Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5ce4b206-f4e8-3093-ad46-4d4a788d4e37.roa
File: 5ce4b206-f4e8-3093-ad46-4d4a788d4e37.roa (raw, json)
Hash identifier: 1TmwuksxWQqlDqNZQnfWaQW+Ex4fZBi9RWZK6dzjp9s=
Subject key identifier: 0A:27:58:C4:E0:79:6C:8B:23:45:3A:1D:E7:FF:3E:B1:D8:3E:F0:D8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F9C1FDF9D8F3FD800A8542C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5ce4b206-f4e8-3093-ad46-4d4a788d4e37.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 151.148.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9c:1f:df:9d:8f:3f:d8:00:a8:54:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=e46dda00-dc74-4149-a804-75f91bc101c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:87:6e:91:c3:ef:f0:11:c0:42:cc:1f:8b:a9:
ad:2e:3f:ad:a7:f0:fe:03:07:67:1b:95:03:b7:06:
fc:8e:af:b8:71:22:f6:60:7d:7f:4b:c8:7b:cd:7e:
2d:11:89:4c:d0:fd:75:4f:21:e8:93:53:07:21:95:
01:4c:ad:a7:99:9d:65:49:4c:e3:94:9f:c4:b9:07:
c4:80:11:ee:e2:48:9b:56:5a:e1:91:7f:ed:73:9d:
d1:24:16:b5:16:cd:9f:82:4c:e8:4d:a3:b3:f1:69:
8e:32:35:d3:21:03:b1:77:1c:71:c5:ad:69:1f:1d:
a3:ac:41:4a:da:06:d2:99:39:13:2f:6c:f6:bb:5e:
d9:25:cf:98:19:0c:e8:b3:44:05:11:bb:3c:40:85:
2d:39:48:84:46:da:4f:8b:fa:21:98:e3:60:7c:d3:
1e:ea:b3:08:34:16:83:bb:bd:79:80:40:fa:81:79:
41:0a:71:45:4d:49:a2:20:51:2a:d0:f0:94:a3:ff:
cf:1f:c4:1e:9d:1d:98:f1:2d:35:2e:45:5b:93:47:
24:2a:86:ae:83:f2:d3:72:02:30:4c:08:09:71:45:
53:16:b1:40:f4:2e:75:04:ff:6f:1b:29:f7:11:37:
7c:a5:76:13:ae:77:19:46:f1:a8:28:bb:98:25:16:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:27:58:C4:E0:79:6C:8B:23:45:3A:1D:E7:FF:3E:B1:D8:3E:F0:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5ce4b206-f4e8-3093-ad46-4d4a788d4e37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.148.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:0f:d4:87:4c:8f:06:5c:3e:5f:6f:4a:db:62:08:86:02:75:
22:cb:11:95:ab:d6:ea:72:1c:01:68:e6:8e:dd:5a:7f:8a:aa:
a8:ff:3c:b9:c7:f3:3b:cc:0e:b6:83:06:6f:5d:b2:61:b1:21:
f4:1a:8b:4e:91:cc:19:76:8d:49:6b:78:05:a4:d2:f4:ef:32:
aa:a5:0f:2d:0a:a2:41:cf:62:8b:55:4d:7c:36:45:08:22:fa:
69:8c:e0:34:18:15:e9:a5:6b:0c:20:f8:b3:fc:17:47:03:58:
08:e3:7b:26:74:8c:83:49:24:43:db:5d:0d:dc:cc:85:2c:0b:
a4:66:2f:c5:e8:69:9e:ee:07:df:91:ee:e6:ce:86:08:73:0c:
ed:6c:58:5f:18:7b:66:66:ff:a0:a7:32:ff:b4:1a:14:95:5f:
34:f3:6b:ca:0b:7a:d6:e6:27:51:a6:b4:da:c9:c8:b7:b7:f1:
c8:df:4a:12:e3:87:ff:9f:7a:85:e0:23:a8:97:62:47:ad:46:
21:8a:17:49:86:8f:00:86:3e:24:93:62:1d:12:da:30:db:22:
4e:b5:04:e9:8e:20:ab:9b:06:d0:e2:88:85:86:c0:74:dc:71:
69:fc:1d:fd:76:75:ee:4e:2c:d3:05:dd:91:ab:85:5d:61:5d:
d0:89:6b:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+cH9+djz/YAKhULIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxNzEyMDAwMFoXDTIyMTEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZTQ2ZGRhMDAtZGM3NC00MTQ5LWE4MDQtNzVmOTFiYzEwMWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtodukcPv8BHAQswfi6mtLj+tp/D+AwdnG5UD
twb8jq+4cSL2YH1/S8h7zX4tEYlM0P11TyHok1MHIZUBTK2nmZ1lSUzjlJ/EuQfE
gBHu4kibVlrhkX/tc53RJBa1Fs2fgkzoTaOz8WmOMjXTIQOxdxxxxa1pHx2jrEFK
2gbSmTkTL2z2u17ZJc+YGQzos0QFEbs8QIUtOUiERtpPi/ohmONgfNMe6rMINBaD
u715gED6gXlBCnFFTUmiIFEq0PCUo//PH8QenR2Y8S01LkVbk0ckKoaug/LTcgIw
TAgJcUVTFrFA9C51BP9vGyn3ETd8pXYTrncZRvGoKLuYJRY5IQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAonWMTgeWyLI0U6Hef/PrHYPvDYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWNlNGIyMDYtZjRlOC0z
MDkzLWFkNDYtNGQ0YTc4OGQ0ZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHl5SAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI8P1IdMjwZcPl9vSttiCIYCdSLLEZWr1upyHAFo5o7dWn+Kqqj/PLnH
8zvMDraDBm9dsmGxIfQai06RzBl2jUlreAWk0vTvMqqlDy0KokHPYotVTXw2RQgi
+mmM4DQYFemlawwg+LP8F0cDWAjjeyZ0jINJJEPbXQ3czIUsC6RmL8XoaZ7uB9+R
7ubOhghzDO1sWF8Ye2Zm/6CnMv+0GhSVXzTza8oLetbmJ1GmtNrJyLe38cjfShLj
h/+feoXgI6iXYketRiGKF0mGjwCGPiSTYh0S2jDbIk61BOmOIKubBtDiiIWGwHTc
cWn8Hf12de5OLNMF3ZGrhV1hXdCJa/w=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:45 2025 by rpki-client