Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a22dbfb-8f9e-34d8-811e-4317437e367f.roa
File: 5a22dbfb-8f9e-34d8-811e-4317437e367f.roa (raw, json)
Hash identifier: aaLRfNFXVPobVTezHYFokZmMMG1yZODs4nm5826VsmA=
Subject key identifier: EA:50:62:95:4F:79:AB:44:43:59:07:23:B3:99:C5:25:A8:E9:EC:CC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401ABDED4F74C5F2E3A10F7BF0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a22dbfb-8f9e-34d8-811e-4317437e367f.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 130.171.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:bd:ed:4f:74:c5:f2:e3:a1:0f:7b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=ba85050c-911f-4de6-9056-1bebdbe14b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cb:e0:1e:6e:36:73:78:c6:34:3c:32:e1:64:
21:3d:73:d1:e7:dd:af:12:15:c4:61:82:9d:de:63:
ac:dc:8d:92:51:2c:bf:ff:36:e8:9c:32:8e:d7:d8:
6c:fa:53:cc:f0:3b:b7:d7:ee:8a:ac:a1:20:3f:55:
04:d2:17:0b:45:b5:f0:20:63:24:7d:c4:0e:a4:28:
ae:dc:3e:91:a0:3c:ed:cc:b2:29:11:69:e2:25:f0:
f3:63:11:62:85:e6:c0:ad:c1:2c:8d:a2:74:11:40:
e2:c7:69:28:09:de:f2:d2:54:fb:66:ad:43:4a:5c:
3f:04:0c:27:94:58:3c:24:30:1b:86:01:45:4d:14:
82:fc:cf:c4:e3:9c:a8:d5:e6:03:98:01:e9:48:e7:
e4:7a:2f:3b:f4:4e:51:10:3b:ff:c1:b1:a6:7d:55:
8f:70:a8:b1:94:c3:b5:0d:1e:57:f1:8b:22:ec:27:
a5:b5:b3:cf:85:23:e0:1c:45:72:6f:b1:6f:0c:dc:
f0:5b:26:c9:ac:4e:98:62:39:a1:2a:35:80:33:f8:
f2:35:7d:44:35:de:f6:ce:90:23:60:fe:6d:bc:ff:
82:bd:66:d4:bb:3f:c1:22:bc:72:a8:ef:32:a9:d7:
03:e4:f3:19:e8:bb:8c:66:46:66:93:eb:a4:d3:4a:
9e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:50:62:95:4F:79:AB:44:43:59:07:23:B3:99:C5:25:A8:E9:EC:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5a22dbfb-8f9e-34d8-811e-4317437e367f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:9f:c2:53:09:30:3a:a1:e9:50:12:fc:8b:0e:36:e3:d5:14:
e9:36:d7:af:78:30:90:4c:47:02:59:36:2e:c7:cf:d2:1a:9d:
0d:3c:54:32:c9:82:da:0c:7c:50:5d:24:fb:32:53:32:49:37:
80:83:70:d8:c6:0f:76:29:bd:b0:3e:30:ae:59:2f:05:0e:37:
5a:4c:b8:55:c0:8b:6c:dc:73:c0:3b:b1:bc:cd:53:95:f6:23:
92:d7:45:0d:ec:6b:c7:39:4b:e7:c4:70:4a:c4:4e:87:c6:ca:
52:89:9f:ac:b7:76:35:f3:76:a4:79:e6:b2:29:87:6e:9b:98:
e0:eb:37:21:37:a8:05:f4:4d:b6:2e:cb:63:31:3a:b9:eb:be:
e2:bb:3a:62:be:31:70:18:b6:c4:0e:19:7b:98:94:aa:b4:5c:
7f:66:1c:a1:3e:11:90:0b:6d:89:f3:bb:4b:f8:5e:6c:0a:a2:
c6:45:5c:8a:fb:28:bf:61:92:d8:aa:7c:ef:c7:1e:3a:ef:83:
06:ca:20:aa:b9:d8:ec:0e:ab:7f:a2:2f:81:9e:af:1c:75:ab:
53:03:01:ae:03:43:61:ff:a8:8a:4d:ed:f6:88:4e:cb:cf:23:
bd:e2:6a:74:8b:c5:f0:b2:d5:17:d7:4a:10:b7:ed:16:c3:06:
9c:67:97:20
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAave1PdMXy46EPe/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMTEyMDAwMFoXDTIzMDEwNjA1MDAwMFowLzEtMCsGA1UEAxMk
YmE4NTA1MGMtOTExZi00ZGU2LTkwNTYtMWJlYmRiZTE0YjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMvgHm42c3jGNDwy4WQhPXPR592vEhXEYYKd
3mOs3I2SUSy//zbonDKO19hs+lPM8Du31+6KrKEgP1UE0hcLRbXwIGMkfcQOpCiu
3D6RoDztzLIpEWniJfDzYxFihebArcEsjaJ0EUDix2koCd7y0lT7Zq1DSlw/BAwn
lFg8JDAbhgFFTRSC/M/E45yo1eYDmAHpSOfkei879E5REDv/wbGmfVWPcKixlMO1
DR5X8Ysi7CeltbPPhSPgHEVyb7FvDNzwWybJrE6YYjmhKjWAM/jyNX1ENd72zpAj
YP5tvP+CvWbUuz/BIrxyqO8yqdcD5PMZ6LuMZkZmk+uk00qeTQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOpQYpVPeatEQ1kHI7OZxSWo6ezMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWEyMmRiZmItOGY5ZS0z
NGQ4LTgxMWUtNDMxNzQzN2UzNjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgqswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVJ/CUwkwOqHpUBL8iw4249UU6TbXr3gwkExHAlk2LsfP0hqdDTxUMsmC
2gx8UF0k+zJTMkk3gINw2MYPdim9sD4wrlkvBQ43Wky4VcCLbNxzwDuxvM1TlfYj
ktdFDexrxzlL58RwSsROh8bKUomfrLd2NfN2pHnmsimHbpuY4Os3ITeoBfRNti7L
YzE6ueu+4rs6Yr4xcBi2xA4Ze5iUqrRcf2YcoT4RkAttifO7S/hebAqixkVcivso
v2GS2Kp878ceOu+DBsogqrnY7A6rf6IvgZ6vHHWrUwMBrgNDYf+oik3t9ohOy88j
veJqdIvF8LLVF9dKELftFsMGnGeXIA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:34 2025 by rpki-client