Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43f5976f-5af6-3580-a9ca-0216608cf998.roa
File: 43f5976f-5af6-3580-a9ca-0216608cf998.roa (raw, json)
Hash identifier: Kkmb9xKif/M3f2D6wx8ttS3XwnJf6A2/uBXssD4A9Cw=
Subject key identifier: 21:B6:AB:84:B1:1A:37:10:05:74:86:91:DB:73:77:E5:59:76:71:20
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401A6C1086716B71E77A199300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43f5976f-5af6-3580-a9ca-0216608cf998.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 130.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:6c:10:86:71:6b:71:e7:7a:19:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=721c2e24-a89a-454d-9952-af29e29450fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a0:bb:bb:d9:7a:76:a7:21:b2:2c:ba:c9:a8:
fc:9d:34:4f:29:e5:3e:1d:ea:93:36:50:97:0b:4d:
a0:6b:b5:b5:40:cc:4e:71:7d:2d:b5:df:08:f9:17:
11:ed:7f:1d:d6:e6:96:e6:bb:ef:3c:5a:3e:e5:87:
d0:62:71:0f:b5:3f:9c:08:62:6c:8f:61:8e:c8:21:
71:8f:2c:7f:38:cd:0e:8a:64:15:7c:4e:44:6f:b9:
69:4d:4e:fd:31:43:2f:91:73:c3:05:f0:09:7e:b3:
c5:09:98:15:15:fb:2f:93:f1:dd:38:d3:79:5b:c6:
0d:bd:11:a0:e1:9b:99:52:df:e1:9a:61:02:0a:fe:
18:b8:bd:72:70:17:94:33:13:46:24:6d:39:7b:e3:
4d:83:bf:e8:3a:f1:6c:84:ae:c0:49:68:20:4f:ac:
d9:78:54:e0:c1:d7:30:a0:d0:d7:f6:6d:d4:48:f7:
ef:98:03:87:c2:66:ba:a4:b3:42:d9:9f:a0:74:cf:
5d:10:a4:e8:33:ef:0e:7e:45:ec:db:9b:78:0a:f3:
91:33:cc:58:05:6c:48:77:dc:b7:74:e6:25:42:d1:
8e:f6:a8:00:38:0c:b9:5e:1d:0e:c2:d6:74:ca:d3:
fd:4b:86:8e:78:17:f4:54:0f:20:7a:c2:39:96:fc:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B6:AB:84:B1:1A:37:10:05:74:86:91:DB:73:77:E5:59:76:71:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/43f5976f-5af6-3580-a9ca-0216608cf998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:c8:93:82:66:6c:1d:14:63:84:40:50:63:dd:d7:45:cd:a4:
58:53:e1:bc:f2:ad:27:48:31:75:db:5d:06:bc:56:bf:b7:2e:
7f:c3:e8:af:ae:b2:26:01:64:c9:66:3f:0d:fc:ec:23:d6:22:
dd:98:d5:10:d5:a8:3c:41:4a:79:40:9e:93:d4:04:cf:cf:3d:
c8:f4:21:d8:fd:9c:78:8d:da:f0:d6:8f:9f:ed:12:35:5c:f3:
29:d2:25:1a:47:b5:4b:6d:bb:65:3d:e9:4d:9c:5e:2f:2e:93:
f9:fb:3b:73:ff:31:45:f1:e9:ad:b8:e8:50:92:63:0f:aa:62:
4a:91:1f:04:a6:44:d1:18:39:ca:89:15:2d:7b:7f:e4:99:8d:
2f:87:ab:af:3e:cc:eb:b1:a7:e8:e6:34:56:48:5c:ce:b4:83:
01:43:8f:e4:2f:38:d7:35:e5:cb:f5:0f:76:00:3d:6d:39:7f:
64:49:b6:f3:ea:ed:ed:7a:9b:26:00:3e:df:65:bc:4a:33:d7:
e6:42:0c:82:b0:e7:b6:49:06:32:17:37:12:cb:e9:23:66:9f:
52:ea:ab:a4:f0:9e:c4:f2:99:cc:a2:fa:6e:30:34:26:d4:db:
8b:08:51:3e:80:ff:f6:8c:79:8d:62:b6:16:5e:61:a0:d2:0f:
38:1b:97:8a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAabBCGcWtx53oZkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMTEyMDAwMFoXDTIzMDEwNjA1MDAwMFowLzEtMCsGA1UEAxMk
NzIxYzJlMjQtYTg5YS00NTRkLTk5NTItYWYyOWUyOTQ1MGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qC7u9l6dqchsiy6yaj8nTRPKeU+HeqTNlCX
C02ga7W1QMxOcX0ttd8I+RcR7X8d1uaW5rvvPFo+5YfQYnEPtT+cCGJsj2GOyCFx
jyx/OM0OimQVfE5Eb7lpTU79MUMvkXPDBfAJfrPFCZgVFfsvk/HdONN5W8YNvRGg
4ZuZUt/hmmECCv4YuL1ycBeUMxNGJG05e+NNg7/oOvFshK7ASWggT6zZeFTgwdcw
oNDX9m3USPfvmAOHwma6pLNC2Z+gdM9dEKToM+8OfkXs25t4CvORM8xYBWxId9y3
dOYlQtGO9qgAOAy5Xh0OwtZ0ytP9S4aOeBf0VA8gesI5lvxdGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCG2q4SxGjcQBXSGkdtzd+VZdnEgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDNmNTk3NmYtNWFmNi0z
NTgwLWE5Y2EtMDIxNjYwOGNmOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgrAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJMiTgmZsHRRjhEBQY93XRc2kWFPhvPKtJ0gxddtdBrxWv7cuf8Por66y
JgFkyWY/DfzsI9Yi3ZjVENWoPEFKeUCek9QEz889yPQh2P2ceI3a8NaPn+0SNVzz
KdIlGke1S227ZT3pTZxeLy6T+fs7c/8xRfHprbjoUJJjD6piSpEfBKZE0Rg5yokV
LXt/5JmNL4errz7M67Gn6OY0VkhczrSDAUOP5C841zXly/UPdgA9bTl/ZEm28+rt
7XqbJgA+32W8SjPX5kIMgrDntkkGMhc3EsvpI2afUuqrpPCexPKZzKL6bjA0JtTb
iwhRPoD/9ox5jWK2Fl5hoNIPOBuXig==
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:14:51 2025 by rpki-client