Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5648bf80-ab9a-3a27-9cac-0acfda2a4ba5.roa
File: 5648bf80-ab9a-3a27-9cac-0acfda2a4ba5.roa (raw, json)
Hash identifier: SbNJQBaxq0rGimqtE87Ez8waBk4X61yAq3iJOHefbQc=
Subject key identifier: 8C:B8:94:BB:73:77:21:92:70:A3:F1:C2:B0:72:BB:5C:95:78:58:97
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D63F312733D004060C2E31780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5648bf80-ab9a-3a27-9cac-0acfda2a4ba5.roa
Signing time: Mon 28 Mar 2022 04:00:00 +0000
ROA not before: Mon 28 Mar 2022 04:00:00 +0000
ROA not after: Mon 02 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 40.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:63:f3:12:73:3d:00:40:60:c2:e3:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 28 04:00:00 2022 GMT
Not After : May 2 04:00:00 2022 GMT
Subject: CN=5bbae7ac-4d25-4722-b3fb-ed92d7be0a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2a:dc:77:75:fb:35:93:79:70:f4:b1:ba:4d:
d2:7a:18:4f:94:10:09:e5:15:e3:a3:d0:b2:50:50:
70:4c:00:c4:f5:7b:61:92:a7:21:f2:da:ff:c6:e9:
75:ce:1d:86:29:70:c1:57:d6:68:bd:79:68:b4:d3:
31:48:4f:70:0f:6f:07:77:4e:fc:f0:12:71:f1:0b:
ba:c4:45:55:8c:69:90:f2:94:ce:08:ee:00:90:6d:
bc:9f:3f:69:24:ef:8f:a8:53:85:c3:5a:e9:54:c5:
b3:2f:bf:c5:c9:e8:1a:e9:d3:47:d1:ed:e0:bd:bb:
13:90:7e:e2:dc:5c:d7:e0:a2:0c:6e:aa:55:d5:ae:
c0:4f:4e:3c:eb:e6:24:75:45:87:69:65:93:8d:e4:
c6:1e:21:ba:6d:38:eb:fe:6f:8e:5f:6e:8c:23:83:
92:28:7e:b5:4e:ca:6a:8f:a8:33:41:e4:44:23:7e:
fd:00:15:c8:52:8d:a1:97:02:d4:8b:58:32:9b:d1:
cc:dd:ba:2e:04:db:7c:a7:fc:54:2f:8d:be:d7:32:
f6:5b:b3:c7:39:37:ed:22:ac:54:bb:34:c5:29:59:
36:f8:78:be:cc:d5:82:5b:d6:17:39:59:67:81:33:
0a:86:01:db:45:5c:e1:41:8e:b7:e6:e2:44:c5:8d:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B8:94:BB:73:77:21:92:70:A3:F1:C2:B0:72:BB:5C:95:78:58:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5648bf80-ab9a-3a27-9cac-0acfda2a4ba5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:00:2b:03:98:07:29:a8:37:db:f7:bb:40:7b:5c:82:2a:91:
72:8d:cc:dc:b5:2a:bd:32:c4:cf:4e:80:87:f7:07:0d:75:6f:
91:73:15:7c:57:9a:73:bb:cd:3a:cb:a4:5b:1a:66:a3:33:e4:
5a:c2:80:1e:3e:a3:a6:b9:dd:47:61:39:19:d1:d8:6f:1b:cf:
99:ea:7e:a3:a5:8c:63:a5:c0:da:a3:c6:bd:e2:c3:6b:79:29:
c7:43:d9:79:d0:9d:33:79:f7:15:e0:6c:b9:13:67:37:93:fe:
19:16:7c:a7:8b:01:db:3d:72:22:69:db:c3:70:8d:94:ea:6f:
b6:28:b2:54:d9:69:cf:ce:c4:9e:c1:5c:51:4f:93:56:15:ba:
35:d3:9f:5a:70:6a:5d:3f:b9:ea:ab:f4:b2:65:2c:6d:f8:df:
52:c5:75:7c:95:31:35:ee:10:7a:36:f6:59:4a:df:44:83:b0:
cf:41:a1:63:46:29:97:4a:75:13:87:73:1a:bf:f5:a7:75:89:
4d:ba:06:c0:3c:f5:90:94:7e:da:2e:79:4e:b9:84:de:07:3c:
a6:24:f2:74:1c:9a:92:01:0a:65:61:27:cd:5b:b7:32:a9:95:
40:fd:ef:39:c1:c8:ef:31:27:60:74:9f:dc:77:2d:6f:e5:5a:
55:7d:b7:64
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1j8xJzPQBAYMLjF4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyODA0MDAwMFoXDTIyMDUwMjA0MDAwMFowLzEtMCsGA1UEAxMk
NWJiYWU3YWMtNGQyNS00NzIyLWIzZmItZWQ5MmQ3YmUwYTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSrcd3X7NZN5cPSxuk3SehhPlBAJ5RXjo9Cy
UFBwTADE9Xthkqch8tr/xul1zh2GKXDBV9ZovXlotNMxSE9wD28Hd0788BJx8Qu6
xEVVjGmQ8pTOCO4AkG28nz9pJO+PqFOFw1rpVMWzL7/Fyega6dNH0e3gvbsTkH7i
3FzX4KIMbqpV1a7AT0486+YkdUWHaWWTjeTGHiG6bTjr/m+OX26MI4OSKH61Tspq
j6gzQeREI379ABXIUo2hlwLUi1gym9HM3bouBNt8p/xUL42+1zL2W7PHOTftIqxU
uzTFKVk2+Hi+zNWCW9YXOVlngTMKhgHbRVzhQY635uJExY38owIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIy4lLtzdyGScKPxwrByu1yVeFiXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTY0OGJmODAtYWI5YS0z
YTI3LTljYWMtMGFjZmRhMmE0YmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmQArA5gHKag32/e7QHtcgiqRco3M3LUqvTLEz06Ah/cHDXVvkXMVfFea
c7vNOsukWxpmozPkWsKAHj6jprndR2E5GdHYbxvPmep+o6WMY6XA2qPGveLDa3kp
x0PZedCdM3n3FeBsuRNnN5P+GRZ8p4sB2z1yImnbw3CNlOpvtiiyVNlpz87EnsFc
UU+TVhW6NdOfWnBqXT+56qv0smUsbfjfUsV1fJUxNe4Qejb2WUrfRIOwz0GhY0Yp
l0p1E4dzGr/1p3WJTboGwDz1kJR+2i55TrmE3gc8piTydByakgEKZWEnzVu3MqmV
QP3vOcHI7zEnYHSf3Hctb+VaVX23ZA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:08 2025 by rpki-client