Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6401fc43-b7af-3ef7-821a-deadea4315de.roa
File: 6401fc43-b7af-3ef7-821a-deadea4315de.roa (raw, json)
Hash identifier: baXLO4Igp9GZeMeW6VsXIswX23pBXYuRyJTFkO9MzY4=
Subject key identifier: 36:AA:C1:C8:95:DD:BA:65:6A:EF:6D:75:C6:ED:49:61:50:C5:E5:55
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D437D2495E49A6240D7E7280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6401fc43-b7af-3ef7-821a-deadea4315de.roa
Signing time: Mon 06 Feb 2023 12:00:00 +0000
ROA not before: Mon 06 Feb 2023 12:00:00 +0000
ROA not after: Tue 14 Mar 2023 04:00:00 +0000
asID: 8987
IP address blocks: 129.30.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d4:37:d2:49:5e:49:a6:24:0d:7e:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 6 12:00:00 2023 GMT
Not After : Mar 14 04:00:00 2023 GMT
Subject: CN=2a795ff7-dd58-4b07-8380-783c6db28c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:71:12:1b:8f:8f:c3:6e:94:50:b7:58:d6:
9c:6c:f4:1e:b2:8d:17:4b:66:de:94:91:ab:3c:84:
b4:73:2b:c1:fe:07:53:29:fb:e6:90:8a:0e:e5:36:
b3:25:34:c8:4a:f5:51:2f:d4:a7:f1:b0:e8:40:eb:
92:ee:f5:60:a4:36:62:d6:05:6f:d1:23:99:13:f6:
d6:36:c2:42:08:a5:b3:df:0a:96:21:e7:d0:e4:5b:
87:8c:bf:c6:a1:95:b6:cc:c3:bc:76:35:53:4d:be:
29:b0:8b:19:08:b5:8c:27:be:bd:0b:57:10:32:3e:
20:3d:39:3f:dd:f1:62:52:e1:2e:0e:85:b9:07:de:
3f:b1:86:5e:8d:b3:e5:a3:00:cb:44:2b:18:a7:ac:
e2:a4:eb:be:05:b0:8c:8e:a3:c9:f1:5d:dc:ed:22:
7b:bf:09:ab:99:28:80:a4:3d:09:d1:f9:80:cd:99:
3b:ab:79:af:31:07:f4:96:2e:b5:28:26:8f:ff:1b:
22:5c:10:6c:ad:0f:38:9d:60:9c:01:d6:48:25:a4:
9c:00:29:6d:c2:74:b4:fb:86:eb:c9:b8:c2:18:58:
24:70:95:6d:79:83:f0:b5:ca:d9:2f:a6:e7:cb:7f:
0d:c2:c4:76:6e:e7:a0:ca:1c:54:10:b2:06:1d:1e:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:AA:C1:C8:95:DD:BA:65:6A:EF:6D:75:C6:ED:49:61:50:C5:E5:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6401fc43-b7af-3ef7-821a-deadea4315de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.30.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:9d:63:ea:51:ed:bb:d2:54:56:c7:76:ab:6c:4e:aa:23:3e:
de:6e:2e:24:f2:57:4e:0e:cb:92:4e:a8:3b:4b:fa:67:ae:10:
46:1c:34:8a:14:de:db:72:13:72:37:6c:d5:f7:77:85:e4:32:
2d:01:db:b4:d7:68:3b:49:75:07:20:06:c5:11:99:61:be:84:
16:b8:78:8e:2a:df:d6:5c:42:39:34:f7:8a:e2:b6:56:7d:56:
de:2b:9c:96:d3:4a:39:df:53:c2:4a:8a:04:a9:19:14:2a:5f:
0a:2d:db:10:01:22:4e:f4:17:60:6e:5e:cb:78:17:b5:8a:a8:
7c:8b:80:f5:67:6b:bd:ab:e8:bf:37:1a:57:71:72:58:0d:ae:
c3:9f:01:44:e2:94:ab:58:75:5e:4f:f5:1c:58:21:b1:0c:7c:
d3:d8:1f:08:71:7a:99:86:e4:93:6f:6d:a8:88:62:ee:24:1e:
17:36:4d:67:8f:4f:29:8f:62:aa:e5:68:69:3d:8d:57:48:12:
76:b5:d6:f2:24:1c:bf:20:5d:6d:04:1f:95:71:ce:bd:0a:1f:
1b:97:b9:c6:44:2d:5a:09:91:38:d7:7f:2a:d2:55:b6:6c:5d:
f7:9a:ae:51:3b:88:9a:51:27:b0:90:a4:b6:34:a5:bf:b2:e9:
ce:9c:93:f8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDUN9JJXkmmJA1+coAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDIwNjEyMDAwMFoXDTIzMDMxNDA0MDAwMFowLzEtMCsGA1UEAxMk
MmE3OTVmZjctZGQ1OC00YjA3LTgzODAtNzgzYzZkYjI4YzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYFxEhuPj8NulFC3WNacbPQeso0XS2belJGr
PIS0cyvB/gdTKfvmkIoO5TazJTTISvVRL9Sn8bDoQOuS7vVgpDZi1gVv0SOZE/bW
NsJCCKWz3wqWIefQ5FuHjL/GoZW2zMO8djVTTb4psIsZCLWMJ769C1cQMj4gPTk/
3fFiUuEuDoW5B94/sYZejbPlowDLRCsYp6zipOu+BbCMjqPJ8V3c7SJ7vwmrmSiA
pD0J0fmAzZk7q3mvMQf0li61KCaP/xsiXBBsrQ84nWCcAdZIJaScACltwnS0+4br
ybjCGFgkcJVteYPwtcrZL6bny38NwsR2buegyhxUELIGHR6EkQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDaqwciV3bplau9tdcbtSWFQxeVVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjQwMWZjNDMtYjdhZi0z
ZWY3LTgyMWEtZGVhZGVhNDMxNWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgR4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACZ1j6lHtu9JUVsd2q2xOqiM+3m4uJPJXTg7Lkk6oO0v6Z64QRhw0ihTe
23ITcjds1fd3heQyLQHbtNdoO0l1ByAGxRGZYb6EFrh4jirf1lxCOTT3iuK2Vn1W
3iucltNKOd9TwkqKBKkZFCpfCi3bEAEiTvQXYG5ey3gXtYqofIuA9Wdrvavovzca
V3FyWA2uw58BROKUq1h1Xk/1HFghsQx809gfCHF6mYbkk29tqIhi7iQeFzZNZ49P
KY9iquVoaT2NV0gSdrXW8iQcvyBdbQQflXHOvQofG5e5xkQtWgmRONd/KtJVtmxd
95quUTuImlEnsJCktjSlv7LpzpyT+A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:14 2025 by rpki-client