Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/713415a5-4565-3855-8d0e-5a9c253274ba.roa
File: 713415a5-4565-3855-8d0e-5a9c253274ba.roa (raw, json)
Hash identifier: kw1N49si6D7q8+Orcko2Ait5X58Kbi5GcdfYLTIS77U=
Subject key identifier: 90:8B:FD:D9:60:32:1C:15:04:CB:B8:AD:29:C4:97:9B:97:C2:B6:6A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDC4E571E2538AAEAA9940200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/713415a5-4565-3855-8d0e-5a9c253274ba.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 128.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:dc:4e:57:1e:25:38:aa:ea:a9:94:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=5f24b625-ad67-428b-bbfc-7e7b1db3a80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:3b:95:6d:66:b2:c8:af:99:f3:5e:8c:84:
fd:57:c9:ab:44:f7:e3:98:2b:5a:a5:32:65:c8:55:
e2:70:61:9c:ed:de:6f:1c:de:b7:98:44:bc:33:0d:
6f:e9:cf:e2:0b:1e:e0:10:b5:c7:7a:08:13:ab:1f:
6c:78:26:5b:25:1d:01:10:6d:b8:1a:49:8a:00:60:
fe:58:4d:a0:c8:fe:60:d7:3c:e9:ce:b7:3e:c6:d9:
ff:d0:e4:b8:8c:9f:1c:3c:ec:b9:e6:39:14:88:2d:
8f:63:35:21:89:e7:bb:05:b5:7e:76:f2:d5:0d:39:
c1:ed:dc:ec:70:1a:19:3d:b2:3c:15:ea:48:38:6a:
11:ec:9c:4d:65:98:3b:e1:f6:42:8b:33:20:58:57:
1a:14:22:b4:2e:07:07:19:71:b9:e6:32:7a:cc:57:
9e:80:c0:ea:a3:6b:58:f8:6f:b5:4c:5f:be:b0:26:
28:84:d0:db:ee:f0:81:7f:f3:fc:8a:9d:33:88:72:
3c:9b:7c:5b:03:c3:60:ac:fd:99:cb:c9:5a:ed:3e:
e9:b7:53:e9:68:1a:89:2b:e4:84:ab:d2:3f:73:3a:
f2:0c:01:aa:21:7f:ec:c4:b2:14:e4:b3:48:46:05:
96:a7:a1:09:32:41:42:fd:17:0b:6e:ce:12:74:11:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:8B:FD:D9:60:32:1C:15:04:CB:B8:AD:29:C4:97:9B:97:C2:B6:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/713415a5-4565-3855-8d0e-5a9c253274ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:fa:74:ae:be:15:6e:19:a6:94:20:47:4c:16:5f:cd:bc:6c:
7c:47:57:88:f2:b5:1e:6b:a7:4c:31:63:c7:ac:49:15:7d:63:
16:94:ac:78:a1:ab:c0:99:10:54:34:c0:93:17:a8:41:9d:82:
ae:5d:58:47:a4:c9:79:05:1d:5c:f3:74:2e:bb:f2:46:b8:69:
18:55:3a:ff:25:a8:e8:31:f2:15:dd:02:41:80:d9:92:98:23:
90:d7:c0:d2:83:8f:d3:d4:32:f1:93:97:75:05:89:e8:bc:ac:
e1:c7:fb:45:f4:b9:d0:8b:26:2c:cf:f9:e7:89:98:d1:c2:05:
8f:b8:5c:6c:2c:6f:86:5e:e0:4e:28:08:f4:7d:d5:a2:2f:2a:
e0:35:e7:aa:e0:21:66:f9:08:59:a5:13:29:0b:54:ca:96:ee:
9b:96:0e:4b:8b:4b:4a:f9:27:38:93:5a:8e:66:37:22:4a:6f:
d5:a4:54:a6:c0:71:1f:ef:e5:a7:44:21:56:52:83:e4:95:f6:
92:58:52:99:7d:e6:00:29:57:db:7e:dd:a2:4e:0c:14:19:79:
74:dd:30:bb:7d:8c:85:44:82:46:74:dc:43:94:8e:7f:3b:10:
99:dd:42:07:f4:02:d4:0f:0c:e1:f5:ae:71:e9:fe:25:d9:17:
d3:d5:dc:6d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/cTlceJTiq6qmUAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwOTEyMDAwMFoXDTIyMTIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
NWYyNGI2MjUtYWQ2Ny00MjhiLWJiZmMtN2U3YjFkYjNhODBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9A7lW1mssivmfNejIT9V8mrRPfjmCtapTJl
yFXicGGc7d5vHN63mES8Mw1v6c/iCx7gELXHeggTqx9seCZbJR0BEG24GkmKAGD+
WE2gyP5g1zzpzrc+xtn/0OS4jJ8cPOy55jkUiC2PYzUhiee7BbV+dvLVDTnB7dzs
cBoZPbI8FepIOGoR7JxNZZg74fZCizMgWFcaFCK0LgcHGXG55jJ6zFeegMDqo2tY
+G+1TF++sCYohNDb7vCBf/P8ip0ziHI8m3xbA8NgrP2Zy8la7T7pt1PpaBqJK+SE
q9I/czryDAGqIX/sxLIU5LNIRgWWp6EJMkFC/RcLbs4SdBFlWwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJCL/dlgMhwVBMu4rSnEl5uXwrZqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzEzNDE1YTUtNDU2NS0z
ODU1LThkMGUtNWE5YzI1MzI3NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgNQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAp/p0rr4VbhmmlCBHTBZfzbxsfEdXiPK1HmunTDFjx6xJFX1jFpSseKGr
wJkQVDTAkxeoQZ2Crl1YR6TJeQUdXPN0LrvyRrhpGFU6/yWo6DHyFd0CQYDZkpgj
kNfA0oOP09Qy8ZOXdQWJ6Lys4cf7RfS50IsmLM/554mY0cIFj7hcbCxvhl7gTigI
9H3Voi8q4DXnquAhZvkIWaUTKQtUypbum5YOS4tLSvknOJNajmY3Ikpv1aRUpsBx
H+/lp0QhVlKD5JX2klhSmX3mAClX237dok4MFBl5dN0wu32MhUSCRnTcQ5SOfzsQ
md1CB/QC1A8M4fWucen+JdkX09XcbQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:16 2025 by rpki-client