Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d737799-0032-3b7f-8aa4-8e94b6e6ca0b.roa
File: 7d737799-0032-3b7f-8aa4-8e94b6e6ca0b.roa (raw, json)
Hash identifier: 2Lecv6rm9X0XyzS9OY1BcSnAi/Sj9OtDcNMculQYomQ=
Subject key identifier: 95:78:89:9E:D7:2F:C9:B3:69:81:C6:99:B3:9B:0A:AA:A9:86:42:74
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400592020D7676B30D80FB0C20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d737799-0032-3b7f-8aa4-8e94b6e6ca0b.roa
Signing time: Thu 24 Nov 2022 12:00:00 +0000
ROA not before: Thu 24 Nov 2022 12:00:00 +0000
ROA not after: Fri 30 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 40.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:05:92:02:0d:76:76:b3:0d:80:fb:0c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 24 12:00:00 2022 GMT
Not After : Dec 30 05:00:00 2022 GMT
Subject: CN=3b3abadf-1c19-4edc-93bc-0101ecbd1422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6d:90:48:59:7e:a0:66:62:61:6a:4e:a7:f4:
45:59:fe:2b:a8:ce:cd:d9:ee:41:49:93:01:ec:be:
a6:00:a6:9c:cd:ca:42:03:c6:a2:c1:cf:c5:a7:50:
f2:bc:9c:5d:9f:91:9c:6f:2c:42:d7:d7:c4:44:ad:
2f:7d:e9:50:35:5d:cb:51:1f:03:38:48:1f:89:4c:
f4:09:67:57:bb:15:ae:b5:b9:39:d3:5f:12:73:08:
9f:9c:66:f7:28:ac:6a:e3:83:00:a0:53:df:d9:88:
dd:41:29:71:38:26:14:17:7a:e7:2b:e6:46:c5:3b:
54:f8:c9:4d:fc:5d:3b:7e:53:46:66:91:f0:a4:21:
33:59:d7:6b:84:c5:66:c9:e7:d4:74:07:3e:92:96:
98:85:97:bb:9b:9f:5a:da:d8:9f:48:15:a0:2d:2d:
36:50:1e:ea:06:c5:80:d5:47:62:f4:6f:70:7e:0a:
95:d8:1e:37:ac:5d:b4:15:e6:73:13:3d:5d:6e:be:
27:79:57:f4:5f:4e:56:82:ea:ef:a7:95:21:f0:b7:
1e:5b:3a:11:f6:4d:da:c1:65:cd:f7:e0:99:14:b4:
71:54:49:b9:94:c9:ff:21:b8:b6:87:79:bd:28:0c:
47:11:8f:4d:db:84:b1:75:87:3a:2e:77:9e:91:01:
a0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:89:9E:D7:2F:C9:B3:69:81:C6:99:B3:9B:0A:AA:A9:86:42:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d737799-0032-3b7f-8aa4-8e94b6e6ca0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:58:98:94:c3:97:39:6d:7d:e7:1a:cf:0d:03:b7:6b:27:75:
9c:d9:dc:10:45:3b:5e:62:7a:c9:5a:53:3f:fa:23:1e:91:2c:
44:7a:0f:01:ff:3e:5c:32:6e:27:d7:82:03:f9:72:54:05:af:
63:d7:1d:61:7e:4f:83:e2:3b:c2:aa:a9:c0:5c:09:a7:fc:0a:
d5:1a:c0:db:1b:14:99:c7:d6:be:e5:04:a1:10:64:cd:0d:23:
f4:74:92:2e:e3:7c:9d:be:96:e5:90:f8:aa:14:2a:d7:be:32:
64:17:9a:21:aa:1c:64:78:79:f0:b9:0e:17:98:2f:f8:8c:66:
05:a7:48:22:55:e9:36:f1:7e:02:90:57:b8:bd:af:4f:71:a1:
1d:9e:64:df:b1:47:30:e8:b5:f0:0d:4c:cc:68:ae:29:5c:c1:
76:ad:fd:f8:d5:44:c2:57:3e:dc:10:70:a9:aa:8c:17:21:7c:
37:4a:71:28:1a:63:67:06:1c:46:e0:cc:f9:72:48:cf:c8:2d:
1e:39:20:af:c0:8c:3a:bf:48:eb:ee:b2:92:b7:62:b6:a3:3a:
a5:43:3e:e7:90:71:d1:01:2f:6c:ad:69:d9:51:26:2d:98:6f:
27:9e:ac:79:be:42:b8:f8:62:69:b4:22:df:90:e1:ef:17:7f:
48:c0:a8:76
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAFkgINdnazDYD7DCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyNDEyMDAwMFoXDTIyMTIzMDA1MDAwMFowLzEtMCsGA1UEAxMk
M2IzYWJhZGYtMWMxOS00ZWRjLTkzYmMtMDEwMWVjYmQxNDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3W2QSFl+oGZiYWpOp/RFWf4rqM7N2e5BSZMB
7L6mAKaczcpCA8aiwc/Fp1DyvJxdn5GcbyxC19fERK0vfelQNV3LUR8DOEgfiUz0
CWdXuxWutbk5018ScwifnGb3KKxq44MAoFPf2YjdQSlxOCYUF3rnK+ZGxTtU+MlN
/F07flNGZpHwpCEzWddrhMVmyefUdAc+kpaYhZe7m59a2tifSBWgLS02UB7qBsWA
1Udi9G9wfgqV2B43rF20FeZzEz1dbr4neVf0X05Wgurvp5Uh8LceWzoR9k3awWXN
9+CZFLRxVEm5lMn/Ibi2h3m9KAxHEY9N24SxdYc6LneekQGgOQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJV4iZ7XL8mzaYHGmbObCqqphkJ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvN2Q3Mzc3OTktMDAzMi0z
YjdmLThhYTQtOGU5NGI2ZTZjYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKNwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACViYlMOXOW195xrPDQO3ayd1nNncEEU7XmJ6yVpTP/ojHpEsRHoPAf8+
XDJuJ9eCA/lyVAWvY9cdYX5Pg+I7wqqpwFwJp/wK1RrA2xsUmcfWvuUEoRBkzQ0j
9HSSLuN8nb6W5ZD4qhQq174yZBeaIaocZHh58LkOF5gv+IxmBadIIlXpNvF+ApBX
uL2vT3GhHZ5k37FHMOi18A1MzGiuKVzBdq39+NVEwlc+3BBwqaqMFyF8N0pxKBpj
ZwYcRuDM+XJIz8gtHjkgr8CMOr9I6+6ykrditqM6pUM+55Bx0QEvbK1p2VEmLZhv
J56seb5CuPhiabQi35Dh7xd/SMCodg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:00 2025 by rpki-client