Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58f87d56-e879-343f-aaa0-7e7eefee6358.roa
File: 58f87d56-e879-343f-aaa0-7e7eefee6358.roa (raw, json)
Hash identifier: 8P8pVntDSm0M6vfOm5ZmoXDPOs55jx28n6XCr2aeTtY=
Subject key identifier: 80:3C:12:6B:98:6D:FE:DF:F7:9C:2A:B9:61:1F:45:86:A0:CB:2D:3D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF8B2406A5A231EAD042D31C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58f87d56-e879-343f-aaa0-7e7eefee6358.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 108.128.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f8:b2:40:6a:5a:23:1e:ad:04:2d:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=b0e02eed-5b22-43f2-800f-3afc28a28a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:f0:3b:04:34:af:0a:c2:ca:e5:0e:86:e3:
79:06:5b:03:fa:cc:e9:ed:3f:06:8f:75:3d:26:42:
f3:2f:9c:85:7e:59:9e:d5:6b:a6:8c:50:09:3e:1a:
0b:ca:63:e9:ed:45:43:b6:23:df:eb:1b:43:75:6d:
e1:d1:d9:01:f6:0b:12:d3:34:42:5e:93:78:02:4d:
cc:7e:04:09:1b:bf:47:a7:c7:3d:16:4f:55:06:e3:
52:69:a7:12:94:3c:56:c2:06:ed:fa:d9:2a:2d:75:
be:59:d6:0c:63:d2:d0:9f:1d:8b:a0:49:75:bc:91:
56:14:2a:42:40:46:29:b9:24:52:6a:ea:90:74:f2:
58:9c:fb:bd:4f:54:ba:1e:e9:1f:21:3f:92:e6:be:
4f:ba:5b:99:ef:b8:10:0d:c3:5f:3c:02:c1:fa:ea:
0b:af:16:59:63:28:13:52:e2:98:ea:fd:40:94:9a:
c0:5f:3c:6f:50:f8:62:31:e9:34:11:93:7d:7d:2f:
a8:f2:1b:f0:76:41:6a:60:a2:92:e1:5a:16:b4:8c:
3a:14:90:d1:85:a4:ac:d3:8b:da:37:2f:fc:d5:c3:
e6:d8:37:a9:93:99:1b:da:a4:d3:85:7e:41:a3:9d:
d2:1d:0c:89:c4:11:d5:38:7c:22:dc:5b:ce:8b:45:
f0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3C:12:6B:98:6D:FE:DF:F7:9C:2A:B9:61:1F:45:86:A0:CB:2D:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58f87d56-e879-343f-aaa0-7e7eefee6358.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.128.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:9b:43:6b:2a:41:61:97:e2:34:3a:c2:e6:26:1d:fa:07:2b:
20:88:d2:62:cb:c6:3a:4a:91:d5:1e:34:63:ed:d8:b5:dd:76:
ec:0f:13:ed:0e:26:b5:cc:02:63:83:af:da:08:cc:91:0f:d9:
89:9e:b0:c2:a2:85:87:ba:19:24:c4:3e:fe:f3:59:e5:ac:f8:
ea:89:a8:ea:39:eb:1c:4c:7c:06:98:41:96:4e:42:18:64:2d:
8b:73:a6:94:4f:79:bb:d4:af:79:7d:75:d0:ab:22:25:0d:5b:
9f:c5:fd:68:da:81:d5:74:77:39:df:93:cb:fc:26:a5:f5:f2:
86:e1:a9:c2:61:74:78:95:d1:83:3a:d7:27:c8:52:e5:79:b2:
7f:e7:35:8d:6f:64:60:8f:33:ce:65:d0:74:28:22:67:b2:df:
28:06:2a:b4:da:51:e8:fb:03:ba:59:e4:70:74:23:45:58:7b:
69:12:85:cb:5d:4d:5f:33:7c:85:8e:8a:89:95:57:c2:64:d3:
76:30:c4:f2:93:4c:da:82:b3:60:bf:e8:83:9e:5c:c8:80:6d:
7e:13:52:43:9f:3b:e2:70:38:f1:19:03:ce:4d:84:1b:2d:ac:
3b:94:3a:3c:62:59:58:1f:fd:bc:db:d5:7c:13:4d:ae:cd:e0:
97:a1:ae:86
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD34skBqWiMerQQtMcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
YjBlMDJlZWQtNWIyMi00M2YyLTgwMGYtM2FmYzI4YTI4YTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz/wOwQ0rwrCyuUOhuN5BlsD+szp7T8Gj3U9
JkLzL5yFflme1WumjFAJPhoLymPp7UVDtiPf6xtDdW3h0dkB9gsS0zRCXpN4Ak3M
fgQJG79Hp8c9Fk9VBuNSaacSlDxWwgbt+tkqLXW+WdYMY9LQnx2LoEl1vJFWFCpC
QEYpuSRSauqQdPJYnPu9T1S6HukfIT+S5r5PuluZ77gQDcNfPALB+uoLrxZZYygT
UuKY6v1AlJrAXzxvUPhiMek0EZN9fS+o8hvwdkFqYKKS4VoWtIw6FJDRhaSs04va
Ny/81cPm2Depk5kb2qTThX5Bo53SHQyJxBHVOHwi3FvOi0XwWQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIA8EmuYbf7f95wquWEfRYagyy09MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNThmODdkNTYtZTg3OS0z
NDNmLWFhYTAtN2U3ZWVmZWU2MzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDbIAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPJtDaypBYZfiNDrC5iYd+gcrIIjSYsvGOkqR1R40Y+3Ytd127A8T7Q4m
tcwCY4Ov2gjMkQ/ZiZ6wwqKFh7oZJMQ+/vNZ5az46omo6jnrHEx8BphBlk5CGGQt
i3OmlE95u9SveX110KsiJQ1bn8X9aNqB1XR3Od+Ty/wmpfXyhuGpwmF0eJXRgzrX
J8hS5Xmyf+c1jW9kYI8zzmXQdCgiZ7LfKAYqtNpR6PsDulnkcHQjRVh7aRKFy11N
XzN8hY6KiZVXwmTTdjDE8pNM2oKzYL/og55cyIBtfhNSQ5874nA48RkDzk2EGy2s
O5Q6PGJZWB/9vNvVfBNNrs3gl6Guhg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:12 2025 by rpki-client