Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4db6a242-8d77-3685-87e1-b3ba562e9ff5.roa
File: 4db6a242-8d77-3685-87e1-b3ba562e9ff5.roa (raw, json)
Hash identifier: 4pgoXXFGLhSwz8SKM61TfFjB57V1GXhssH/bir0dubc=
Subject key identifier: BF:51:DE:BF:9B:6C:93:47:E0:74:C2:8A:EF:DF:ED:5D:73:45:87:EA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C1FBFB5F8546D62E5F8B0E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4db6a242-8d77-3685-87e1-b3ba562e9ff5.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 13.166.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:fb:fb:5f:85:46:d6:2e:5f:8b:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=1a9fdb93-4aed-4c87-aaca-584dc3803802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:de:c2:ae:45:b3:57:c6:47:72:7f:0c:f3:
10:4c:03:f1:0b:c4:7b:8c:38:9f:da:ce:56:ea:b5:
5f:12:4d:51:c0:6f:d4:45:29:bb:e2:04:f9:08:27:
6a:b5:e1:2a:23:d5:09:14:e6:6c:2f:aa:dc:bf:20:
f8:21:6c:f8:e4:54:74:46:06:4c:65:fd:65:cc:c2:
5d:0c:2b:76:2b:21:d3:68:07:78:37:3f:89:65:d6:
ee:67:51:c7:35:39:bd:ea:93:34:14:18:7f:31:a9:
01:91:bb:8f:35:c4:5e:62:d6:fb:72:9c:65:7f:a1:
47:cc:ea:12:a4:78:52:b0:44:b7:ab:3e:89:c7:89:
a0:a1:7e:9c:34:c4:c5:33:23:9a:0c:52:31:c6:9f:
b1:a1:a6:d0:56:97:cd:a3:60:5d:00:f5:12:fa:f0:
33:dd:46:46:8e:14:fd:f8:34:73:a8:d5:16:72:4d:
da:68:f6:3b:ed:95:b7:cb:c3:54:32:e5:e7:cd:93:
0c:7a:61:41:9b:90:97:23:6f:2d:29:bf:0e:68:31:
56:cc:5b:c3:4a:96:73:4c:d5:ad:80:72:17:48:7a:
2b:4a:7f:89:aa:37:3e:b4:f8:7d:70:1d:7d:01:65:
c9:ad:02:19:b9:4d:b1:68:2a:7c:f0:96:13:90:44:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:51:DE:BF:9B:6C:93:47:E0:74:C2:8A:EF:DF:ED:5D:73:45:87:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4db6a242-8d77-3685-87e1-b3ba562e9ff5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
13.166.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:34:f9:e0:33:ff:e3:ca:07:2b:cb:e6:b9:c8:c8:49:c7:8d:
10:d8:92:9e:7f:63:99:84:2d:95:2b:73:e4:17:8d:b8:55:e2:
4e:70:9d:d4:f0:2e:72:49:b9:dd:c7:ca:b6:b3:ef:55:3a:57:
19:0d:1b:3c:e2:26:97:bf:7e:45:d4:6c:e6:1f:94:3a:ac:3b:
2e:2b:83:35:ef:b0:6a:37:84:e3:ea:7f:b0:17:98:c4:97:0d:
25:44:e2:3f:07:d8:77:f6:19:f3:e7:24:a3:47:9b:4b:4b:fd:
5d:9a:b3:2f:d6:06:65:0a:91:07:88:9d:fd:98:8f:5f:df:b1:
51:10:e2:61:55:c2:e5:0f:6e:65:5d:1e:9b:66:2d:53:d2:b2:
c9:79:bc:76:6f:bf:87:9a:9f:7b:b5:68:fa:1c:a0:30:39:eb:
06:02:d0:4c:f0:12:b8:c6:65:b8:b8:ad:7d:3a:93:29:f6:fc:
63:41:ac:c0:02:3c:8c:b0:74:37:65:d2:07:4c:45:e2:d5:ab:
af:37:29:88:a6:70:0d:a3:20:c5:d3:21:fa:9e:91:2c:8f:fa:
2d:41:83:f7:02:43:25:11:09:1d:ab:75:45:ff:07:a6:b6:50:
19:48:8f:78:68:1e:54:d2:98:14:26:09:6d:66:23:fd:d2:09:
52:7a:15:bc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDB+/tfhUbWLl+LDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEzMDIyNDIwN1oXDTIzMDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MWE5ZmRiOTMtNGFlZC00Yzg3LWFhY2EtNTg0ZGMzODAzODAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmenewq5Fs1fGR3J/DPMQTAPxC8R7jDif2s5W
6rVfEk1RwG/URSm74gT5CCdqteEqI9UJFOZsL6rcvyD4IWz45FR0RgZMZf1lzMJd
DCt2KyHTaAd4Nz+JZdbuZ1HHNTm96pM0FBh/MakBkbuPNcReYtb7cpxlf6FHzOoS
pHhSsES3qz6Jx4mgoX6cNMTFMyOaDFIxxp+xoabQVpfNo2BdAPUS+vAz3UZGjhT9
+DRzqNUWck3aaPY77ZW3y8NUMuXnzZMMemFBm5CXI28tKb8OaDFWzFvDSpZzTNWt
gHIXSHorSn+Jqjc+tPh9cB19AWXJrQIZuU2xaCp88JYTkEQ0xwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL9R3r+bbJNH4HTCiu/f7V1zRYfqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGRiNmEyNDItOGQ3Ny0z
Njg1LTg3ZTEtYjNiYTU2MmU5ZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBDaYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZDT54DP/48oHK8vmucjISceNENiSnn9jmYQtlStz5BeNuFXiTnCd1PAu
ckm53cfKtrPvVTpXGQ0bPOIml79+RdRs5h+UOqw7LiuDNe+wajeE4+p/sBeYxJcN
JUTiPwfYd/YZ8+cko0ebS0v9XZqzL9YGZQqRB4id/ZiPX9+xURDiYVXC5Q9uZV0e
m2YtU9KyyXm8dm+/h5qfe7Vo+hygMDnrBgLQTPASuMZluLitfTqTKfb8Y0GswAI8
jLB0N2XSB0xF4tWrrzcpiKZwDaMgxdMh+p6RLI/6LUGD9wJDJREJHat1Rf8HprZQ
GUiPeGgeVNKYFCYJbWYj/dIJUnoVvA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:54 2025 by rpki-client