Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/646efdc2-7c3b-31e3-bacd-da5d3aa0404c.roa
File: 646efdc2-7c3b-31e3-bacd-da5d3aa0404c.roa (raw, json)
Hash identifier: ZwbmBHk7C2LQZ3G1kOy4/HURvfzNrKaTqF8AfdzsPAI=
Subject key identifier: 97:21:A5:5C:6E:52:B8:7F:9A:14:F1:8C:BD:7A:20:42:16:1E:B2:50
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F8938D3E2632B31035FCFE880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/646efdc2-7c3b-31e3-bacd-da5d3aa0404c.roa
Signing time: Mon 10 Oct 2022 15:51:07 +0000
ROA not before: Mon 10 Oct 2022 15:51:07 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 40.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:89:38:d3:e2:63:2b:31:03:5f:cf:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 10 15:51:07 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=5f1d47d3-ff5d-4c67-b982-9bfc94b5677d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:34:ef:12:9c:c7:cd:ce:32:4d:3b:6b:dd:
8e:0c:ab:a2:92:40:e4:29:7d:e2:c0:db:83:ee:ef:
f1:1f:4e:4d:64:30:df:f0:22:1a:42:8a:f9:91:09:
cd:48:0b:b6:2f:5c:64:54:19:8a:6e:10:bf:47:38:
02:90:47:e4:90:8d:04:47:5c:6c:d1:c3:90:10:f3:
69:c2:e5:ea:f9:1e:a5:da:d2:88:5a:68:30:98:4a:
d8:a7:3a:e7:ae:e9:d7:cc:c5:46:2c:2c:81:61:9c:
0a:d0:4a:28:f7:5e:22:8f:f4:00:b7:8e:fe:ac:02:
9f:63:74:bf:dc:be:4f:3b:93:9b:5e:c7:ba:d0:d1:
cf:1b:64:74:a0:35:54:9d:23:ba:d3:5f:4c:9f:35:
96:93:ac:f3:bb:3c:ee:f6:81:08:89:7f:be:18:12:
e2:cb:c1:e1:50:d5:69:49:e1:00:2f:14:8e:d8:83:
00:6e:06:c9:c0:ab:2a:94:e9:03:75:47:93:84:94:
08:40:31:6f:71:d4:48:1b:51:ff:42:1d:24:cd:bd:
2a:9b:a5:74:eb:6c:61:8e:25:72:9f:c2:79:7d:23:
c7:ad:de:6a:e2:57:d6:86:21:60:85:da:86:e0:70:
0f:03:16:55:d1:aa:2e:8d:15:76:70:16:2b:71:29:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:21:A5:5C:6E:52:B8:7F:9A:14:F1:8C:BD:7A:20:42:16:1E:B2:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/646efdc2-7c3b-31e3-bacd-da5d3aa0404c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:87:48:c7:67:67:53:22:74:a7:ad:20:80:61:57:d4:9a:c7:
cc:38:29:78:96:f1:18:ab:d8:1c:c0:b6:c4:87:5c:44:9c:ad:
d6:b1:e5:08:a3:e9:8d:f3:2a:1c:29:d3:c9:a0:9a:20:70:30:
e8:f9:1e:07:9c:26:92:46:7e:e9:b3:60:6d:ec:01:91:ee:d8:
31:d2:83:dc:29:ef:57:24:2e:76:48:6b:1a:e5:c6:52:d7:58:
20:d5:b5:de:1e:f6:53:da:46:9d:5a:24:f3:cd:59:e0:28:0a:
ca:fa:25:5d:24:be:c2:b2:cd:23:88:f6:93:b7:cf:3a:af:73:
23:20:f9:d0:90:2f:c6:7f:e1:9d:95:32:5a:3f:91:07:f2:08:
c3:43:e8:fe:65:b2:00:99:ae:9c:a5:06:d4:4f:c2:a2:62:3a:
21:da:83:99:d6:d7:98:91:0a:7c:5f:4a:b5:78:4a:0f:c0:f1:
ff:f7:15:ba:7a:8f:ba:1f:71:e5:ea:e3:65:a4:f4:a8:52:a3:
e8:7b:26:92:67:d6:81:d7:b9:b5:2e:4c:19:59:1c:88:38:f2:
9c:a6:ac:7f:d9:1a:3b:75:b2:dd:88:4e:26:81:4b:80:78:42:
36:88:47:6f:c5:9f:f4:d3:dd:0f:8f:30:14:e2:a8:f2:ba:aa:
9e:32:8c:f9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+JONPiYysxA1/P6IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxMDE1NTEwN1oXDTIyMTExNTA1MDAwMFowLzEtMCsGA1UEAxMk
NWYxZDQ3ZDMtZmY1ZC00YzY3LWI5ODItOWJmYzk0YjU2NzdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSI07xKcx83OMk07a92ODKuikkDkKX3iwNuD
7u/xH05NZDDf8CIaQor5kQnNSAu2L1xkVBmKbhC/RzgCkEfkkI0ER1xs0cOQEPNp
wuXq+R6l2tKIWmgwmErYpzrnrunXzMVGLCyBYZwK0Eoo914ij/QAt47+rAKfY3S/
3L5PO5ObXse60NHPG2R0oDVUnSO6019MnzWWk6zzuzzu9oEIiX++GBLiy8HhUNVp
SeEALxSO2IMAbgbJwKsqlOkDdUeThJQIQDFvcdRIG1H/Qh0kzb0qm6V062xhjiVy
n8J5fSPHrd5q4lfWhiFghdqG4HAPAxZV0aoujRV2cBYrcSlzlQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJchpVxuUrh/mhTxjL16IEIWHrJQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjQ2ZWZkYzItN2MzYi0z
MWUzLWJhY2QtZGE1ZDNhYTA0MDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVodIx2dnUyJ0p60ggGFX1JrHzDgpeJbxGKvYHMC2xIdcRJyt1rHlCKPp
jfMqHCnTyaCaIHAw6PkeB5wmkkZ+6bNgbewBke7YMdKD3CnvVyQudkhrGuXGUtdY
INW13h72U9pGnVok881Z4CgKyvolXSS+wrLNI4j2k7fPOq9zIyD50JAvxn/hnZUy
Wj+RB/IIw0Po/mWyAJmunKUG1E/ComI6IdqDmdbXmJEKfF9KtXhKD8Dx//cVunqP
uh9x5erjZaT0qFKj6HsmkmfWgde5tS5MGVkciDjynKasf9kaO3Wy3YhOJoFLgHhC
NohHb8Wf9NPdD48wFOKo8rqqnjKM+Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:18 2025 by rpki-client