Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/880b639a-b51d-33a5-8e05-c27d58b3e829.roa
File: 880b639a-b51d-33a5-8e05-c27d58b3e829.roa (raw, json)
Hash identifier: 1Jii1Anv+gB/xv/TXqyQSmQzIaMI21bUwUQ/6GdEIm8=
Subject key identifier: 63:57:99:0B:6B:1D:52:B5:23:BF:D8:8E:1F:A8:C8:2F:CA:A9:BA:B9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F13E1DD20E9093168B14B8900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/880b639a-b51d-33a5-8e05-c27d58b3e829.roa
Signing time: Mon 29 Aug 2022 12:00:00 +0000
ROA not before: Mon 29 Aug 2022 12:00:00 +0000
ROA not after: Tue 04 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 40.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:13:e1:dd:20:e9:09:31:68:b1:4b:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 29 12:00:00 2022 GMT
Not After : Oct 4 04:00:00 2022 GMT
Subject: CN=ce1f5d25-e953-475c-8ef6-3c10784f9232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a0:ba:18:0d:b2:eb:c6:aa:62:b3:e0:fd:8a:
a7:3e:b4:00:e3:37:05:94:d9:c4:04:ed:15:76:52:
c6:c1:e6:a5:52:18:3d:05:26:ca:d0:1d:17:f7:90:
87:d4:6c:92:44:a6:51:fb:d2:48:25:bd:16:f9:4c:
96:b2:33:d6:0d:76:fa:73:23:27:c0:d5:29:c7:8d:
c7:aa:2c:d3:6c:bb:fb:30:ee:66:b3:b7:b0:88:ba:
a1:bb:74:60:8a:98:6a:ad:33:0e:6f:88:b8:f6:49:
fd:fa:84:a7:eb:ce:81:d9:d0:32:7c:6c:2d:81:ba:
48:62:0b:31:27:c1:13:f3:d3:b6:0f:5a:71:03:b4:
df:eb:b2:74:02:1a:d0:8f:fc:4c:1d:d3:6c:71:bc:
00:ff:09:e0:44:5c:57:05:ab:18:d8:a4:ac:5a:ac:
7d:1a:f5:2f:5a:17:2d:f3:00:98:ac:20:ec:82:40:
6f:a1:06:0e:a1:51:32:45:2e:23:e3:96:5c:72:6b:
11:6e:3b:ca:54:2e:ef:47:5b:48:79:50:30:f1:e2:
95:85:c4:c4:5c:c0:95:98:71:99:87:7d:a9:a0:79:
90:7d:d3:b0:fe:5b:02:b2:5c:99:74:1d:f5:98:64:
23:2c:cd:1b:d5:9c:ba:fe:d1:b3:8b:70:2b:e9:15:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:57:99:0B:6B:1D:52:B5:23:BF:D8:8E:1F:A8:C8:2F:CA:A9:BA:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/880b639a-b51d-33a5-8e05-c27d58b3e829.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:b6:49:92:11:61:40:50:72:c7:7a:5e:8d:ea:f9:04:2e:55:
36:ed:fb:28:83:e7:b4:50:b9:6b:8f:32:7f:5a:cc:a8:09:90:
67:af:f8:27:2d:f3:b5:e4:8b:d4:d8:f5:80:48:1b:15:8b:9f:
19:ac:fe:8c:76:e5:83:98:bb:1a:e0:7e:bb:35:f5:f7:1d:2b:
50:da:34:0d:b6:82:de:49:6f:e9:68:3a:34:a7:b7:5d:f7:12:
3d:08:75:6e:8d:96:45:09:49:44:e8:6a:58:6d:1d:d9:3f:6e:
69:49:56:b5:e2:f4:23:5f:8d:13:82:69:4d:65:e8:16:6b:48:
bb:94:7c:0e:d4:f5:ba:59:70:b7:9a:46:95:cb:0e:9d:49:c6:
db:b4:a1:97:01:a9:6a:ef:df:bf:4a:48:3c:c1:10:41:c5:87:
37:3f:a0:f8:34:c4:3f:05:ce:2c:96:f1:79:62:ae:ab:df:d1:
34:63:e3:24:d4:b7:c5:c1:4b:ce:ac:2a:96:16:41:d0:f9:91:
0f:bb:dc:32:34:6a:b7:66:81:16:93:fe:80:9e:ec:cc:38:ba:
ad:9b:58:b6:10:27:f6:05:52:fd:a4:3f:6b:25:fc:e8:54:5d:
f0:26:54:15:43:74:c2:f5:f2:ce:59:fe:e1:77:b9:88:1a:a4:
4c:d5:b8:e9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8T4d0g6QkxaLFLiQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgyOTEyMDAwMFoXDTIyMTAwNDA0MDAwMFowLzEtMCsGA1UEAxMk
Y2UxZjVkMjUtZTk1My00NzVjLThlZjYtM2MxMDc4NGY5MjMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6C6GA2y68aqYrPg/YqnPrQA4zcFlNnEBO0V
dlLGwealUhg9BSbK0B0X95CH1GySRKZR+9JIJb0W+UyWsjPWDXb6cyMnwNUpx43H
qizTbLv7MO5ms7ewiLqhu3RgiphqrTMOb4i49kn9+oSn686B2dAyfGwtgbpIYgsx
J8ET89O2D1pxA7Tf67J0AhrQj/xMHdNscbwA/wngRFxXBasY2KSsWqx9GvUvWhct
8wCYrCDsgkBvoQYOoVEyRS4j45ZccmsRbjvKVC7vR1tIeVAw8eKVhcTEXMCVmHGZ
h32poHmQfdOw/lsCslyZdB31mGQjLM0b1Zy6/tGzi3Ar6RXonwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGNXmQtrHVK1I7/Yjh+oyC/Kqbq5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODgwYjYzOWEtYjUxZC0z
M2E1LThlMDUtYzI3ZDU4YjNlODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhbZJkhFhQFByx3pejer5BC5VNu37KIPntFC5a48yf1rMqAmQZ6/4Jy3z
teSL1Nj1gEgbFYufGaz+jHblg5i7GuB+uzX19x0rUNo0DbaC3klv6Wg6NKe3XfcS
PQh1bo2WRQlJROhqWG0d2T9uaUlWteL0I1+NE4JpTWXoFmtIu5R8DtT1ullwt5pG
lcsOnUnG27ShlwGpau/fv0pIPMEQQcWHNz+g+DTEPwXOLJbxeWKuq9/RNGPjJNS3
xcFLzqwqlhZB0PmRD7vcMjRqt2aBFpP+gJ7szDi6rZtYthAn9gVS/aQ/ayX86FRd
8CZUFUN0wvXyzln+4Xe5iBqkTNW46Q==
-----END CERTIFICATE-----
Generated at Tue Apr 15 06:42:31 2025 by rpki-client