Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/891d1250-aa10-3887-9926-92ade6edc943.roa
File: 891d1250-aa10-3887-9926-92ade6edc943.roa (raw, json)
Hash identifier: KkYC9cps9Lz5bepUOktbj+o6uGY9izZVDxe6qyOukh0=
Subject key identifier: 50:E9:FB:91:EA:6A:AC:F2:B2:01:9F:58:A9:39:B5:2C:38:A6:DF:83
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6F96A2EA5B6FBB0B55C1EB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/891d1250-aa10-3887-9926-92ade6edc943.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:96:a2:ea:5b:6f:bb:0b:55:c1:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=0108bc78-ac64-47f1-81c4-0da413ce1aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:e8:3f:b6:dd:b5:d4:af:09:e9:fc:c3:9b:
30:cd:62:81:3f:70:5d:2b:2f:ae:26:86:25:eb:dd:
2a:d2:2e:35:50:67:f5:f7:6a:2c:18:dc:48:03:29:
06:8a:d6:0a:91:bc:f9:02:3c:e2:10:c4:47:83:f8:
2a:ae:f9:69:2a:69:a5:86:81:42:06:08:94:5f:24:
19:26:de:be:4a:84:91:25:54:d7:db:12:ce:cc:7c:
24:2b:c7:86:20:7d:62:dd:17:62:53:ae:2a:2f:77:
f2:28:f6:f4:3b:94:8f:41:0b:3e:21:d2:38:61:c9:
fd:08:6b:e4:70:79:ed:60:ed:8e:67:c4:50:eb:58:
61:3c:20:ec:4e:76:0f:73:52:f9:67:4f:9d:ce:13:
17:22:85:ed:3e:31:e1:af:a5:43:7e:ac:6a:80:c4:
68:d5:9d:79:13:26:da:18:d8:65:8c:a1:3a:49:db:
67:84:04:9c:1a:1f:c3:a5:cb:6d:f3:7e:32:0f:0b:
6d:e1:bd:da:2c:90:c5:e5:52:d4:58:f6:4d:d6:47:
d5:e3:4d:22:2c:a3:67:65:ca:b1:63:d6:db:3f:da:
98:fa:05:66:07:06:16:59:2e:f9:3f:d5:fb:70:31:
f6:cc:aa:b0:22:12:62:f0:ce:6b:a2:c3:78:c1:02:
0e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E9:FB:91:EA:6A:AC:F2:B2:01:9F:58:A9:39:B5:2C:38:A6:DF:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/891d1250-aa10-3887-9926-92ade6edc943.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:18:e9:76:0f:4a:b0:63:26:fa:7e:7f:29:eb:7c:22:3e:7b:
43:e5:32:9e:5a:38:b4:61:98:bd:d5:89:1f:09:c9:1b:a2:cd:
cd:b2:b3:b6:75:ac:02:89:db:40:d6:aa:1d:6d:62:49:b5:34:
66:6d:a4:de:b0:99:4c:2a:17:a1:9c:17:23:d0:41:32:04:e1:
56:58:ef:91:9b:3d:a0:4f:45:e6:84:b8:3e:cb:cf:fa:d2:ec:
9b:f0:5d:cb:b5:25:70:51:8a:f5:0c:af:1d:ad:d1:ac:5e:3b:
d9:43:95:c0:b8:1a:e8:76:f7:6c:eb:43:a4:92:87:8f:1d:3a:
20:de:35:0b:f0:aa:51:00:d3:80:47:d7:3d:ac:1c:bf:2b:ed:
f9:b5:e6:20:03:05:7d:ba:e3:9c:77:72:3f:9c:77:55:c6:04:
5e:c5:39:8a:57:92:91:50:a3:2f:bc:c0:f9:be:0d:9b:90:b6:
ba:55:bd:2d:28:c1:d9:4d:69:7d:7b:64:63:5a:8e:ad:1c:34:
66:fa:e3:c3:38:96:4e:de:20:f7:e3:03:90:dd:39:be:50:cc:
69:8a:34:81:7d:1f:7c:3c:2d:8e:8b:e1:fc:52:8d:9c:7e:6c:
c1:e6:41:f3:49:b0:c4:67:a1:7f:f7:f2:bb:b2:d7:b6:b0:06:
39:22:19:80
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxvlqLqW2+7C1XB64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MDEwOGJjNzgtYWM2NC00N2YxLTgxYzQtMGRhNDEzY2UxYWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp77oP7bdtdSvCen8w5swzWKBP3BdKy+uJoYl
690q0i41UGf192osGNxIAykGitYKkbz5AjziEMRHg/gqrvlpKmmlhoFCBgiUXyQZ
Jt6+SoSRJVTX2xLOzHwkK8eGIH1i3RdiU64qL3fyKPb0O5SPQQs+IdI4Ycn9CGvk
cHntYO2OZ8RQ61hhPCDsTnYPc1L5Z0+dzhMXIoXtPjHhr6VDfqxqgMRo1Z15Eyba
GNhljKE6SdtnhAScGh/Dpctt834yDwtt4b3aLJDF5VLUWPZN1kfV400iLKNnZcqx
Y9bbP9qY+gVmBwYWWS75P9X7cDH2zKqwIhJi8M5rosN4wQIOEQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFDp+5HqaqzysgGfWKk5tSw4pt+DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODkxZDEyNTAtYWExMC0z
ODg3LTk5MjYtOTJhZGU2ZWRjOTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgBUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkRjpdg9KsGMm+n5/Ket8Ij57Q+Uynlo4tGGYvdWJHwnJG6LNzbKztnWs
AonbQNaqHW1iSbU0Zm2k3rCZTCoXoZwXI9BBMgThVljvkZs9oE9F5oS4PsvP+tLs
m/Bdy7UlcFGK9QyvHa3RrF472UOVwLga6Hb3bOtDpJKHjx06IN41C/CqUQDTgEfX
Pawcvyvt+bXmIAMFfbrjnHdyP5x3VcYEXsU5ileSkVCjL7zA+b4Nm5C2ulW9LSjB
2U1pfXtkY1qOrRw0ZvrjwziWTt4g9+MDkN05vlDMaYo0gX0ffDwtjovh/FKNnH5s
weZB80mwxGehf/fyu7LXtrAGOSIZgA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:44 2025 by rpki-client