Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8369ceae-d5dd-3b21-84c7-0766fbd1fcb0.roa
File: 8369ceae-d5dd-3b21-84c7-0766fbd1fcb0.roa (raw, json)
Hash identifier: Dyipan4sqBOcOsZco4OPQ2PXEnwo0sTsirz4Q5DBlwU=
Subject key identifier: E1:BB:2C:0E:C6:D3:29:08:F9:D4:21:B3:DC:EB:F0:75:40:7F:F8:AB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF23BAD4E72325ABDAE22CC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8369ceae-d5dd-3b21-84c7-0766fbd1fcb0.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 100.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f2:3b:ad:4e:72:32:5a:bd:ae:22:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=245b9a8c-0f6d-4c60-8a94-7a4e2ae542bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:a4:0c:11:f5:ae:1d:17:14:6e:1e:b1:45:
02:3c:53:10:71:3c:87:cc:f1:3f:89:a1:66:a8:e3:
a3:8e:39:2d:7c:e8:e8:97:ea:e5:7b:1a:20:28:4a:
94:48:24:16:1f:7f:d5:ab:dc:63:f2:f8:4d:80:7b:
93:1b:ca:5c:1f:74:7f:91:f4:25:0c:6c:78:b5:92:
41:51:3a:6f:3b:e7:64:ec:16:fe:59:80:11:54:f9:
8d:2d:58:0f:c5:d8:f1:62:01:55:93:36:80:0c:92:
c5:8c:47:be:46:63:6a:6a:a0:0a:3e:21:d4:b1:0b:
70:cb:de:9d:67:2b:9b:2d:67:62:61:c0:36:6f:7c:
61:73:09:8c:87:90:2e:e5:b1:60:7f:0d:0c:90:30:
7d:85:5d:db:2b:aa:32:73:8c:cd:24:21:4e:35:24:
8c:0f:2e:42:11:28:71:fe:b1:cc:6f:e6:41:bf:eb:
ab:76:a0:cc:91:22:1f:b2:3b:e8:02:79:8a:1e:19:
50:99:15:9a:65:35:53:7d:0d:9c:47:00:c8:a4:f6:
d4:f8:26:82:ba:07:08:01:88:dd:4d:b4:c3:ad:c7:
48:66:da:23:bf:04:70:8e:19:53:1f:79:ee:30:20:
1c:e9:26:cc:af:e8:be:81:6a:6a:b6:43:84:81:e6:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BB:2C:0E:C6:D3:29:08:F9:D4:21:B3:DC:EB:F0:75:40:7F:F8:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8369ceae-d5dd-3b21-84c7-0766fbd1fcb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:4c:f5:3a:ea:1a:97:21:25:5e:43:80:ac:78:52:1f:14:2f:
49:ed:e4:d8:56:d3:fb:ec:8a:a7:ab:1c:c9:f0:69:f7:6e:82:
57:d1:58:58:20:9b:99:e7:d1:25:6d:e6:0e:39:40:49:3b:e8:
49:d7:b1:bc:08:79:3b:72:d9:d5:f8:b6:f1:a0:84:a2:60:c3:
b0:2a:cb:b0:43:51:77:ee:48:eb:38:c3:9f:35:80:1a:67:c8:
75:83:45:2a:a2:24:f0:bf:62:51:18:80:b0:76:7d:47:6a:f1:
aa:e7:de:1a:96:cc:50:36:5f:c9:78:e2:54:cc:35:22:1e:a5:
b7:44:6a:9a:da:87:9d:a3:92:a2:c6:49:8f:bd:f6:3b:59:6f:
e2:7b:e4:70:fa:3f:81:dc:94:e0:d8:d7:d2:ea:78:6d:c9:f6:
89:bc:27:a5:ba:6e:64:23:16:d5:27:c7:26:56:97:2a:fc:75:
07:2d:92:e7:2b:7b:da:ec:4b:b6:f1:96:93:ce:d6:3c:73:61:
cd:8a:e2:79:d2:04:e4:99:52:55:f3:98:f3:bc:3c:e4:bb:f4:
1f:d0:da:fc:4c:e2:f4:93:a8:59:b0:ca:db:84:9f:40:6b:b7:
14:ca:7f:00:af:ea:24:24:97:b1:2d:dc:65:59:00:48:3c:37:
a9:4c:90:c1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/yO61OcjJava4izIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNzEyMDAwMFoXDTIyMTIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
MjQ1YjlhOGMtMGY2ZC00YzYwLThhOTQtN2E0ZTJhZTU0MmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0GkDBH1rh0XFG4esUUCPFMQcTyHzPE/iaFm
qOOjjjktfOjol+rlexogKEqUSCQWH3/Vq9xj8vhNgHuTG8pcH3R/kfQlDGx4tZJB
UTpvO+dk7Bb+WYARVPmNLVgPxdjxYgFVkzaADJLFjEe+RmNqaqAKPiHUsQtwy96d
ZyubLWdiYcA2b3xhcwmMh5Au5bFgfw0MkDB9hV3bK6oyc4zNJCFONSSMDy5CEShx
/rHMb+ZBv+urdqDMkSIfsjvoAnmKHhlQmRWaZTVTfQ2cRwDIpPbU+CaCugcIAYjd
TbTDrcdIZtojvwRwjhlTH3nuMCAc6SbMr+i+gWpqtkOEgeaMrwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOG7LA7G0ykI+dQhs9zr8HVAf/irMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODM2OWNlYWUtZDVkZC0z
YjIxLTg0YzctMDc2NmZiZDFmY2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDZBgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADUz1OuoalyElXkOArHhSHxQvSe3k2FbT++yKp6scyfBp926CV9FYWCCb
mefRJW3mDjlASTvoSdexvAh5O3LZ1fi28aCEomDDsCrLsENRd+5I6zjDnzWAGmfI
dYNFKqIk8L9iURiAsHZ9R2rxqufeGpbMUDZfyXjiVMw1Ih6lt0RqmtqHnaOSosZJ
j732O1lv4nvkcPo/gdyU4NjX0up4bcn2ibwnpbpuZCMW1SfHJlaXKvx1By2S5yt7
2uxLtvGWk87WPHNhzYriedIE5JlSVfOY87w85Lv0H9Da/Ezi9JOoWbDK24SfQGu3
FMp/AK/qJCSXsS3cZVkASDw3qUyQwQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:01 2025 by rpki-client