Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74d332e5-afcf-3975-af2b-f7c7db7b9990.roa
File: 74d332e5-afcf-3975-af2b-f7c7db7b9990.roa (raw, json)
Hash identifier: yeFtg/XgcwjxzxLvBv5CxZ7OU4vdtRw9pz2G9xp2KGQ=
Subject key identifier: E7:49:BA:18:A6:93:38:C3:07:B3:E5:E6:B9:7D:B6:11:44:22:7C:1E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F57B2C8B5C654D3C21A1D1200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74d332e5-afcf-3975-af2b-f7c7db7b9990.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 204.168.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:57:b2:c8:b5:c6:54:d3:c2:1a:1d:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=42fc1667-4175-4e49-92ef-52350ecdc27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4c:d9:1e:31:bf:01:2b:67:08:6b:ed:ea:57:
9c:a4:fa:f2:c6:38:85:8e:cf:dc:0b:d1:6c:79:3b:
c9:76:a4:4d:05:75:ef:78:1a:c2:3c:f3:5b:e2:25:
47:03:4d:b1:4c:44:68:cf:26:1c:2f:0d:9f:79:52:
89:c0:74:f2:21:ca:da:bc:2e:fc:78:fd:a4:4b:a2:
96:b0:f7:df:45:ef:e5:6a:3a:22:98:a0:ac:07:44:
90:01:bf:42:d8:02:ab:63:4c:02:9a:f8:76:9d:8a:
b5:b8:a6:40:24:fb:95:d7:dc:d6:fe:b9:44:f2:22:
a3:06:44:d6:36:f2:ef:6f:30:62:d4:80:50:ca:1f:
1d:6b:29:3a:06:e7:bb:16:5b:61:5a:0e:c9:aa:4e:
46:f0:4a:7e:8f:6c:cf:6b:5b:37:fb:63:58:4c:d4:
fd:7a:d1:f0:89:0f:eb:ca:76:e3:84:b0:a5:8a:0e:
fb:9b:39:35:46:27:c7:4c:98:99:0e:2c:0f:a1:a6:
70:87:33:f3:b9:f1:e2:8d:1b:09:44:df:91:8a:e2:
20:04:63:39:d7:2f:fb:55:15:d8:24:cb:c8:38:0d:
2d:98:b7:e2:f0:0f:be:78:55:42:55:79:18:b1:ed:
02:bf:e5:71:20:fc:4d:ff:b1:0a:e0:5d:c9:3f:0b:
a6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:49:BA:18:A6:93:38:C3:07:B3:E5:E6:B9:7D:B6:11:44:22:7C:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/74d332e5-afcf-3975-af2b-f7c7db7b9990.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.168.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:5c:99:21:47:43:a4:45:70:0f:0f:95:c0:bb:5a:99:97:07:
f9:46:49:be:6b:e0:0b:73:b9:ee:32:fc:8a:89:11:0e:e4:21:
64:95:33:d8:52:1b:8d:0f:cf:65:0c:33:e9:c6:53:76:16:0e:
9c:ec:33:68:95:d4:60:56:7f:39:e1:25:18:70:ff:a3:f6:f9:
33:47:ca:67:f5:69:39:8f:e5:84:53:13:b3:15:ca:01:0a:df:
a8:44:d1:d0:97:f7:5f:ab:96:99:2b:56:56:78:d0:a5:95:ce:
a4:39:78:d0:61:5c:cc:76:4e:53:5c:9f:1f:5e:ad:bb:db:c8:
26:37:18:c1:59:16:89:71:b7:0c:15:08:39:56:db:9e:f4:fb:
06:76:44:54:f6:70:53:6c:95:a8:6a:bf:36:00:e2:29:f0:13:
01:19:a7:d3:35:a2:9a:8f:0d:a1:7f:3c:66:61:50:8b:38:c6:
17:b5:c4:0a:a7:46:cc:60:98:67:bf:50:f4:28:ea:3b:5e:cd:
7c:c9:cd:ca:7c:ef:a9:44:f2:f9:19:76:3e:cf:39:2d:aa:7e:
fc:50:c1:28:8d:8e:93:d0:d2:3a:95:7d:86:6b:33:0e:8a:cb:
00:77:0e:91:41:57:45:43:50:2b:6e:b5:ab:6e:0d:fd:09:c1:
90:6b:f0:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9Xssi1xlTTwhodEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyMjEyMDAwMFoXDTIyMTAyODA0MDAwMFowLzEtMCsGA1UEAxMk
NDJmYzE2NjctNDE3NS00ZTQ5LTkyZWYtNTIzNTBlY2RjMjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40zZHjG/AStnCGvt6lecpPryxjiFjs/cC9Fs
eTvJdqRNBXXveBrCPPNb4iVHA02xTERozyYcLw2feVKJwHTyIcravC78eP2kS6KW
sPffRe/lajoimKCsB0SQAb9C2AKrY0wCmvh2nYq1uKZAJPuV19zW/rlE8iKjBkTW
NvLvbzBi1IBQyh8dayk6Bue7FlthWg7Jqk5G8Ep+j2zPa1s3+2NYTNT9etHwiQ/r
ynbjhLClig77mzk1RifHTJiZDiwPoaZwhzPzufHijRsJRN+RiuIgBGM51y/7VRXY
JMvIOA0tmLfi8A++eFVCVXkYse0Cv+VxIPxN/7EK4F3JPwumhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOdJuhimkzjDB7Pl5rl9thFEInweMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzRkMzMyZTUtYWZjZi0z
OTc1LWFmMmItZjdjN2RiN2I5OTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzKgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhcmSFHQ6RFcA8PlcC7WpmXB/lGSb5r4Atzue4y/IqJEQ7kIWSVM9hS
G40Pz2UMM+nGU3YWDpzsM2iV1GBWfznhJRhw/6P2+TNHymf1aTmP5YRTE7MVygEK
36hE0dCX91+rlpkrVlZ40KWVzqQ5eNBhXMx2TlNcnx9erbvbyCY3GMFZFolxtwwV
CDlW2570+wZ2RFT2cFNslahqvzYA4inwEwEZp9M1opqPDaF/PGZhUIs4xhe1xAqn
RsxgmGe/UPQo6jtezXzJzcp876lE8vkZdj7POS2qfvxQwSiNjpPQ0jqVfYZrMw6K
ywB3DpFBV0VDUCtutatuDf0JwZBr8CI=
-----END CERTIFICATE-----
Generated at Wed Apr 16 12:53:49 2025 by rpki-client