Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49e3f030-f017-3c0e-ae15-8755f41eb732.roa
File: 49e3f030-f017-3c0e-ae15-8755f41eb732.roa (raw, json)
Hash identifier: FE1QERlZ9xxlDVUS80zcnW8gttAgQNSXa0nZBU3pPIQ=
Subject key identifier: 95:B1:B3:BF:2C:A4:DA:0C:33:B9:53:99:4B:08:CE:5F:E4:A6:35:79
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840218BF4C199AFA8EE970BB9E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49e3f030-f017-3c0e-ae15-8755f41eb732.roa
Signing time: Sun 04 Dec 2022 12:00:00 +0000
ROA not before: Sun 04 Dec 2022 12:00:00 +0000
ROA not after: Mon 09 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 130.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:21:8b:f4:c1:99:af:a8:ee:97:0b:b9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 4 12:00:00 2022 GMT
Not After : Jan 9 05:00:00 2023 GMT
Subject: CN=dc088104-e92c-4c1a-b3fa-1e4e8db56c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:19:30:e8:ff:9a:4a:8a:dc:79:03:97:bf:
9a:40:aa:03:15:1b:35:c4:e2:f5:52:5f:e1:31:58:
3a:4b:29:d5:22:ca:fb:c6:f2:2a:dc:96:ea:cc:a6:
9e:0b:72:65:83:34:44:0c:eb:4b:6a:5e:75:44:33:
5d:f5:05:07:fa:f9:f5:94:8c:c6:21:61:e1:be:ca:
ef:ec:99:0e:46:68:ae:ea:8f:79:a4:ec:e1:84:48:
a2:d4:5c:4b:da:32:cf:8c:64:2a:34:55:e9:0d:39:
fd:fc:e2:bd:9c:5e:d4:9b:f2:56:bf:be:98:02:eb:
a8:37:2f:00:55:c4:c8:c3:85:67:91:64:8f:49:d3:
65:a1:15:80:e4:76:1f:45:b1:78:54:6a:52:e2:c8:
9c:7e:70:a3:4c:1f:62:12:26:47:4b:0f:8c:8f:21:
fb:91:43:f0:d3:28:f5:16:4b:4d:88:48:ae:d3:c1:
bb:f2:9f:a4:30:e6:9b:23:bb:8c:91:e6:1f:a6:58:
ea:ec:b8:bb:aa:9f:b4:c6:0d:4a:3b:97:c3:0b:a2:
96:55:69:57:09:19:90:56:1b:64:bf:85:99:33:80:
6a:e1:9c:94:9d:f6:21:ba:a0:d2:34:d4:76:c5:42:
14:4e:62:69:f0:14:d6:65:39:04:8b:9f:c7:23:4b:
90:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B1:B3:BF:2C:A4:DA:0C:33:B9:53:99:4B:08:CE:5F:E4:A6:35:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49e3f030-f017-3c0e-ae15-8755f41eb732.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:d2:74:c8:40:1e:c7:c0:1e:d0:68:87:53:44:fb:e3:de:fb:
fe:9b:5f:5c:ca:29:23:ef:3c:fd:71:ea:b5:3c:ad:3d:f6:ae:
0d:31:5e:13:bc:7c:24:21:00:63:82:a3:34:95:d6:5b:83:f5:
db:07:ff:e2:a7:b1:3f:37:df:4c:2a:22:ac:3f:9c:84:be:1e:
3c:33:e5:c2:43:f3:c6:35:db:78:bd:f3:1b:7a:86:f9:b7:58:
9e:7e:39:f8:e3:e5:c0:e9:db:4e:ad:ad:c2:b0:af:9b:45:63:
c4:3e:0d:b5:ff:f6:06:ed:a2:06:0a:d2:0a:b6:e0:33:10:0b:
f0:ce:41:c2:b7:8b:94:79:28:99:8f:17:f8:b4:ed:26:2d:6b:
79:4d:d1:06:67:ed:ed:4d:6b:49:21:92:18:24:21:5e:1f:87:
83:34:de:8d:df:c7:7f:94:44:b4:62:03:c7:cf:ce:a4:66:7b:
33:48:d7:c5:67:db:3a:4c:39:2f:3a:a8:62:f7:57:1b:27:77:
9b:57:e7:aa:9f:9e:69:a3:dd:2e:71:5e:c5:2b:20:07:1d:58:
8a:8f:31:25:10:95:71:52:b8:5f:46:7d:db:f3:55:1d:1a:8f:
37:bb:d6:a8:53:59:36:6e:c3:f7:a4:17:11:66:0b:0d:65:40:
d7:27:f5:ad
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAhi/TBma+o7pcLueAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwNDEyMDAwMFoXDTIzMDEwOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZGMwODgxMDQtZTkyYy00YzFhLWIzZmEtMWU0ZThkYjU2YzQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntYZMOj/mkqK3HkDl7+aQKoDFRs1xOL1Ul/h
MVg6SynVIsr7xvIq3JbqzKaeC3JlgzREDOtLal51RDNd9QUH+vn1lIzGIWHhvsrv
7JkORmiu6o95pOzhhEii1FxL2jLPjGQqNFXpDTn9/OK9nF7Um/JWv76YAuuoNy8A
VcTIw4VnkWSPSdNloRWA5HYfRbF4VGpS4sicfnCjTB9iEiZHSw+MjyH7kUPw0yj1
FktNiEiu08G78p+kMOabI7uMkeYfpljq7Li7qp+0xg1KO5fDC6KWVWlXCRmQVhtk
v4WZM4Bq4ZyUnfYhuqDSNNR2xUIUTmJp8BTWZTkEi5/HI0uQQwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJWxs78spNoMM7lTmUsIzl/kpjV5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDllM2YwMzAtZjAxNy0z
YzBlLWFlMTUtODc1NWY0MWViNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAghUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWdJ0yEAex8Ae0GiHU0T74977/ptfXMopI+88/XHqtTytPfauDTFeE7x8
JCEAY4KjNJXWW4P12wf/4qexPzffTCoirD+chL4ePDPlwkPzxjXbeL3zG3qG+bdY
nn45+OPlwOnbTq2twrCvm0VjxD4Ntf/2Bu2iBgrSCrbgMxAL8M5BwreLlHkomY8X
+LTtJi1reU3RBmft7U1rSSGSGCQhXh+HgzTejd/Hf5REtGIDx8/OpGZ7M0jXxWfb
Okw5LzqoYvdXGyd3m1fnqp+eaaPdLnFexSsgBx1Yio8xJRCVcVK4X0Z92/NVHRqP
N7vWqFNZNm7D96QXEWYLDWVA1yf1rQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:43 2025 by rpki-client