Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88a3c8cb-c862-3c63-8752-32c09f105c70.roa
File: 88a3c8cb-c862-3c63-8752-32c09f105c70.roa (raw, json)
Hash identifier: +K7rgA+cLPM7bo0gzCxiHV3TrCsqu7o+bDwapzx3ZnM=
Subject key identifier: 30:09:E5:3B:14:49:DB:4C:02:35:59:5A:94:66:9E:61:BA:22:7F:D8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405FC780C4AEA83073919BE340
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88a3c8cb-c862-3c63-8752-32c09f105c70.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 151.148.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:c7:80:c4:ae:a8:30:73:91:9b:e3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=640d35f1-4cc6-4d9e-90b2-ab8f61502b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:03:af:60:a8:4c:90:a7:6b:b5:98:fd:f1:60:
0d:ce:4c:1a:b5:36:d6:9d:15:eb:aa:52:b3:47:b9:
2a:bf:5f:60:7c:d1:4c:11:75:d2:d9:90:65:47:61:
8a:a8:92:1c:0a:e5:1e:4d:bf:6d:e0:de:15:8d:53:
1b:a4:0a:e1:ad:4a:3b:48:35:7d:a5:9b:04:32:1f:
ba:c1:3c:0e:71:59:e5:83:c2:4d:f5:6c:d5:56:f7:
b1:3f:26:a5:fa:f0:cf:aa:6a:b9:e5:2d:4c:dc:02:
46:c2:9e:64:a0:d2:dc:fe:6a:55:2d:f7:37:1e:da:
60:bb:82:4a:fc:ff:08:5e:c1:4d:fc:99:d4:8d:47:
d2:7c:fa:6e:79:6e:99:2f:da:48:47:50:02:ff:90:
5e:8f:6a:b8:3f:7d:a9:fe:c4:17:03:4a:6e:1b:52:
0f:e3:fd:15:00:9e:00:e0:58:1e:65:24:8d:9f:03:
a9:10:c2:0a:93:cc:fe:09:30:03:6a:49:1e:ea:4c:
17:81:07:db:4c:73:91:da:e4:b0:f7:a1:f4:52:b7:
a0:31:a0:10:8d:52:57:58:46:8e:8b:82:94:c4:73:
6e:33:9e:cb:7d:59:8a:15:50:6b:ff:d2:fa:53:02:
d7:19:fa:37:52:9b:c6:c3:ea:f4:79:30:03:33:a3:
dc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:09:E5:3B:14:49:DB:4C:02:35:59:5A:94:66:9E:61:BA:22:7F:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/88a3c8cb-c862-3c63-8752-32c09f105c70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.148.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:6f:bc:31:31:49:9f:79:46:51:23:7a:45:0c:67:33:28:31:
dd:34:fe:e0:11:f7:bc:9d:d7:67:f2:7c:79:2f:14:5a:cc:51:
72:bc:24:0f:90:9c:92:04:e1:83:75:5f:41:26:e4:9f:ed:10:
ca:9d:bb:f6:69:8f:d7:a1:7f:5a:17:7d:03:f1:d9:a2:17:90:
8c:ec:dd:92:de:6e:30:a3:39:25:a2:e8:11:74:e4:91:a9:56:
97:15:2f:70:e8:8c:03:2c:c1:16:db:2f:3a:78:1a:e0:c0:9b:
a2:8f:c1:0a:76:3a:36:0d:ab:ce:df:40:09:0c:6f:dc:db:62:
7a:d2:56:af:bf:05:bb:ee:a3:b4:e1:00:d7:53:00:53:36:66:
b9:2c:36:a1:8f:fc:80:b3:5a:5a:62:63:60:31:36:47:74:ec:
fe:08:1f:a9:d5:d8:9f:5e:47:e2:c9:64:94:52:37:82:71:90:
d2:c9:4d:48:c0:53:e2:94:2f:43:2f:6f:f8:0b:38:78:e0:bf:
cc:ff:64:c0:98:a2:fc:dc:4d:3e:2d:c1:6e:aa:33:f5:25:a9:
16:7e:a9:d7:7f:56:a9:29:8b:b4:5f:0c:61:e0:3b:9a:d1:fb:
2e:66:3b:87:86:7f:9b:05:fa:e2:5d:2e:eb:d7:32:43:22:68:
09:ca:b4:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBfx4DErqgwc5Gb40AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNjEyMDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
NjQwZDM1ZjEtNGNjNi00ZDllLTkwYjItYWI4ZjYxNTAyYjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQOvYKhMkKdrtZj98WANzkwatTbWnRXrqlKz
R7kqv19gfNFMEXXS2ZBlR2GKqJIcCuUeTb9t4N4VjVMbpArhrUo7SDV9pZsEMh+6
wTwOcVnlg8JN9WzVVvexPyal+vDPqmq55S1M3AJGwp5koNLc/mpVLfc3Htpgu4JK
/P8IXsFN/JnUjUfSfPpueW6ZL9pIR1AC/5Bej2q4P32p/sQXA0puG1IP4/0VAJ4A
4FgeZSSNnwOpEMIKk8z+CTADakke6kwXgQfbTHOR2uSw96H0UregMaAQjVJXWEaO
i4KUxHNuM57LfVmKFVBr/9L6UwLXGfo3UpvGw+r0eTADM6PcmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDAJ5TsUSdtMAjVZWpRmnmG6In/YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODhhM2M4Y2ItYzg2Mi0z
YzYzLTg3NTItMzJjMDlmMTA1YzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFl5QgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABtvvDExSZ95RlEjekUMZzMoMd00/uAR97yd12fyfHkvFFrMUXK8JA+Q
nJIE4YN1X0Em5J/tEMqdu/Zpj9ehf1oXfQPx2aIXkIzs3ZLebjCjOSWi6BF05JGp
VpcVL3DojAMswRbbLzp4GuDAm6KPwQp2OjYNq87fQAkMb9zbYnrSVq+/Bbvuo7Th
ANdTAFM2ZrksNqGP/ICzWlpiY2AxNkd07P4IH6nV2J9eR+LJZJRSN4JxkNLJTUjA
U+KUL0Mvb/gLOHjgv8z/ZMCYovzcTT4twW6qM/UlqRZ+qdd/Vqkpi7RfDGHgO5rR
+y5mO4eGf5sF+uJdLuvXMkMiaAnKtP8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:30 2025 by rpki-client