Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e843142-4fb0-3d45-85e5-741e9c4e1913.roa
File: 8e843142-4fb0-3d45-85e5-741e9c4e1913.roa (raw, json)
Hash identifier: Wd6RCVovMpv4IHHdVRt9/hEnOEpWyCL8JzhPONql6Cc=
Subject key identifier: 05:A0:A0:F1:2B:3B:3F:6D:1C:40:46:EE:C9:25:62:90:16:BF:4A:EA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404E9F2D06327D53825A9A13C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e843142-4fb0-3d45-85e5-741e9c4e1913.roa
Signing time: Tue 20 Dec 2022 18:48:09 +0000
ROA not before: Tue 20 Dec 2022 18:48:09 +0000
ROA not after: Wed 25 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 204.45.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4e:9f:2d:06:32:7d:53:82:5a:9a:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 20 18:48:09 2022 GMT
Not After : Jan 25 05:00:00 2023 GMT
Subject: CN=76b2974a-603e-4465-b60c-7136792d5930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:19:b6:41:9a:67:69:fd:86:fb:79:fe:22:
b8:e4:25:87:5b:60:2e:d1:2b:46:fa:0f:a5:11:04:
0a:04:45:19:04:6c:94:ae:7f:a8:93:98:40:49:2c:
b8:46:8c:5d:86:39:6f:a4:69:23:28:de:db:05:f2:
7d:3d:bb:cc:2b:a4:18:a6:eb:1f:dd:79:18:11:4a:
b5:6d:c8:25:37:3b:37:e0:62:7f:43:0b:8e:67:86:
82:7b:ab:f8:b9:e8:0e:25:e4:f8:6f:85:16:5d:df:
b1:6a:38:d1:75:06:97:b7:af:75:0e:71:c0:72:a6:
7b:d4:68:e8:c4:10:4e:60:a5:05:0b:0b:3d:d4:ed:
e1:14:9d:c4:06:ca:a2:f3:c0:f7:1d:d1:f0:38:11:
07:fe:a9:eb:81:38:b1:96:31:d4:d8:b4:69:c0:56:
4f:09:6f:8f:ff:d5:c3:20:bc:34:f6:23:b3:0d:a2:
1d:66:d8:f9:7c:49:37:16:46:9e:86:e5:9f:e0:8f:
2c:9c:92:0f:c3:a2:fc:6a:36:65:05:f2:06:1f:82:
8f:f1:26:c4:26:c5:2f:4d:b1:be:d1:ef:8b:b7:89:
28:7f:35:b6:bd:a7:b9:79:ee:6a:ab:0e:c3:30:60:
dc:b3:3f:75:40:f2:32:4d:bf:44:bb:65:e3:53:6d:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A0:A0:F1:2B:3B:3F:6D:1C:40:46:EE:C9:25:62:90:16:BF:4A:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8e843142-4fb0-3d45-85e5-741e9c4e1913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
204.45.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:78:82:3c:55:0a:61:97:af:7f:8e:5a:dd:b4:72:75:e6:15:
bf:e2:2e:8f:2e:10:06:b6:10:d2:1a:c4:e3:c2:68:0a:10:9d:
ac:e0:77:ea:8a:bb:a3:17:57:b0:ad:1d:70:48:fd:a7:1f:ad:
35:c2:52:bd:d7:34:d8:48:ad:8f:79:7f:fd:82:2f:66:bb:45:
77:39:7f:c9:19:ec:7c:65:0a:c7:79:72:85:d9:6d:82:58:42:
28:c2:b5:e2:15:0d:e9:77:5d:c2:14:3d:62:77:e1:e7:2d:eb:
f4:99:54:3d:7a:54:ff:8d:04:5c:79:d1:1d:8b:97:0c:5e:28:
13:5f:0a:44:aa:9f:a8:ac:74:9d:29:cb:b0:02:a5:ad:72:fa:
8f:0e:cc:9c:f2:ae:51:f7:61:f2:df:8c:a2:b8:98:f3:52:fc:
ff:54:66:48:65:8c:22:b5:28:ea:0c:02:4e:60:ba:d2:fd:ef:
8d:41:08:a9:0d:ea:ae:3d:5f:c5:bc:80:db:1e:2a:32:31:21:
96:c9:f0:b5:f3:a9:7d:2e:70:fd:c9:6b:86:e4:2e:d1:28:a7:
49:e5:22:20:6f:51:a8:11:a1:ae:d4:b5:ca:8e:10:8d:dd:dd:
5d:bb:50:f7:ca:59:b7:8f:d5:67:c5:df:47:1c:02:7e:54:52:
81:ad:55:92
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBOny0GMn1TglqaE8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyMDE4NDgwOVoXDTIzMDEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
NzZiMjk3NGEtNjAzZS00NDY1LWI2MGMtNzEzNjc5MmQ1OTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZAZtkGaZ2n9hvt5/iK45CWHW2Au0StG+g+l
EQQKBEUZBGyUrn+ok5hASSy4RoxdhjlvpGkjKN7bBfJ9PbvMK6QYpusf3XkYEUq1
bcglNzs34GJ/QwuOZ4aCe6v4uegOJeT4b4UWXd+xajjRdQaXt691DnHAcqZ71Gjo
xBBOYKUFCws91O3hFJ3EBsqi88D3HdHwOBEH/qnrgTixljHU2LRpwFZPCW+P/9XD
ILw09iOzDaIdZtj5fEk3FkaehuWf4I8snJIPw6L8ajZlBfIGH4KP8SbEJsUvTbG+
0e+Lt4kofzW2vae5ee5qqw7DMGDcsz91QPIyTb9Eu2XjU22vCwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAWgoPErOz9tHEBG7sklYpAWv0rqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGU4NDMxNDItNGZiMC0z
ZDQ1LTg1ZTUtNzQxZTljNGUxOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzC0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaniCPFUKYZevf45a3bRydeYVv+Iujy4QBrYQ0hrE48JoChCdrOB36oq7
oxdXsK0dcEj9px+tNcJSvdc02Eitj3l//YIvZrtFdzl/yRnsfGUKx3lyhdltglhC
KMK14hUN6XddwhQ9Ynfh5y3r9JlUPXpU/40EXHnRHYuXDF4oE18KRKqfqKx0nSnL
sAKlrXL6jw7MnPKuUfdh8t+MoriY81L8/1RmSGWMIrUo6gwCTmC60v3vjUEIqQ3q
rj1fxbyA2x4qMjEhlsnwtfOpfS5w/clrhuQu0SinSeUiIG9RqBGhrtS1yo4Qjd3d
XbtQ98pZt4/VZ8XfRxwCflRSga1Vkg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:46 2025 by rpki-client