Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86d194b1-2ac2-3ba2-835a-6ceed80b368f.roa
File: 86d194b1-2ac2-3ba2-835a-6ceed80b368f.roa (raw, json)
Hash identifier: +h3wTHQIS55MpGde5utTDpQs8CijYtvgtc/YuQpjJHU=
Subject key identifier: 27:6D:4E:96:6B:6E:45:B4:68:E4:16:12:9D:65:72:F2:9E:07:87:39
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5AFC19E63B4E0078BF76C600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86d194b1-2ac2-3ba2-835a-6ceed80b368f.roa
Signing time: Sat 24 Sep 2022 12:00:00 +0000
ROA not before: Sat 24 Sep 2022 12:00:00 +0000
ROA not after: Sun 30 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5a:fc:19:e6:3b:4e:00:78:bf:76:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 24 12:00:00 2022 GMT
Not After : Oct 30 04:00:00 2022 GMT
Subject: CN=9be0d3f3-8741-4e46-84c3-052f340d79e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:11:79:78:f7:a3:46:a1:ad:4f:a8:fd:f5:
d3:9e:13:f0:53:a4:38:64:45:ea:7d:6f:80:36:38:
f6:18:ee:89:f8:c6:a1:48:41:92:c1:f1:0b:30:d9:
8b:92:c7:e3:e1:72:55:73:5a:4c:b1:07:fc:3d:cc:
ee:51:d9:8b:08:db:a5:99:c0:bd:17:b7:35:33:f0:
a4:99:c4:8f:09:40:b7:ce:71:e1:6a:ac:52:b0:6a:
99:9b:14:43:6a:66:15:dc:af:1c:39:24:ac:da:68:
6f:31:58:c3:b6:6a:78:8f:3a:94:94:c9:18:6a:32:
0c:2a:1d:e6:c2:b9:e3:8b:3e:75:de:ff:c2:e1:14:
43:3a:59:f0:98:cb:71:fd:bd:12:09:48:65:7d:40:
5e:67:1d:bc:af:e3:df:d9:c4:bc:ae:df:00:6a:89:
6c:3b:d9:91:f9:c6:4d:9e:e6:e4:80:63:57:1e:d7:
a2:b9:73:d8:78:ea:97:36:f1:c2:7a:29:56:06:88:
b9:65:85:07:7b:8e:2c:de:9b:6f:7f:d2:cd:4c:8e:
3f:7c:e9:5e:f0:71:16:f2:25:40:b1:9e:0d:2a:94:
2b:8b:3a:6e:42:90:9d:b4:f5:75:be:74:34:3f:f7:
85:87:57:c8:11:28:c2:30:42:1d:95:10:6a:8c:3d:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6D:4E:96:6B:6E:45:B4:68:E4:16:12:9D:65:72:F2:9E:07:87:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/86d194b1-2ac2-3ba2-835a-6ceed80b368f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:44:97:20:05:eb:a8:68:99:ed:25:c7:a2:fb:26:94:90:df:
12:fe:5f:75:5f:11:16:a3:c9:36:09:21:e6:de:56:dc:4f:70:
29:9b:f4:71:ba:6f:ba:8d:56:d8:65:0f:96:e5:60:43:99:7e:
55:59:80:1d:54:c3:cd:4e:39:bf:52:20:47:93:5b:12:80:34:
bd:ee:4a:75:5b:0c:ff:22:2d:ec:fc:c8:39:93:f8:8c:d8:f1:
2b:16:27:05:9b:23:40:9e:c6:b4:96:be:54:8f:4a:3f:47:aa:
81:62:54:5e:b8:f1:ee:06:8a:eb:c3:e6:ef:3f:c2:0f:71:92:
f5:6d:e6:99:ba:c3:87:1f:74:37:ba:86:59:17:08:b8:33:ee:
9b:2a:61:a2:ff:44:16:25:ac:b8:75:f5:40:ed:8f:72:bd:35:
49:81:50:b0:a8:d6:87:b8:fc:e7:de:03:8b:c0:ec:16:a9:cf:
b6:3b:48:10:c1:00:2d:43:8c:3a:ab:75:0b:87:62:d6:30:b8:
7d:05:fb:60:13:d8:ed:aa:a4:b1:80:35:9b:48:1e:62:40:8f:
3b:15:fe:47:bb:8a:50:a1:d0:9c:26:12:2a:6c:14:8e:f5:53:
32:61:06:20:8e:9a:a4:d8:6a:94:f7:0e:f3:ad:2d:d8:69:54:
36:67:4e:0d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9a/BnmO04AeL92xgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyNDEyMDAwMFoXDTIyMTAzMDA0MDAwMFowLzEtMCsGA1UEAxMk
OWJlMGQzZjMtODc0MS00ZTQ2LTg0YzMtMDUyZjM0MGQ3OWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwEReXj3o0ahrU+o/fXTnhPwU6Q4ZEXqfW+A
Njj2GO6J+MahSEGSwfELMNmLksfj4XJVc1pMsQf8PczuUdmLCNulmcC9F7c1M/Ck
mcSPCUC3znHhaqxSsGqZmxRDamYV3K8cOSSs2mhvMVjDtmp4jzqUlMkYajIMKh3m
wrnjiz513v/C4RRDOlnwmMtx/b0SCUhlfUBeZx28r+Pf2cS8rt8AaolsO9mR+cZN
nubkgGNXHteiuXPYeOqXNvHCeilWBoi5ZYUHe44s3ptvf9LNTI4/fOle8HEW8iVA
sZ4NKpQrizpuQpCdtPV1vnQ0P/eFh1fIESjCMEIdlRBqjD0uYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCdtTpZrbkW0aOQWEp1lcvKeB4c5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODZkMTk0YjEtMmFjMi0z
YmEyLTgzNWEtNmNlZWQ4MGIzNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgBUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADESXIAXrqGiZ7SXHovsmlJDfEv5fdV8RFqPJNgkh5t5W3E9wKZv0cbpv
uo1W2GUPluVgQ5l+VVmAHVTDzU45v1IgR5NbEoA0ve5KdVsM/yIt7PzIOZP4jNjx
KxYnBZsjQJ7GtJa+VI9KP0eqgWJUXrjx7gaK68Pm7z/CD3GS9W3mmbrDhx90N7qG
WRcIuDPumyphov9EFiWsuHX1QO2Pcr01SYFQsKjWh7j8594Di8DsFqnPtjtIEMEA
LUOMOqt1C4di1jC4fQX7YBPY7aqksYA1m0geYkCPOxX+R7uKUKHQnCYSKmwUjvVT
MmEGII6apNhqlPcO860t2GlUNmdODQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:28 2025 by rpki-client