Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7704d55c-1287-3baf-9738-02738237e782.roa
File: 7704d55c-1287-3baf-9738-02738237e782.roa (raw, json)
Hash identifier: 871V3cxloiufDyL/Dhcy8vpIGuf+H96NPqqom5aavtk=
Subject key identifier: 25:AE:5A:80:BF:2F:05:20:02:E5:8D:82:71:9B:DC:0A:10:C0:E2:1C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF86D6EA5A915C4E5F6631200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7704d55c-1287-3baf-9738-02738237e782.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:6d:6e:a5:a9:15:c4:e5:f6:63:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=79f9038a-23cc-4823-a998-455a8da757bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:a3:05:8a:81:e8:c7:fb:2d:da:8a:67:13:
d0:11:6e:08:a3:bf:e9:5b:15:b1:eb:72:68:b6:99:
66:e6:7e:93:20:ac:7b:8d:b5:56:34:81:4b:0b:f0:
77:20:e0:46:03:df:9f:fb:c9:9a:8f:c5:79:ab:05:
b7:f1:5d:1f:ef:2f:f4:7b:16:45:41:ab:d3:fd:05:
9c:3b:1b:cd:ce:81:14:b1:81:67:5d:54:3b:fe:ae:
af:eb:c6:4e:c1:2e:14:be:91:a9:a3:30:ed:4b:4d:
fe:33:a0:4c:68:03:4f:59:a4:79:5a:a6:30:4d:6e:
bf:83:e0:78:0f:ad:22:b8:85:0e:53:02:b5:4a:87:
da:cb:98:be:26:2b:99:29:7d:f5:ea:a5:30:33:73:
ac:37:00:c0:8a:f7:e3:76:67:60:0f:99:30:52:d3:
c1:4e:0e:97:ad:1f:6c:b2:6c:6c:ab:c0:c3:d1:04:
8f:c5:8b:87:f1:40:eb:01:db:e0:9b:fb:fd:8c:f1:
8a:e0:f1:b1:41:2c:ee:c0:55:a3:4e:df:ea:ba:ba:
d3:07:42:43:97:d1:76:d0:36:7b:3d:ea:88:59:65:
30:0a:df:58:8f:f2:68:a6:e8:83:75:d4:cf:59:e3:
5c:4d:87:b1:63:a4:9c:9f:7f:ef:06:25:b1:e7:08:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AE:5A:80:BF:2F:05:20:02:E5:8D:82:71:9B:DC:0A:10:C0:E2:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7704d55c-1287-3baf-9738-02738237e782.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:3c:65:29:63:9a:43:69:b7:c0:42:6c:1c:35:4d:f2:63:1a:
39:f3:7f:7d:69:b8:8e:0c:86:b2:2d:49:23:aa:38:b5:cc:73:
c8:65:b4:17:95:c5:15:c6:88:36:69:ce:b8:d9:0b:79:35:12:
08:b7:6f:86:f7:3b:c7:ce:af:79:63:58:c4:12:6a:ae:41:94:
7a:ab:80:4b:16:48:2b:4c:f8:c8:3d:6e:a3:c3:5c:59:b5:37:
17:79:75:eb:42:de:7f:f4:32:37:85:04:4a:ae:6c:9d:26:cf:
87:1b:45:fc:4f:3e:de:11:f1:fd:0a:07:1c:7b:7c:24:0d:69:
38:c8:87:60:97:58:56:cf:28:8c:58:40:19:e0:67:5c:e5:27:
40:ba:a5:76:7b:d5:11:5d:12:33:e0:34:90:63:a1:8e:eb:e0:
b1:bf:58:14:b1:46:ac:c4:de:33:bc:8b:90:b6:f1:b0:d6:93:
ea:0d:1d:50:c3:d1:a2:0d:6c:fd:47:35:c7:be:aa:b5:3a:64:
15:f9:0c:f0:2e:c4:ed:b2:6d:22:e1:3f:b5:25:6d:0b:be:51:
16:9c:67:0f:9c:af:66:7c:6c:a2:15:c4:3e:77:06:65:e2:16:
5a:17:e1:b3:85:97:7f:81:2c:3d:4b:ac:8d:16:c5:42:48:51:
37:5c:9e:41
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/4bW6lqRXE5fZjEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExOTEyMDAwMFoXDTIyMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
NzlmOTAzOGEtMjNjYy00ODIzLWE5OTgtNDU1YThkYTc1N2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluujBYqB6Mf7LdqKZxPQEW4Io7/pWxWx63Jo
tplm5n6TIKx7jbVWNIFLC/B3IOBGA9+f+8maj8V5qwW38V0f7y/0exZFQavT/QWc
OxvNzoEUsYFnXVQ7/q6v68ZOwS4UvpGpozDtS03+M6BMaANPWaR5WqYwTW6/g+B4
D60iuIUOUwK1Sofay5i+JiuZKX316qUwM3OsNwDAivfjdmdgD5kwUtPBTg6XrR9s
smxsq8DD0QSPxYuH8UDrAdvgm/v9jPGK4PGxQSzuwFWjTt/qurrTB0JDl9F20DZ7
PeqIWWUwCt9Yj/JopuiDddTPWeNcTYexY6Scn3/vBiWx5whJJwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCWuWoC/LwUgAuWNgnGb3AoQwOIcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzcwNGQ1NWMtMTI4Ny0z
YmFmLTk3MzgtMDI3MzgyMzdlNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCZBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlDxlKWOaQ2m3wEJsHDVN8mMaOfN/fWm4jgyGsi1JI6o4tcxzyGW0F5XF
FcaINmnOuNkLeTUSCLdvhvc7x86veWNYxBJqrkGUequASxZIK0z4yD1uo8NcWbU3
F3l160Lef/QyN4UESq5snSbPhxtF/E8+3hHx/QoHHHt8JA1pOMiHYJdYVs8ojFhA
GeBnXOUnQLqldnvVEV0SM+A0kGOhjuvgsb9YFLFGrMTeM7yLkLbxsNaT6g0dUMPR
og1s/Uc1x76qtTpkFfkM8C7E7bJtIuE/tSVtC75RFpxnD5yvZnxsohXEPncGZeIW
Whfhs4WXf4EsPUusjRbFQkhRN1yeQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:12 2025 by rpki-client