Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8270899b-1b02-3518-a342-7dc8b800078b.roa
File: 8270899b-1b02-3518-a342-7dc8b800078b.roa (raw, json)
Hash identifier: +87vytnPMGDPtysSMKKPvxT/pGaorZ+kr31qlLtWw0I=
Subject key identifier: 84:50:A6:F0:BE:BD:24:AC:4F:E8:89:CA:95:AE:F6:B5:1C:D3:F3:0C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584053F152034AE054EC29564680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8270899b-1b02-3518-a342-7dc8b800078b.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.201.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:53:f1:52:03:4a:e0:54:ec:29:56:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=085ee3ad-e77b-4fee-93ba-2d4452981c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:ff:1e:3a:71:10:99:9d:a9:c1:05:95:f2:
3e:89:0b:a3:4b:ee:46:80:ce:68:c7:a8:32:26:ab:
79:f0:96:0a:39:e4:7f:0a:c1:c2:3f:97:83:c3:03:
a8:8b:64:98:ba:71:09:26:11:a4:38:c3:46:dd:22:
cd:97:8a:6c:3f:08:83:3d:95:e2:4d:6b:45:43:9d:
97:36:73:71:2f:f2:6f:5b:ee:55:cc:9a:5f:77:de:
6c:97:d2:1a:aa:6a:99:cc:1e:cb:81:7e:64:eb:ab:
6e:f9:45:3f:6e:96:d9:92:75:ef:e8:1c:48:77:70:
95:58:85:36:9b:fe:23:99:b6:ff:30:77:3d:f5:3e:
6d:86:aa:88:4d:d5:8b:bc:8e:ab:d0:fb:a6:fc:7a:
fd:5d:11:fb:76:b6:e2:a5:14:9f:92:1f:df:9f:5a:
fa:38:93:8a:0f:74:a5:4d:2c:7b:64:c9:4b:7f:eb:
e1:36:43:b2:84:ad:fd:a7:74:b6:60:1f:52:7e:08:
1a:56:2c:e7:c6:96:b6:af:4a:68:96:be:95:dd:44:
a2:2c:6b:67:18:a9:cf:f5:26:07:bb:bb:3f:7a:97:
eb:ea:a9:7f:fb:90:2f:ff:86:0f:31:0e:78:e5:6b:
98:07:fa:2f:92:7c:50:3e:28:d1:35:8f:84:9a:3a:
88:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:50:A6:F0:BE:BD:24:AC:4F:E8:89:CA:95:AE:F6:B5:1C:D3:F3:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8270899b-1b02-3518-a342-7dc8b800078b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.201.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:4f:90:d9:85:6d:78:7d:32:5a:7c:e1:98:09:a6:96:d7:c0:
08:b6:61:0a:bc:e2:59:1f:ce:32:37:2c:a0:81:61:d2:de:d7:
09:5e:91:50:ab:5c:3e:1d:17:cd:2a:a3:7f:98:02:69:58:bc:
cd:9d:2a:2c:89:af:d9:28:d2:70:48:66:37:b9:c7:cb:f8:f9:
fe:54:09:9d:a8:3b:6e:44:3e:4a:5a:f3:9e:dc:9c:5f:f1:66:
c2:89:5c:67:81:35:f3:ed:a9:e7:1d:88:2c:1c:66:02:10:79:
52:44:fc:92:7b:6d:5a:58:68:16:f7:02:38:ec:ea:a9:4d:8f:
4c:a7:76:ab:c5:93:d7:91:c2:1c:6f:bd:38:df:44:aa:88:23:
58:80:bc:b0:43:7d:c7:f7:62:54:e7:69:6b:3c:2c:0a:05:45:
e6:45:0c:a7:f2:b5:20:61:20:be:42:17:14:b1:29:cd:69:18:
a2:be:1e:65:5f:60:da:f9:0d:ba:fc:40:79:30:be:89:25:c5:
5b:cf:43:3a:49:39:1f:4c:8e:36:a0:fd:db:e1:10:b7:17:f4:
6a:9e:70:63:be:38:41:8f:b3:80:b3:3b:cf:7d:fd:bd:cc:95:
4d:98:d5:9f:26:5d:07:b5:d4:44:4b:41:8c:c9:26:b2:53:c6:
95:6d:09:95
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBT8VIDSuBU7ClWRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyMjEyMDAwMFoXDTIzMDEyNzA1MDAwMFowLzEtMCsGA1UEAxMk
MDg1ZWUzYWQtZTc3Yi00ZmVlLTkzYmEtMmQ0NDUyOTgxYzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSX/HjpxEJmdqcEFlfI+iQujS+5GgM5ox6gy
Jqt58JYKOeR/CsHCP5eDwwOoi2SYunEJJhGkOMNG3SLNl4psPwiDPZXiTWtFQ52X
NnNxL/JvW+5VzJpfd95sl9IaqmqZzB7LgX5k66tu+UU/bpbZknXv6BxId3CVWIU2
m/4jmbb/MHc99T5thqqITdWLvI6r0Pum/Hr9XRH7drbipRSfkh/fn1r6OJOKD3Sl
TSx7ZMlLf+vhNkOyhK39p3S2YB9SfggaViznxpa2r0polr6V3USiLGtnGKnP9SYH
u7s/epfr6ql/+5Av/4YPMQ545WuYB/ovknxQPijRNY+EmjqIGwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIRQpvC+vSSsT+iJypWu9rUc0/MMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODI3MDg5OWItMWIwMi0z
NTE4LWEzNDItN2RjOGI4MDAwNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKMkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFE+Q2YVteH0yWnzhmAmmltfACLZhCrziWR/OMjcsoIFh0t7XCV6RUKtc
Ph0XzSqjf5gCaVi8zZ0qLImv2SjScEhmN7nHy/j5/lQJnag7bkQ+SlrzntycX/Fm
wolcZ4E18+2p5x2ILBxmAhB5UkT8knttWlhoFvcCOOzqqU2PTKd2q8WT15HCHG+9
ON9EqogjWIC8sEN9x/diVOdpazwsCgVF5kUMp/K1IGEgvkIXFLEpzWkYor4eZV9g
2vkNuvxAeTC+iSXFW89DOkk5H0yONqD92+EQtxf0ap5wY744QY+zgLM7z339vcyV
TZjVnyZdB7XUREtBjMkmslPGlW0JlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:22 2025 by rpki-client