Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a29128d-8f59-311a-9f15-76816fa4b848.roa
File: 8a29128d-8f59-311a-9f15-76816fa4b848.roa (raw, json)
Hash identifier: TJkSjnk0j8CES2KFveMfUmZPRxOhhAtbH731vpP+n3w=
Subject key identifier: 7F:74:70:98:A0:44:0D:45:B7:8C:8A:F9:9C:0A:84:F8:5D:9B:64:7D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D63F30BF2F82522BDAF150EF4
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a29128d-8f59-311a-9f15-76816fa4b848.roa
Signing time: Mon 28 Mar 2022 04:00:00 +0000
ROA not before: Mon 28 Mar 2022 04:00:00 +0000
ROA not after: Mon 02 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 40.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:63:f3:0b:f2:f8:25:22:bd:af:15:0e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 28 04:00:00 2022 GMT
Not After : May 2 04:00:00 2022 GMT
Subject: CN=9bdf5d0b-a24c-4b8a-b2c8-a13aab56a86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:05:78:2f:d3:c9:e7:9f:ad:49:55:0e:06:1f:
d4:9f:13:af:fd:fe:7d:94:48:33:a6:2b:3f:b0:af:
48:f0:2a:cd:dd:a3:17:f8:32:34:a5:0f:17:f7:03:
39:4f:0c:df:94:73:0c:23:bf:3e:9a:b2:4d:d3:3c:
43:66:88:22:9f:79:e2:b3:31:a7:bf:00:75:25:24:
4e:17:b6:ed:fc:22:fd:6b:84:13:d4:d9:4d:41:a9:
1e:62:48:5a:8d:01:09:8d:36:b1:cf:0f:e9:2a:2e:
e1:cb:0a:78:64:78:be:09:51:5e:a4:a2:49:e0:b5:
32:a7:2e:bc:89:db:9b:09:08:4c:83:09:c0:42:f3:
b2:43:27:7e:64:b8:fe:2f:83:e5:a0:46:23:e2:37:
e2:27:d4:b2:d4:22:5c:4a:f7:ab:ce:87:1a:58:4a:
62:9c:42:5b:4d:01:d4:90:3a:12:43:51:ce:5e:eb:
ad:b8:7f:c4:2a:6a:6d:30:22:63:3f:63:66:18:e4:
65:49:37:92:26:1f:54:f4:df:a8:15:06:8b:9f:bb:
8a:71:68:ba:0f:a8:01:5a:b8:43:37:d8:df:14:82:
9f:74:c5:03:f9:14:a0:cb:ab:07:9f:5d:ef:02:7e:
0f:6f:97:61:13:61:90:53:f8:62:f9:f7:6d:b9:4d:
44:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:74:70:98:A0:44:0D:45:B7:8C:8A:F9:9C:0A:84:F8:5D:9B:64:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a29128d-8f59-311a-9f15-76816fa4b848.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:ea:b0:bd:0c:d1:9a:8a:8f:c5:da:df:9b:69:6d:22:9a:f9:
f5:2f:d8:6a:1d:81:0a:8f:fb:2d:c1:e9:37:8a:f7:8c:e1:93:
b0:95:1b:4f:92:a7:98:e3:e9:4c:a5:7f:9d:18:c4:7e:bb:f2:
2d:03:72:b6:be:2a:5b:f2:84:25:a4:6f:18:4a:e4:76:7b:ab:
12:b5:7e:b9:d3:66:97:87:e2:49:82:33:fc:ab:2f:fe:1f:2e:
51:1a:c2:ce:52:7f:d8:11:4b:ec:5d:23:92:11:83:e8:5d:4e:
56:8f:02:a6:2e:30:15:c6:b8:28:c2:74:59:ac:48:0d:cc:b4:
64:c9:77:f1:bd:14:eb:a3:ed:d6:c6:cf:fa:cf:c1:25:d5:37:
88:04:9d:cb:eb:2b:3b:ca:3e:b3:b0:ac:94:ef:6f:4d:7b:af:
b1:d9:f5:3f:10:8d:f5:4b:78:1c:8b:2e:4f:1e:4a:4a:99:60:
be:5d:b0:29:22:e2:1b:64:4f:b6:40:5d:a7:71:bd:46:15:2f:
7f:fb:ca:55:a2:42:3f:f6:98:60:02:73:9d:69:c6:27:08:ae:
06:9a:c8:e0:ce:84:3f:72:f8:f1:63:2e:a3:4b:42:f6:d0:29:
3d:d0:d8:3e:91:a1:69:3a:fe:82:31:d2:f5:b3:50:4b:04:e4:
f9:4c:37:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1j8wvy+CUiva8VDvQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyODA0MDAwMFoXDTIyMDUwMjA0MDAwMFowLzEtMCsGA1UEAxMk
OWJkZjVkMGItYTI0Yy00YjhhLWIyYzgtYTEzYWFiNTZhODZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQV4L9PJ55+tSVUOBh/UnxOv/f59lEgzpis/
sK9I8CrN3aMX+DI0pQ8X9wM5TwzflHMMI78+mrJN0zxDZogin3niszGnvwB1JSRO
F7bt/CL9a4QT1NlNQakeYkhajQEJjTaxzw/pKi7hywp4ZHi+CVFepKJJ4LUypy68
idubCQhMgwnAQvOyQyd+ZLj+L4PloEYj4jfiJ9Sy1CJcSverzocaWEpinEJbTQHU
kDoSQ1HOXuutuH/EKmptMCJjP2NmGORlSTeSJh9U9N+oFQaLn7uKcWi6D6gBWrhD
N9jfFIKfdMUD+RSgy6sHn13vAn4Pb5dhE2GQU/hi+fdtuU1EKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFH90cJigRA1Ft4yK+ZwKhPhdm2R9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGEyOTEyOGQtOGY1OS0z
MTFhLTlmMTUtNzY4MTZmYTRiODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAuqwvQzRmoqPxdrfm2ltIpr59S/Yah2BCo/7LcHpN4r3jOGTsJUbT5Kn
mOPpTKV/nRjEfrvyLQNytr4qW/KEJaRvGErkdnurErV+udNml4fiSYIz/Ksv/h8u
URrCzlJ/2BFL7F0jkhGD6F1OVo8Cpi4wFca4KMJ0WaxIDcy0ZMl38b0U66Pt1sbP
+s/BJdU3iASdy+srO8o+s7CslO9vTXuvsdn1PxCN9Ut4HIsuTx5KSplgvl2wKSLi
G2RPtkBdp3G9RhUvf/vKVaJCP/aYYAJznWnGJwiuBprI4M6EP3L48WMuo0tC9tAp
PdDYPpGhaTr+gjHS9bNQSwTk+Uw3uA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:21 2025 by rpki-client