MvyvWiObGt9pakvHVC9uJGvtrmwqFRyi0NWSPC87ie3mesed4hZVu+ITztgFlH+x
GaqXyJiCpNGWbiY+Bn8TeZcchimb9MjQLrKo9NsnZli0K/SnVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJi8Lo5G5TiQvVTV+xYZ2S2zhIthMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDNjN2VmZjMtYjNjMi0z
YWZlLWE5YjgtNjFmNTc0NDI4NjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzOyAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA32aImZrBVAJ1jLOqUDDrJOHmVVAsYEXXpTPHERBlntk8FbOvvCCjfK
bEdvIe5VgkdxTf7SOj1w4tY4+bZjdGV0hZT8b5XsfFhZPC11QxKPCTrQunXgm9y3
2YLlfDbRQkkONdkvet60Jh9+uLpnvENFX9YjY5ihQEeMv5dwlIOH8L2QUz75PwIl
YXfBfnuXj0lNCqTK9ttWbNI6acxzgQR2BSvKdATDJMxNktNEChwxaYIGR2RWJPoE
Ld5GOIH7H6oJaYrU1polLyXt8OOrkqPZvffqdl0gaBaOxb/118P7LVpko3bIX1At
imsnqTbTi14GtTo8RifxeEElCvPNRSk=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:51:45 2025 by rpki-client