Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a049e67-e58b-348c-af20-25250d229199.roa
File: 8a049e67-e58b-348c-af20-25250d229199.roa (raw, json)
Hash identifier: fWh+/ll39N23PLy/RtXymSkJC082dq9mZ7kb6KeGJJ4=
Subject key identifier: 4A:EA:00:9D:89:EE:9F:16:EC:53:57:22:1A:EE:8F:65:18:50:14:44
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F880F0B99420BDEC1E13DAA20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a049e67-e58b-348c-af20-25250d229199.roa
Signing time: Mon 10 Oct 2022 15:51:07 +0000
ROA not before: Mon 10 Oct 2022 15:51:07 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 40.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:88:0f:0b:99:42:0b:de:c1:e1:3d:aa:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 10 15:51:07 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=9808e3b5-ded0-4e49-b632-18112fa54708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:a5:6c:06:b8:89:62:9f:09:5b:63:21:45:
96:cd:c3:39:ea:ce:df:f6:e0:77:28:ad:cd:57:dd:
eb:c2:ad:f6:82:44:df:d8:0a:f5:7f:a0:bc:2a:6e:
1b:49:80:bc:0b:38:2f:24:d5:eb:a5:11:6e:4c:0c:
db:86:a7:fc:53:d0:87:f8:78:98:d0:e1:65:aa:f7:
07:f2:d3:70:87:34:02:9f:bf:e4:9a:ac:13:85:e5:
4e:62:79:80:cb:8a:a6:a8:0b:61:52:11:db:4d:08:
3a:b3:48:26:63:9e:49:19:45:79:37:34:34:47:01:
3f:e1:fa:e9:1e:50:78:e0:af:bf:c9:cb:70:4f:b1:
7a:12:64:e9:d2:6e:82:f8:67:5c:86:b6:af:e4:00:
3f:2e:96:f0:e2:d3:82:9a:75:85:c9:a3:96:25:10:
82:ea:69:b4:8a:bd:f0:d6:02:4d:29:01:78:a1:05:
0f:ba:ea:71:96:c8:45:21:38:25:9a:1f:2a:d6:73:
2e:8e:72:58:f4:28:72:73:e9:1b:79:12:5d:9d:42:
18:63:ce:46:af:50:de:23:8b:a5:af:24:c0:51:1f:
9c:b0:50:e9:1d:d9:21:1b:31:1d:91:8b:1f:6b:01:
d4:56:9c:eb:14:f4:6c:2c:c6:ec:45:0a:9c:90:0e:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EA:00:9D:89:EE:9F:16:EC:53:57:22:1A:EE:8F:65:18:50:14:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a049e67-e58b-348c-af20-25250d229199.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:7c:0d:8e:da:d2:72:93:5c:fc:5f:e7:b5:16:24:76:87:70:
d4:51:0e:00:65:7e:e2:aa:d6:4a:fa:cd:3e:4a:2f:c6:c6:4f:
6f:32:eb:e5:ac:4f:35:a6:31:87:e4:ac:1f:b0:3c:3a:db:a6:
a1:34:6a:1d:f0:b2:a8:7d:1a:37:76:9f:33:3d:c6:88:da:42:
3c:db:f1:e4:c3:40:8d:24:b6:03:c7:53:42:45:55:94:eb:ce:
99:5d:af:2f:9e:73:d2:d0:3e:dd:e7:ae:d0:67:1f:a4:de:ff:
58:77:df:1a:96:00:bc:b5:f6:21:e1:6f:fe:2d:7a:d7:83:ec:
10:dc:c7:9d:93:41:d7:4d:a2:5c:9c:44:ba:85:99:65:2f:f1:
dd:e0:3a:db:bf:e2:4a:f7:d3:42:df:25:dc:60:de:f4:73:59:
22:c5:a3:4a:eb:ca:ee:cb:69:bf:a8:3e:b7:61:2a:3f:fa:f6:
c5:9a:3d:ff:71:42:f8:74:1d:ca:7c:f1:92:96:94:e5:9d:41:
b3:09:f3:98:62:c1:b3:f6:37:20:5e:c8:54:d4:53:77:f9:42:
b6:5c:ee:f3:af:c6:aa:13:be:16:a3:65:c8:69:3f:93:74:05:
92:3c:c9:7a:3a:27:27:d1:b3:6e:43:e3:97:e4:6a:9b:c2:be:
da:98:cf:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+IDwuZQgveweE9qiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxMDE1NTEwN1oXDTIyMTExNTA1MDAwMFowLzEtMCsGA1UEAxMk
OTgwOGUzYjUtZGVkMC00ZTQ5LWI2MzItMTgxMTJmYTU0NzA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro6lbAa4iWKfCVtjIUWWzcM56s7f9uB3KK3N
V93rwq32gkTf2Ar1f6C8Km4bSYC8CzgvJNXrpRFuTAzbhqf8U9CH+HiY0OFlqvcH
8tNwhzQCn7/kmqwTheVOYnmAy4qmqAthUhHbTQg6s0gmY55JGUV5NzQ0RwE/4frp
HlB44K+/yctwT7F6EmTp0m6C+Gdchrav5AA/Lpbw4tOCmnWFyaOWJRCC6mm0ir3w
1gJNKQF4oQUPuupxlshFITglmh8q1nMujnJY9Chyc+kbeRJdnUIYY85Gr1DeI4ul
ryTAUR+csFDpHdkhGzEdkYsfawHUVpzrFPRsLMbsRQqckA7EywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFErqAJ2J7p8W7FNXIhruj2UYUBREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGEwNDllNjctZTU4Yi0z
NDhjLWFmMjAtMjUyNTBkMjI5MTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARnwNjtrScpNc/F/ntRYkdodw1FEOAGV+4qrWSvrNPkovxsZPbzLr5axP
NaYxh+SsH7A8OtumoTRqHfCyqH0aN3afMz3GiNpCPNvx5MNAjSS2A8dTQkVVlOvO
mV2vL55z0tA+3eeu0GcfpN7/WHffGpYAvLX2IeFv/i1614PsENzHnZNB102iXJxE
uoWZZS/x3eA627/iSvfTQt8l3GDe9HNZIsWjSuvK7stpv6g+t2EqP/r2xZo9/3FC
+HQdynzxkpaU5Z1BswnzmGLBs/Y3IF7IVNRTd/lCtlzu86/GqhO+FqNlyGk/k3QF
kjzJejonJ9GzbkPjl+Rqm8K+2pjPXA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:09:19 2025 by rpki-client