Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/888d6aa2-a979-34aa-827b-4d2a2dc2ffaf.roa
File: 888d6aa2-a979-34aa-827b-4d2a2dc2ffaf.roa (raw, json)
Hash identifier: kndo6pzhs911jPjw1LBhwdbJMadwbLgLngyxTobR1Wg=
Subject key identifier: 10:25:43:DF:13:37:3C:A3:DB:DF:6A:27:74:44:B9:0B:1D:1B:F8:CC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1DA0AFE6681CB2A000D25300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/888d6aa2-a979-34aa-827b-4d2a2dc2ffaf.roa
Signing time: Thu 02 Jun 2022 12:00:00 +0000
ROA not before: Thu 02 Jun 2022 12:00:00 +0000
ROA not after: Fri 08 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 70.240.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1d:a0:af:e6:68:1c:b2:a0:00:d2:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 2 12:00:00 2022 GMT
Not After : Jul 8 04:00:00 2022 GMT
Subject: CN=81f9bf1f-31a1-4a6f-a2e3-ed1c2948e893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:10:70:18:10:26:61:c4:41:b7:38:d4:9d:
46:7f:4e:9f:09:35:75:c8:f5:7f:ea:f6:f0:e6:a2:
b5:aa:69:4d:c6:3e:2b:3a:6d:cb:cf:7d:85:28:74:
2e:76:63:ce:5f:f3:73:46:b9:be:a1:b8:aa:d9:d5:
53:f3:c4:24:6f:a3:80:1f:31:3a:1e:c1:b8:92:ff:
ff:64:0b:ce:8f:22:d7:ae:f1:9d:46:dd:6e:8c:f1:
1b:a4:6b:27:cd:f4:65:55:1d:a6:83:d6:88:b4:d8:
67:51:b0:f4:e4:0e:e8:f3:d1:7f:cd:4c:e3:f6:dd:
6e:87:42:0a:14:a7:5b:08:7c:49:8c:87:6d:24:bc:
c6:4c:39:0a:47:93:d1:1e:6f:32:45:2c:b0:07:30:
c7:b7:37:54:8d:02:15:60:db:ba:af:93:c3:53:f3:
4f:5f:26:91:2b:54:9a:30:41:0b:13:49:4b:fc:44:
61:4c:21:60:35:21:22:91:04:32:fe:00:7a:69:8a:
0c:62:13:0a:cc:75:3e:b8:b1:b3:ad:df:46:9d:21:
7c:fa:78:0c:c9:c6:5c:26:b2:90:d2:ae:67:14:4a:
0a:2d:62:91:45:2c:3e:ac:ef:fe:52:49:f5:98:0a:
a5:25:65:c7:94:55:c8:c0:28:e9:00:0b:7d:97:8e:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:43:DF:13:37:3C:A3:DB:DF:6A:27:74:44:B9:0B:1D:1B:F8:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/888d6aa2-a979-34aa-827b-4d2a2dc2ffaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.240.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:50:41:22:ea:82:af:4d:6b:63:72:b5:65:f3:bb:dc:01:e0:
ab:3c:11:f4:33:81:df:8a:29:5b:c7:aa:a1:80:b5:63:eb:b0:
81:01:d7:e9:84:e4:5e:65:77:85:fd:d0:87:5f:28:7f:94:fd:
a1:b5:a1:bf:47:37:59:85:27:30:d5:25:cf:81:f3:38:72:83:
7c:e5:b7:55:5c:e2:69:36:20:99:ff:c2:0b:5d:3e:f8:f2:25:
34:76:4c:ce:ad:8f:89:0c:cd:21:4c:c5:c4:a4:f3:bd:19:df:
91:b6:36:9a:59:9b:84:e8:d7:1a:33:64:9e:fd:d3:61:d9:d0:
39:cb:2e:5d:38:a7:37:53:b2:07:bb:76:f3:bd:f4:e0:2d:cf:
e8:cc:61:3a:06:a4:f3:dc:66:e0:85:64:2c:d9:af:cb:b1:e2:
0f:be:b8:59:e9:dc:88:36:f0:dd:4e:a5:d3:af:1d:a9:3f:4a:
0f:41:5c:23:0f:06:9d:21:70:d7:eb:35:8f:db:92:a9:d1:53:
ae:61:55:ec:8c:13:47:b3:0e:8f:2e:07:57:6c:4a:03:c2:8f:
7c:b0:98:60:d0:0b:e5:93:79:77:3a:06:27:ad:8d:f1:3a:d5:
f0:1e:1c:c7:8f:1f:ad:10:ff:2f:de:df:76:2a:4b:76:ea:7a:
b2:3a:00:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD4doK/maByyoADSUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwMjEyMDAwMFoXDTIyMDcwODA0MDAwMFowLzEtMCsGA1UEAxMk
ODFmOWJmMWYtMzFhMS00YTZmLWEyZTMtZWQxYzI5NDhlODkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkEQcBgQJmHEQbc41J1Gf06fCTV1yPV/6vbw
5qK1qmlNxj4rOm3Lz32FKHQudmPOX/NzRrm+obiq2dVT88Qkb6OAHzE6HsG4kv//
ZAvOjyLXrvGdRt1ujPEbpGsnzfRlVR2mg9aItNhnUbD05A7o89F/zUzj9t1uh0IK
FKdbCHxJjIdtJLzGTDkKR5PRHm8yRSywBzDHtzdUjQIVYNu6r5PDU/NPXyaRK1Sa
MEELE0lL/ERhTCFgNSEikQQy/gB6aYoMYhMKzHU+uLGzrd9GnSF8+ngMycZcJrKQ
0q5nFEoKLWKRRSw+rO/+Ukn1mAqlJWXHlFXIwCjpAAt9l47khwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBAlQ98TNzyj299qJ3REuQsdG/jMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODg4ZDZhYTItYTk3OS0z
NGFhLTgyN2ItNGQyYTJkYzJmZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRvBAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhQQSLqgq9Na2NytWXzu9wB4Ks8EfQzgd+KKVvHqqGAtWPrsIEB1+mE
5F5ld4X90IdfKH+U/aG1ob9HN1mFJzDVJc+B8zhyg3zlt1Vc4mk2IJn/wgtdPvjy
JTR2TM6tj4kMzSFMxcSk870Z35G2NppZm4To1xozZJ7902HZ0DnLLl04pzdTsge7
dvO99OAtz+jMYToGpPPcZuCFZCzZr8ux4g++uFnp3Ig28N1OpdOvHak/Sg9BXCMP
Bp0hcNfrNY/bkqnRU65hVeyME0ezDo8uB1dsSgPCj3ywmGDQC+WTeXc6BietjfE6
1fAeHMePH60Q/y/e33YqS3bqerI6AGw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:26:29 2025 by rpki-client