Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5ba3432e-dbfd-355a-9a40-0fd3dd3cac0c.roa
File: 5ba3432e-dbfd-355a-9a40-0fd3dd3cac0c.roa (raw, json)
Hash identifier: kNvzyOmBYFZaZyGR1Vtma8x9Hpk9WtbiqP5wNwzZeok=
Subject key identifier: D3:1B:C6:18:99:73:86:55:FC:EE:5E:24:CE:87:FB:15:16:BA:EB:57
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5ABB1EC82660F31143ECCE80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5ba3432e-dbfd-355a-9a40-0fd3dd3cac0c.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 104.153.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:bb:1e:c8:26:60:f3:11:43:ec:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=df66631a-05e0-49df-aa7a-719cc18601a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:23:70:3d:38:31:2e:ec:2d:53:a8:19:a2:c8:
da:03:6f:57:cb:7d:8c:0f:4d:af:8f:20:e2:fa:c2:
00:be:c0:4c:17:7c:aa:eb:60:73:e7:fc:7e:bf:93:
b2:00:79:bd:16:60:63:7c:b3:17:92:36:87:cf:48:
a2:a6:4b:ba:05:ab:77:71:71:83:07:b3:37:79:a8:
38:5e:07:19:b9:f0:3e:28:1a:04:61:46:dc:81:28:
f7:58:5b:35:2e:9b:51:f4:1a:98:01:eb:b6:75:03:
96:ae:0d:94:ae:bf:fe:78:c6:9f:fb:5d:ff:dc:05:
26:a6:17:16:9f:57:ca:2e:e6:85:44:0a:b9:a1:7a:
0d:13:f3:8c:d6:77:b4:fc:09:95:2a:83:8b:28:f1:
34:a1:40:56:76:9e:a5:e4:77:5b:b5:54:43:c4:7d:
8f:dd:04:ac:a0:ec:12:72:53:a3:22:52:b1:d3:b0:
6f:d8:a9:2a:d1:c2:7b:cd:15:7f:c7:a7:ef:b2:48:
57:d9:e4:d0:a6:86:84:80:d4:9b:ca:b5:7a:7a:7e:
33:47:60:d3:cc:cf:48:ba:eb:8e:ad:05:4a:19:f8:
53:3e:e4:7a:55:76:9a:f4:95:1b:97:7c:82:b5:0c:
0a:b2:19:1b:43:db:70:21:1f:8d:10:d3:d3:3d:83:
5b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1B:C6:18:99:73:86:55:FC:EE:5E:24:CE:87:FB:15:16:BA:EB:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5ba3432e-dbfd-355a-9a40-0fd3dd3cac0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.153.112.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:c0:c5:cc:57:cb:64:32:c9:b2:a0:48:bf:1d:3e:e7:08:fb:
c6:f2:13:a9:a4:1b:2c:f6:84:a3:64:0a:78:ce:79:03:53:96:
54:1b:b5:ea:06:63:53:c1:ce:76:83:3a:05:a6:ff:d1:55:f9:
22:27:bb:dd:c8:d8:db:15:fd:f6:f8:86:bb:38:9a:73:6e:4f:
1c:3b:16:13:83:6d:39:6c:09:e8:49:10:64:bb:13:27:30:19:
e1:73:05:0c:ad:0e:83:e9:76:b3:10:c8:d1:b6:69:59:e8:ca:
4b:c4:f5:fb:f1:70:b7:aa:ef:5b:a4:fb:18:ed:45:4d:53:fa:
ee:19:e9:7a:7a:6f:77:69:42:0d:36:18:42:84:7a:31:f4:af:
c4:9a:c2:32:81:51:e2:22:d0:44:1c:ef:a6:e7:a2:3e:c6:ad:
76:8e:bf:3e:b0:34:c4:65:0f:ec:ce:31:4a:e4:cd:97:43:a6:
22:aa:f6:58:3b:a0:d3:2b:fb:e5:6a:d2:3c:5d:c3:b2:d3:0f:
96:3a:72:bc:00:31:e3:ec:8d:47:c2:f1:7c:4a:41:4b:97:4e:
7d:77:a2:dd:1f:f0:ef:4f:61:60:0e:28:67:82:c4:aa:3c:1e:
d1:ba:19:d6:ca:05:12:f6:ae:9d:8c:e6:96:bf:95:21:66:ee:
0d:db:78:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1aux7IJmDzEUPszoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGY2NjYzMWEtMDVlMC00OWRmLWFhN2EtNzE5Y2MxODYwMWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyNwPTgxLuwtU6gZosjaA29Xy32MD02vjyDi
+sIAvsBMF3yq62Bz5/x+v5OyAHm9FmBjfLMXkjaHz0iipku6Bat3cXGDB7M3eag4
XgcZufA+KBoEYUbcgSj3WFs1LptR9BqYAeu2dQOWrg2Urr/+eMaf+13/3AUmphcW
n1fKLuaFRAq5oXoNE/OM1ne0/AmVKoOLKPE0oUBWdp6l5HdbtVRDxH2P3QSsoOwS
clOjIlKx07Bv2Kkq0cJ7zRV/x6fvskhX2eTQpoaEgNSbyrV6en4zR2DTzM9IuuuO
rQVKGfhTPuR6VXaa9JUbl3yCtQwKshkbQ9twIR+NENPTPYNbmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNMbxhiZc4ZV/O5eJM6H+xUWuutXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWJhMzQzMmUtZGJmZC0z
NTVhLTlhNDAtMGZkM2RkM2NhYzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaJlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3AxcxXy2QyybKgSL8dPucI+8byE6mkGyz2hKNkCnjOeQNTllQbteoG
Y1PBznaDOgWm/9FV+SInu93I2NsV/fb4hrs4mnNuTxw7FhODbTlsCehJEGS7Eycw
GeFzBQytDoPpdrMQyNG2aVnoykvE9fvxcLeq71uk+xjtRU1T+u4Z6Xp6b3dpQg02
GEKEejH0r8SawjKBUeIi0EQc76bnoj7GrXaOvz6wNMRlD+zOMUrkzZdDpiKq9lg7
oNMr++Vq0jxdw7LTD5Y6crwAMePsjUfC8XxKQUuXTn13ot0f8O9PYWAOKGeCxKo8
HtG6GdbKBRL2rp2M5pa/lSFm7g3bePM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:13 2025 by rpki-client