Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f48d00e-7a8d-3f49-b055-c6b205285b7d.roa
File: 4f48d00e-7a8d-3f49-b055-c6b205285b7d.roa (raw, json)
Hash identifier: EQfXZD7nQCZ6bB9aYepgcTzHTEBMj76YcuGvDWMmG4U=
Subject key identifier: 8D:BD:B2:42:D8:EC:34:68:27:C3:1A:0C:62:1E:71:75:F5:C7:71:D5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FE6CDD28B2A0D6F316EF2FC28
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f48d00e-7a8d-3f49-b055-c6b205285b7d.roa
Signing time: Sun 13 Nov 2022 12:00:00 +0000
ROA not before: Sun 13 Nov 2022 12:00:00 +0000
ROA not after: Mon 19 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 40.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:e6:cd:d2:8b:2a:0d:6f:31:6e:f2:fc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 13 12:00:00 2022 GMT
Not After : Dec 19 05:00:00 2022 GMT
Subject: CN=f084297b-129b-46a1-ab89-35cf0e4b3d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b7:3e:56:01:81:8f:38:48:83:05:7a:84:2f:
dc:9d:d0:70:b9:62:61:b4:8b:74:08:0a:9f:c1:69:
5d:c6:19:fd:7c:6e:06:4b:e2:14:68:05:58:80:bb:
81:9a:84:d6:a0:38:e6:1f:f4:bc:8e:e2:e8:93:ef:
24:02:47:31:c9:24:9c:f7:d4:a1:c8:ea:84:81:99:
38:c7:45:28:09:98:7e:8e:12:1c:d0:26:d6:c8:b1:
b0:7d:cf:0c:3b:e7:99:00:17:42:5a:f4:57:b9:8d:
1b:a9:4b:43:27:dc:d2:0b:86:11:fd:71:59:04:8f:
46:4b:d0:bc:d1:88:41:c0:0d:d0:bd:cb:e4:d1:11:
6e:db:87:dc:d8:bb:e3:d5:68:a4:87:b3:62:96:8e:
ab:3a:bf:66:3a:d7:7b:e5:32:bc:f1:74:69:01:eb:
ce:7a:07:27:7f:2b:27:fe:36:50:0c:ce:4d:fb:a8:
26:cb:ac:58:7c:ad:22:34:30:ef:1f:1f:c1:49:c1:
98:a5:99:7a:70:a3:af:1a:86:65:b6:6f:90:00:b2:
28:29:1a:4d:ed:22:b5:e5:33:07:af:61:33:22:9f:
9b:cc:0a:88:8b:29:7b:16:00:d0:ae:6d:a6:71:af:
b0:86:46:c6:34:de:77:16:8c:fd:13:94:4e:a0:04:
6e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BD:B2:42:D8:EC:34:68:27:C3:1A:0C:62:1E:71:75:F5:C7:71:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4f48d00e-7a8d-3f49-b055-c6b205285b7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:ca:f1:ab:bb:32:a6:bb:15:f4:6e:39:5d:70:18:fa:76:13:
6b:15:60:0b:89:64:2b:25:c4:c7:c8:f5:04:de:e8:4c:65:4d:
12:05:70:c8:df:1c:d3:c7:c5:ef:97:19:f6:a7:88:bb:62:f3:
20:44:bb:5a:4a:a7:3c:34:d2:4f:f3:7f:89:ad:c3:26:5e:4e:
b6:35:cf:a4:1c:6c:99:3c:8e:56:1d:e5:95:78:88:32:45:ee:
e0:5b:21:b8:1a:d9:9b:90:cb:ba:41:5f:a6:d3:62:d0:0f:65:
93:3b:49:f2:45:84:29:ad:9f:2e:e5:6a:d8:47:7b:6f:b3:6b:
7d:df:a9:e5:30:86:63:f9:00:0e:89:1b:fe:7d:1b:82:de:b9:
e2:b4:c2:b4:28:81:c9:d0:ce:9e:4b:c5:3e:6d:cd:1d:40:20:
e8:52:eb:39:1c:03:33:17:4a:a6:b8:e9:e7:0a:d9:7b:f8:c0:
10:21:5f:15:de:c0:ce:80:36:8b:f6:c0:e9:67:2e:cb:d1:ea:
dc:ba:c7:05:5e:df:b6:81:a7:f2:c7:7e:82:de:e8:98:41:fe:
d5:e1:a0:f9:ca:4a:87:8a:93:2a:f6:ef:a8:89:ed:8d:20:c0:
b3:da:c4:09:8c:42:8f:6b:c8:c3:1d:fe:67:16:d2:fd:50:2c:
8d:85:16:c0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/mzdKLKg1vMW7y/CgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExMzEyMDAwMFoXDTIyMTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZjA4NDI5N2ItMTI5Yi00NmExLWFiODktMzVjZjBlNGIzZDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Lc+VgGBjzhIgwV6hC/cndBwuWJhtIt0CAqf
wWldxhn9fG4GS+IUaAVYgLuBmoTWoDjmH/S8juLok+8kAkcxySSc99ShyOqEgZk4
x0UoCZh+jhIc0CbWyLGwfc8MO+eZABdCWvRXuY0bqUtDJ9zSC4YR/XFZBI9GS9C8
0YhBwA3Qvcvk0RFu24fc2Lvj1Wikh7Nilo6rOr9mOtd75TK88XRpAevOegcnfysn
/jZQDM5N+6gmy6xYfK0iNDDvHx/BScGYpZl6cKOvGoZltm+QALIoKRpN7SK15TMH
r2EzIp+bzAqIiyl7FgDQrm2mca+whkbGNN53Foz9E5ROoARuwwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI29skLY7DRoJ8MaDGIecXX1x3HVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGY0OGQwMGUtN2E4ZC0z
ZjQ5LWIwNTUtYzZiMjA1Mjg1YjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKO8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcMrxq7syprsV9G45XXAY+nYTaxVgC4lkKyXEx8j1BN7oTGVNEgVwyN8c
08fF75cZ9qeIu2LzIES7WkqnPDTST/N/ia3DJl5OtjXPpBxsmTyOVh3llXiIMkXu
4FshuBrZm5DLukFfptNi0A9lkztJ8kWEKa2fLuVq2Ed7b7Nrfd+p5TCGY/kADokb
/n0bgt654rTCtCiBydDOnkvFPm3NHUAg6FLrORwDMxdKprjp5wrZe/jAECFfFd7A
zoA2i/bA6Wcuy9Hq3LrHBV7ftoGn8sd+gt7omEH+1eGg+cpKh4qTKvbvqIntjSDA
s9rECYxCj2vIwx3+ZxbS/VAsjYUWwA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:17 2025 by rpki-client