Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/838e580a-0e95-3a0a-a707-c783ff0fb8e7.roa
File: 838e580a-0e95-3a0a-a707-c783ff0fb8e7.roa (raw, json)
Hash identifier: X/y9Htj14/VhFuObq0OxiYAC2+niwbluD/5hp/NQu0M=
Subject key identifier: 78:88:69:C3:0D:16:9C:BB:98:31:BC:40:B1:3E:6B:26:B0:AA:CA:18
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD719B5ED7EB87018BF818D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/838e580a-0e95-3a0a-a707-c783ff0fb8e7.roa
Signing time: Mon 07 Nov 2022 22:33:08 +0000
ROA not before: Mon 07 Nov 2022 22:33:08 +0000
ROA not after: Tue 13 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 40.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d7:19:b5:ed:7e:b8:70:18:bf:81:8d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 7 22:33:08 2022 GMT
Not After : Dec 13 05:00:00 2022 GMT
Subject: CN=2c61ca3f-5da3-4d20-88ef-1c314b1e4ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:96:44:5c:21:86:99:89:7d:94:29:95:1e:94:
20:3c:c9:7a:60:f3:e6:2a:a9:d0:b0:98:d5:41:67:
11:51:29:d6:16:d2:89:d8:fe:37:e3:d3:78:14:d2:
18:34:2e:fd:21:75:5a:d1:23:48:42:8c:78:56:00:
b4:d8:a3:75:6d:7c:aa:fc:72:69:6c:b3:39:17:18:
7d:94:9c:43:ea:40:43:bd:ec:96:a7:a1:14:0d:c6:
83:41:72:eb:9a:73:c3:8f:cd:5f:59:84:54:8b:5f:
b3:6d:31:72:ad:76:fd:a2:ae:1c:7b:8e:98:3c:d7:
3c:97:88:35:87:96:77:ad:8c:29:3a:6d:d1:d5:7d:
36:6d:fd:a9:62:39:43:d3:72:f0:60:97:5d:3c:e3:
25:5c:29:0d:c5:55:7a:4f:8a:a8:31:64:37:44:eb:
3a:6e:c8:db:60:f0:5d:1c:ad:1a:b4:d0:2e:79:ba:
54:f2:46:da:fc:62:f7:87:dd:45:d2:45:37:af:97:
91:59:13:fe:4c:0c:e7:12:f7:b5:f7:30:bf:4c:f7:
01:2f:da:ac:bc:94:3c:71:6f:3e:8c:3b:fc:10:1b:
b1:e5:95:d9:eb:01:17:a6:1f:f4:1e:be:f4:81:b5:
2b:e5:df:ba:3c:8c:e2:1e:5d:e8:70:21:26:25:a0:
be:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:88:69:C3:0D:16:9C:BB:98:31:BC:40:B1:3E:6B:26:B0:AA:CA:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/838e580a-0e95-3a0a-a707-c783ff0fb8e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:b9:86:71:0c:3f:0f:37:93:dd:1b:61:f8:5c:40:7d:4f:85:
36:6e:d6:be:9a:a0:e7:d7:c6:2b:bb:89:69:03:69:dd:02:24:
ca:45:03:30:25:1a:63:f3:89:d8:27:d0:93:8d:28:88:23:5b:
93:da:83:ce:16:79:8b:dd:d2:33:23:f6:ce:ae:04:9a:07:5f:
7c:45:38:f7:23:38:78:c3:2d:ea:aa:c3:eb:19:14:32:e2:73:
80:7d:99:29:e4:4e:d5:1c:db:11:8f:60:ab:c6:07:07:cb:0e:
54:2e:ca:73:b2:dc:17:76:1e:1e:9c:2d:7a:02:df:b0:01:2c:
27:bd:39:26:e4:b4:f6:9f:82:00:9b:4e:6c:6e:5c:2b:22:d4:
a9:a9:36:66:7e:1d:e7:05:59:15:6f:e4:9f:aa:f9:77:2e:45:
b1:2f:9c:ac:e3:6e:cf:a4:14:93:d3:67:11:16:94:e6:b8:a2:
4e:72:e7:8d:97:06:22:06:09:b3:51:77:41:97:2f:02:a8:33:
0d:c6:4e:af:f6:66:82:dd:8c:eb:5a:43:76:bb:1e:73:77:f8:
9d:fe:f9:70:ac:28:63:40:f8:d6:fb:03:3a:0f:70:bd:14:51:
b0:61:15:45:79:d1:5e:f6:7b:7f:24:59:1d:48:63:38:41:33:
b7:0b:f3:51
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/XGbXtfrhwGL+BjUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwNzIyMzMwOFoXDTIyMTIxMzA1MDAwMFowLzEtMCsGA1UEAxMk
MmM2MWNhM2YtNWRhMy00ZDIwLTg4ZWYtMWMzMTRiMWU0YmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJZEXCGGmYl9lCmVHpQgPMl6YPPmKqnQsJjV
QWcRUSnWFtKJ2P4349N4FNIYNC79IXVa0SNIQox4VgC02KN1bXyq/HJpbLM5Fxh9
lJxD6kBDveyWp6EUDcaDQXLrmnPDj81fWYRUi1+zbTFyrXb9oq4ce46YPNc8l4g1
h5Z3rYwpOm3R1X02bf2pYjlD03LwYJddPOMlXCkNxVV6T4qoMWQ3ROs6bsjbYPBd
HK0atNAuebpU8kba/GL3h91F0kU3r5eRWRP+TAznEve19zC/TPcBL9qsvJQ8cW8+
jDv8EBux5ZXZ6wEXph/0Hr70gbUr5d+6PIziHl3ocCEmJaC+zwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHiIacMNFpy7mDG8QLE+ayawqsoYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODM4ZTU4MGEtMGU5NS0z
YTBhLWE3MDctYzc4M2ZmMGZiOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmLmGcQw/DzeT3Rth+FxAfU+FNm7Wvpqg59fGK7uJaQNp3QIkykUDMCUa
Y/OJ2CfQk40oiCNbk9qDzhZ5i93SMyP2zq4EmgdffEU49yM4eMMt6qrD6xkUMuJz
gH2ZKeRO1RzbEY9gq8YHB8sOVC7Kc7LcF3YeHpwtegLfsAEsJ705JuS09p+CAJtO
bG5cKyLUqak2Zn4d5wVZFW/kn6r5dy5FsS+crONuz6QUk9NnERaU5riiTnLnjZcG
IgYJs1F3QZcvAqgzDcZOr/Zmgt2M61pDdrsec3f4nf75cKwoY0D41vsDOg9wvRRR
sGEVRXnRXvZ7fyRZHUhjOEEztwvzUQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:34 2025 by rpki-client