Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ce791cd-ea50-33ec-b2e5-7b6be861012e.roa
File: 6ce791cd-ea50-33ec-b2e5-7b6be861012e.roa (raw, json)
Hash identifier: knUvYLvY/0oyGvO2XuiP+LiaMLt7G0Rq6IUEA0QTlYI=
Subject key identifier: 98:06:F9:74:67:E6:32:84:44:F4:5D:54:48:F0:F1:D3:15:2A:49:08
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CC9B47B6A9919B4EFAB3630C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ce791cd-ea50-33ec-b2e5-7b6be861012e.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Tue 08 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 164.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c9:b4:7b:6a:99:19:b4:ef:ab:36:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Mar 8 05:00:00 2022 GMT
Subject: CN=f404f7dc-2701-4ef2-9e6b-74ceb11d7075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:ac:10:a6:fd:5e:f7:43:af:9b:59:bc:73:
6c:34:b0:35:e8:94:56:5c:a1:a9:8f:a9:5f:87:5b:
6a:9b:01:7d:93:06:31:ae:a8:4d:3f:67:6d:e6:a3:
c4:e7:c4:8a:8e:a8:6e:e5:ef:93:0f:5e:d9:ff:9c:
3c:a5:66:5d:96:65:fe:02:d9:18:31:cb:58:dc:25:
63:f4:55:c9:45:76:29:22:65:8b:9c:10:1c:77:b0:
d4:07:eb:fb:09:f5:5f:7e:6c:e2:f1:d1:52:61:b2:
78:35:61:ce:8b:f3:55:3b:b4:10:3a:aa:58:0d:ba:
66:54:54:5b:de:67:c0:27:af:50:6d:26:b7:89:a7:
4a:5c:63:87:e1:43:69:8f:6b:b1:a5:43:74:51:27:
53:75:62:41:66:2d:d8:7f:69:f1:87:13:b0:04:04:
b4:5d:19:9a:58:dd:69:5a:9f:d2:b8:8f:22:e8:f0:
89:55:d9:4d:f1:09:b8:c9:3e:b2:40:4c:4b:09:d4:
43:df:ac:7b:4d:4e:c8:14:9f:ae:56:e8:46:f1:f1:
79:6a:2b:f5:d2:37:2e:6f:58:d1:95:86:60:21:c1:
a3:5a:91:4a:d9:0c:2e:6f:55:10:73:95:b2:51:f9:
b0:02:f0:a8:89:3f:c2:b6:85:d6:37:05:25:f6:90:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:06:F9:74:67:E6:32:84:44:F4:5D:54:48:F0:F1:D3:15:2A:49:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6ce791cd-ea50-33ec-b2e5-7b6be861012e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
164.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:92:b1:25:22:25:c7:5c:67:e8:9b:6a:a5:bf:d4:71:cb:9c:
53:ce:ba:af:2a:00:70:9f:17:3e:c4:36:a8:8f:79:2e:07:ed:
5a:86:a1:80:ca:33:fd:c8:7b:51:69:74:6a:f9:c2:d3:e7:6f:
98:07:50:ce:d4:8b:3d:77:54:5d:d4:9f:17:57:a6:d1:a4:a4:
33:54:db:a6:18:2c:60:56:11:e4:52:62:c9:ea:16:cc:7b:cc:
28:d5:9e:bf:63:12:98:31:61:89:4f:7f:20:35:97:8a:d5:f9:
12:a7:a4:85:1c:4a:2d:07:f3:a6:44:e6:1a:d5:fe:31:bf:8b:
d4:c5:30:6e:97:1f:5b:0b:46:99:8b:80:3e:2d:c9:bd:8d:b6:
45:c0:c3:5d:3c:ac:ac:68:67:b5:82:b9:36:e8:c9:dc:fa:e9:
2b:0f:b1:83:51:86:1e:51:a2:ba:a5:e8:90:7f:45:4b:4c:f8:
0d:45:dd:3a:8c:78:4f:cb:c3:61:2e:4f:23:0a:e9:3a:bf:fa:
15:1d:b2:1c:84:c6:1c:f3:b1:aa:05:3a:96:4a:7d:cd:64:9b:
0c:74:8f:37:a8:c5:d7:6a:cc:19:06:52:90:cc:4e:cf:1a:d8:
b9:73:ed:8f:dd:3f:35:f5:27:4f:61:35:8e:21:f9:a0:86:eb:
f8:ef:94:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzJtHtqmRm076s2MMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIwMTA1MDAwMFoXDTIyMDMwODA1MDAwMFowLzEtMCsGA1UEAxMk
ZjQwNGY3ZGMtMjcwMS00ZWYyLTllNmItNzRjZWIxMWQ3MDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBasEKb9XvdDr5tZvHNsNLA16JRWXKGpj6lf
h1tqmwF9kwYxrqhNP2dt5qPE58SKjqhu5e+TD17Z/5w8pWZdlmX+AtkYMctY3CVj
9FXJRXYpImWLnBAcd7DUB+v7CfVffmzi8dFSYbJ4NWHOi/NVO7QQOqpYDbpmVFRb
3mfAJ69QbSa3iadKXGOH4UNpj2uxpUN0USdTdWJBZi3Yf2nxhxOwBAS0XRmaWN1p
Wp/SuI8i6PCJVdlN8Qm4yT6yQExLCdRD36x7TU7IFJ+uVuhG8fF5aiv10jcub1jR
lYZgIcGjWpFK2Qwub1UQc5WyUfmwAvCoiT/CtoXWNwUl9pD1wQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJgG+XRn5jKERPRdVEjw8dMVKkkIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNmNlNzkxY2QtZWE1MC0z
M2VjLWIyZTUtN2I2YmU4NjEwMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApKgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAppKxJSIlx1xn6Jtqpb/UccucU866ryoAcJ8XPsQ2qI95LgftWoahgMoz
/ch7UWl0avnC0+dvmAdQztSLPXdUXdSfF1em0aSkM1TbphgsYFYR5FJiyeoWzHvM
KNWev2MSmDFhiU9/IDWXitX5EqekhRxKLQfzpkTmGtX+Mb+L1MUwbpcfWwtGmYuA
Pi3JvY22RcDDXTysrGhntYK5NujJ3PrpKw+xg1GGHlGiuqXokH9FS0z4DUXdOox4
T8vDYS5PIwrpOr/6FR2yHITGHPOxqgU6lkp9zWSbDHSPN6jF12rMGQZSkMxOzxrY
uXPtj90/NfUnT2E1jiH5oIbr+O+UUw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:09 2025 by rpki-client