Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5df78c51-2b86-3920-bb8d-b25a25afa9da.roa
File: 5df78c51-2b86-3920-bb8d-b25a25afa9da.roa (raw, json)
Hash identifier: +u0giPoUVemzxUwbb24vTictfkhqxzTNMPFceQy7KNc=
Subject key identifier: 0B:57:9F:9C:87:24:B8:E5:8A:6D:BF:56:CA:71:7D:C0:64:55:AD:03
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F31399265D0D3F9364DE5EE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5df78c51-2b86-3920-bb8d-b25a25afa9da.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 198.99.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:31:39:92:65:d0:d3:f9:36:4d:e5:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=24359a1d-4e1e-4d4d-bb3f-587abdabdbc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:7e:87:f1:2b:f1:98:75:cc:31:b8:22:7d:
a9:17:63:a7:1f:0f:97:40:b8:61:6e:1d:b5:b3:37:
01:e7:42:14:7e:3d:74:a8:64:33:e6:8e:f3:17:89:
0e:8d:13:ed:19:3d:7e:d4:de:d7:e5:16:bc:9b:ff:
b5:d2:38:af:28:25:00:7a:28:1f:73:6b:9a:fa:53:
6b:41:2e:75:a7:37:69:fc:51:bb:50:26:61:12:97:
21:98:e2:86:41:c6:ab:b0:1e:c1:af:a6:d4:03:ef:
14:34:ab:a4:32:dc:f1:5f:fc:82:b4:6f:9f:f9:63:
aa:fd:21:b5:46:52:77:62:d5:da:64:37:54:51:80:
00:94:9f:8f:88:88:e7:f7:74:87:4c:e4:c2:35:d0:
c8:0f:8e:91:f8:be:cd:1b:2d:84:90:53:37:a9:4d:
63:5a:ad:01:46:e2:f9:74:f5:34:25:e9:8a:77:17:
f9:c2:e1:c8:a3:58:46:7f:c1:4f:e0:a4:b2:89:3b:
2a:98:6e:54:e3:e9:39:8e:bb:df:83:57:35:8a:bb:
b8:0b:e6:0a:ab:61:82:c3:99:87:33:95:dd:67:db:
d0:90:f4:02:1d:c2:eb:e8:ee:1b:0b:79:d3:59:54:
15:4c:a9:16:07:b0:60:4c:17:23:77:b0:37:86:a9:
e5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:57:9F:9C:87:24:B8:E5:8A:6D:BF:56:CA:71:7D:C0:64:55:AD:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5df78c51-2b86-3920-bb8d-b25a25afa9da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:c6:a7:9c:6a:4c:a9:fb:12:88:35:54:55:30:a1:23:c4:d3:
5a:bb:ff:b4:3d:9e:4e:b1:f7:d1:b8:ed:9d:51:44:c1:75:f7:
9d:f0:f3:e9:f6:fc:2c:8d:fe:4a:14:61:8b:e0:4a:7a:58:6a:
84:b3:e7:9d:fe:f5:bc:cb:96:41:d9:d3:ca:56:e7:c1:58:79:
fe:e6:a5:0b:52:8e:af:d4:a1:07:0d:f3:19:aa:05:15:d5:28:
3c:bf:57:84:a9:34:90:46:19:42:7c:fe:db:d8:96:5e:7b:3d:
f9:3f:36:93:9e:c8:c5:4c:27:c8:ba:62:f2:0c:56:4d:4d:92:
31:16:e1:85:c3:9b:d8:fa:8e:cd:5f:73:41:d6:b8:28:c4:9a:
4e:80:bf:9e:00:8a:74:a7:25:6b:a9:6d:7d:a1:45:17:5e:ed:
bb:3a:3f:a2:61:87:85:1d:84:64:b2:19:13:18:9e:e1:f6:8c:
5a:8b:5f:f1:13:f6:df:4b:0e:3f:14:7c:82:40:7a:90:81:6b:
cc:e8:5b:d2:dc:06:7f:50:6c:ff:df:8f:2b:ef:e5:fd:19:f1:
70:87:08:12:9f:85:f2:4a:09:fd:f6:6f:bd:10:5e:41:51:4f:
cd:03:9a:55:0c:35:53:0f:f1:69:d6:df:b1:58:6f:1a:7c:03:
8d:15:8f:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8xOZJl0NP5Nk3l7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkwOTEyMDAwMFoXDTIyMTAxNTA0MDAwMFowLzEtMCsGA1UEAxMk
MjQzNTlhMWQtNGUxZS00ZDRkLWJiM2YtNTg3YWJkYWJkYmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqp+h/Er8Zh1zDG4In2pF2OnHw+XQLhhbh21
szcB50IUfj10qGQz5o7zF4kOjRPtGT1+1N7X5Ra8m/+10jivKCUAeigfc2ua+lNr
QS51pzdp/FG7UCZhEpchmOKGQcarsB7Br6bUA+8UNKukMtzxX/yCtG+f+WOq/SG1
RlJ3YtXaZDdUUYAAlJ+PiIjn93SHTOTCNdDID46R+L7NGy2EkFM3qU1jWq0BRuL5
dPU0JemKdxf5wuHIo1hGf8FP4KSyiTsqmG5U4+k5jrvfg1c1iru4C+YKq2GCw5mH
M5XdZ9vQkPQCHcLr6O4bC3nTWVQVTKkWB7BgTBcjd7A3hqnl9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAtXn5yHJLjlim2/VspxfcBkVa0DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWRmNzhjNTEtMmI4Ni0z
OTIwLWJiOGQtYjI1YTI1YWZhOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmMDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE3Gp5xqTKn7Eog1VFUwoSPE01q7/7Q9nk6x99G47Z1RRMF1953w8+n2
/CyN/koUYYvgSnpYaoSz553+9bzLlkHZ08pW58FYef7mpQtSjq/UoQcN8xmqBRXV
KDy/V4SpNJBGGUJ8/tvYll57Pfk/NpOeyMVMJ8i6YvIMVk1NkjEW4YXDm9j6js1f
c0HWuCjEmk6Av54AinSnJWupbX2hRRde7bs6P6Jhh4UdhGSyGRMYnuH2jFqLX/ET
9t9LDj8UfIJAepCBa8zoW9LcBn9QbP/fjyvv5f0Z8XCHCBKfhfJKCf32b70QXkFR
T80DmlUMNVMP8WnW37FYbxp8A40Vj14=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:12 2025 by rpki-client