Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f0b858a-7152-384a-99e5-e4ea794b4655.roa
File: 4f0b858a-7152-384a-99e5-e4ea794b4655.roa (raw, json)
Hash identifier: QqCrA7bA6aoSMdyUuur7RsbfsMYDCg7VEZ3Bq20/zPo=
Subject key identifier: 5E:3F:B9:BF:AC:9A:1A:25:07:A6:6A:4B:FD:0D:E9:AA:E9:56:E2:38
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F6741C1621E557273C2509800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f0b858a-7152-384a-99e5-e4ea794b4655.roa
Signing time: Wed 28 Sep 2022 17:57:08 +0000
ROA not before: Wed 28 Sep 2022 17:57:08 +0000
ROA not after: Thu 03 Nov 2022 04:00:00 +0000
asID: 8987
IP address blocks: 198.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:67:41:c1:62:1e:55:72:73:c2:50:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 28 17:57:08 2022 GMT
Not After : Nov 3 04:00:00 2022 GMT
Subject: CN=9042b1af-e38e-43f4-858d-06187d2757bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:dc:81:fd:7e:7b:c8:e4:8a:96:7a:79:7b:
9e:a0:f1:08:18:08:b5:88:f1:73:10:f2:9b:be:0f:
da:c8:ee:c1:f2:ad:9e:c7:8b:ed:cd:05:82:1c:d9:
e2:65:50:5f:94:28:1e:fb:41:27:43:9e:76:f2:51:
21:09:75:4b:ae:1e:ee:84:52:6c:31:47:2c:16:fc:
e4:7f:cc:66:27:ea:9e:06:a1:12:50:7a:3d:f4:8b:
f2:e2:92:a2:f2:e2:2f:ac:3b:73:4d:4f:cc:8c:42:
c5:d5:82:6c:a7:f2:95:f0:2b:65:3a:63:1a:3e:82:
c9:28:54:7e:6d:7e:5f:79:ef:28:93:8e:54:e2:e4:
5e:74:6e:a2:83:99:21:7a:76:60:2e:d6:55:41:9b:
f3:d4:18:4b:bc:18:c5:98:29:e2:6a:40:3d:64:90:
ec:0b:75:dd:1d:26:73:96:7f:a9:77:0d:e3:eb:6b:
f6:98:88:b6:33:98:ff:7a:20:9e:9c:93:6e:03:25:
2a:69:fd:7f:79:f1:f0:cb:dd:fd:4e:f4:6d:b8:67:
2b:d3:56:a0:9c:7c:7d:88:01:a1:63:21:6e:03:d3:
42:65:e1:09:51:71:04:b5:3c:04:39:b6:30:86:97:
12:2c:aa:46:87:41:16:f0:85:2f:65:73:bb:0f:f2:
ca:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3F:B9:BF:AC:9A:1A:25:07:A6:6A:4B:FD:0D:E9:AA:E9:56:E2:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f0b858a-7152-384a-99e5-e4ea794b4655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:2c:10:54:d0:e0:ce:3c:bf:80:9b:69:ea:86:6e:1e:16:50:
72:90:8c:26:36:b4:f6:0d:5f:3b:96:19:65:dd:da:ff:f0:2b:
fa:fe:e5:ae:91:a2:6a:30:af:44:7a:ff:9b:f4:fe:03:ce:f5:
8a:84:a4:33:c2:4d:31:42:62:fb:3e:1e:4a:5b:e2:96:45:1e:
72:d1:10:d9:79:a9:c4:02:5d:5f:14:4f:0e:70:a3:07:b9:0b:
06:5b:8c:df:e3:a5:f3:03:5c:8d:8a:b4:62:bf:dc:9d:27:9c:
fb:0a:2e:8f:e7:0d:eb:73:b4:e6:c8:77:b1:06:0e:a7:8c:dc:
85:b9:6c:94:1d:f3:91:69:98:24:5d:3e:8d:46:ff:9c:14:a1:
41:f3:2c:4c:a4:15:bb:9a:35:69:5e:e5:69:95:61:81:e5:d8:
2e:db:5f:6f:3d:18:5b:b0:90:4d:d1:66:c9:79:a7:d4:49:8a:
fe:05:50:a1:dd:5c:90:fd:8d:ed:16:61:96:05:fd:4f:86:98:
25:8a:b0:1c:9a:d0:50:59:c1:56:fd:ec:ad:01:ed:82:f6:4b:
75:e7:ae:b9:95:ac:ef:78:f6:3b:f4:99:25:90:65:12:d7:ca:
1d:d5:ec:f5:c4:b6:4f:86:f3:77:01:15:c5:c0:c2:ea:e9:8c:
e3:71:42:77
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9nQcFiHlVyc8JQmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyODE3NTcwOFoXDTIyMTEwMzA0MDAwMFowLzEtMCsGA1UEAxMk
OTA0MmIxYWYtZTM4ZS00M2Y0LTg1OGQtMDYxODdkMjc1N2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiK7cgf1+e8jkipZ6eXueoPEIGAi1iPFzEPKb
vg/ayO7B8q2ex4vtzQWCHNniZVBflCge+0EnQ5528lEhCXVLrh7uhFJsMUcsFvzk
f8xmJ+qeBqESUHo99Ivy4pKi8uIvrDtzTU/MjELF1YJsp/KV8CtlOmMaPoLJKFR+
bX5fee8ok45U4uRedG6ig5khenZgLtZVQZvz1BhLvBjFmCniakA9ZJDsC3XdHSZz
ln+pdw3j62v2mIi2M5j/eiCenJNuAyUqaf1/efHwy939TvRtuGcr01agnHx9iAGh
YyFuA9NCZeEJUXEEtTwEObYwhpcSLKpGh0EW8IUvZXO7D/LK2QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF4/ub+smholB6ZqS/0N6arpVuI4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGYwYjg1OGEtNzE1Mi0z
ODRhLTk5ZTUtZTRlYTc5NGI0NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxoQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZCwQVNDgzjy/gJtp6oZuHhZQcpCMJja09g1fO5YZZd3a//Ar+v7lrpGi
ajCvRHr/m/T+A871ioSkM8JNMUJi+z4eSlvilkUectEQ2XmpxAJdXxRPDnCjB7kL
BluM3+Ol8wNcjYq0Yr/cnSec+wouj+cN63O05sh3sQYOp4zchblslB3zkWmYJF0+
jUb/nBShQfMsTKQVu5o1aV7laZVhgeXYLttfbz0YW7CQTdFmyXmn1EmK/gVQod1c
kP2N7RZhlgX9T4aYJYqwHJrQUFnBVv3srQHtgvZLdeeuuZWs73j2O/SZJZBlEtfK
HdXs9cS2T4bzdwEVxcDC6umM43FCdw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:13 2025 by rpki-client