Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f111ad4-c8f0-3e3f-b364-14791cd20608.roa
File: 6f111ad4-c8f0-3e3f-b364-14791cd20608.roa (raw, json)
Hash identifier: OY9o43TPQLHB93z4TlxI1Mg+W2615lq6BcQJ9e5XA4c=
Subject key identifier: 48:82:7C:BE:FA:82:33:1B:65:45:6B:86:33:18:64:1D:B5:E7:2F:FE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF04895AA14CA2D671FE8F400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f111ad4-c8f0-3e3f-b364-14791cd20608.roa
Signing time: Wed 16 Nov 2022 12:00:00 +0000
ROA not before: Wed 16 Nov 2022 12:00:00 +0000
ROA not after: Thu 22 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 153.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f0:48:95:aa:14:ca:2d:67:1f:e8:f4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 16 12:00:00 2022 GMT
Not After : Dec 22 05:00:00 2022 GMT
Subject: CN=38a07605-0969-4216-b61d-355c30ca7391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2a:b8:f5:44:07:ac:e4:2f:67:40:2b:f9:79:
1c:41:17:0c:bc:90:13:30:12:70:3c:36:59:16:6e:
d1:78:6c:3d:ac:be:45:1d:28:c8:57:e7:f9:e0:1f:
f4:35:85:b0:b7:5e:3a:d2:65:7f:ac:c0:51:97:ef:
b2:71:18:5e:ee:fd:0d:ea:81:46:e4:d0:64:31:1e:
b1:a8:ae:ce:42:b1:81:a6:73:f4:18:8d:65:7e:03:
ff:b4:96:be:a2:d8:9e:14:d7:02:b1:fa:db:0a:1e:
3f:b9:18:92:4a:dc:af:59:28:5f:82:4b:79:f5:b9:
b2:64:eb:78:f1:57:9c:da:f4:7a:79:cf:8c:74:9a:
09:fa:3f:d4:27:cd:94:e4:68:56:6c:95:eb:5a:d1:
e9:70:80:f8:7a:fa:cc:37:5c:8a:f0:19:38:29:9a:
46:08:e9:59:2c:dd:1c:cf:5e:24:35:e6:09:52:18:
34:7a:7a:2d:9e:e5:49:8c:47:f6:0b:ed:8e:fc:f2:
55:50:fe:66:db:8e:9e:0f:45:96:ca:18:65:ff:a1:
ab:89:2e:0b:b2:ee:08:3a:78:db:e5:9f:8a:1c:d7:
eb:b9:3c:c8:f6:28:c8:44:84:19:f4:e1:85:9a:87:
0d:d7:15:56:8a:21:37:30:79:1d:1f:2c:58:53:6e:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:82:7C:BE:FA:82:33:1B:65:45:6B:86:33:18:64:1D:B5:E7:2F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6f111ad4-c8f0-3e3f-b364-14791cd20608.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
153.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:ec:b1:54:0c:8b:0b:93:39:04:9b:91:d7:f0:ad:26:b4:9c:
fa:94:ce:3d:ad:cf:7a:cd:1b:a4:f9:1c:9c:67:92:86:fe:5c:
80:3c:6f:74:85:c9:54:28:57:95:93:16:1a:ad:ce:e2:5f:98:
b9:0a:35:56:3e:b3:c3:44:77:8f:ec:67:ac:eb:2b:ca:3b:98:
69:9b:99:39:dd:36:f3:cd:a8:0f:eb:7e:45:b7:3e:0f:94:02:
af:4a:9d:83:8b:e5:c0:6a:00:84:ad:61:c2:c5:e0:82:18:ef:
b5:07:c5:d7:07:d3:cc:9c:54:6d:73:b5:45:c9:14:2c:37:d9:
65:3b:bd:30:01:d4:ae:d3:3f:81:3f:49:2e:c8:27:d2:19:73:
97:49:43:58:41:a4:20:92:69:d5:01:8a:5d:e3:8d:38:08:9a:
03:b5:0c:da:da:0e:5f:ae:48:02:3c:37:94:a6:b7:a3:88:53:
f2:0f:81:0c:46:60:51:3c:dd:53:ba:dd:8e:04:51:82:ac:9a:
37:b6:af:24:9e:74:d4:3e:2f:15:1f:97:90:47:d8:18:1a:53:
22:e6:14:af:f9:1d:04:81:3d:c1:b1:29:42:07:1a:94:9d:75:
3e:4a:ad:6d:25:3c:cb:dd:74:e3:ce:10:f1:27:ba:fc:79:bb:
2e:34:5f:e1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/wSJWqFMotZx/o9AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNjEyMDAwMFoXDTIyMTIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
MzhhMDc2MDUtMDk2OS00MjE2LWI2MWQtMzU1YzMwY2E3MzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyq49UQHrOQvZ0Ar+XkcQRcMvJATMBJwPDZZ
Fm7ReGw9rL5FHSjIV+f54B/0NYWwt1460mV/rMBRl++ycRhe7v0N6oFG5NBkMR6x
qK7OQrGBpnP0GI1lfgP/tJa+otieFNcCsfrbCh4/uRiSStyvWShfgkt59bmyZOt4
8Vec2vR6ec+MdJoJ+j/UJ82U5GhWbJXrWtHpcID4evrMN1yK8Bk4KZpGCOlZLN0c
z14kNeYJUhg0enotnuVJjEf2C+2O/PJVUP5m246eD0WWyhhl/6GriS4Lsu4IOnjb
5Z+KHNfruTzI9ijIRIQZ9OGFmocN1xVWiiE3MHkdHyxYU24yiwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEiCfL76gjMbZUVrhjMYZB215y/+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNmYxMTFhZDQtYzhmMC0z
ZTNmLWIzNjQtMTQ3OTFjZDIwNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmS8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAh+yxVAyLC5M5BJuR1/CtJrSc+pTOPa3Pes0bpPkcnGeShv5cgDxvdIXJ
VChXlZMWGq3O4l+YuQo1Vj6zw0R3j+xnrOsryjuYaZuZOd02882oD+t+Rbc+D5QC
r0qdg4vlwGoAhK1hwsXgghjvtQfF1wfTzJxUbXO1RckULDfZZTu9MAHUrtM/gT9J
Lsgn0hlzl0lDWEGkIJJp1QGKXeONOAiaA7UM2toOX65IAjw3lKa3o4hT8g+BDEZg
UTzdU7rdjgRRgqyaN7avJJ501D4vFR+XkEfYGBpTIuYUr/kdBIE9wbEpQgcalJ11
PkqtbSU8y910484Q8Se6/Hm7LjRf4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:33 2025 by rpki-client