Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8efe2831-254d-333d-8c1b-86a3aa530377.roa
File: 8efe2831-254d-333d-8c1b-86a3aa530377.roa (raw, json)
Hash identifier: t6kE/Gkfy8Z12KjDq0HIqEx52Dg8prGLhUC+wTsz170=
Subject key identifier: 67:D4:02:EB:38:05:FC:4E:FE:61:0E:D9:8B:FC:EE:1A:30:BC:37:D5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840251837A6594D5140A95EE1E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8efe2831-254d-333d-8c1b-86a3aa530377.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 132.223.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:25:18:37:a6:59:4d:51:40:a9:5e:e1:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=fdcd4e42-c083-4441-acde-6bf75a19f8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:42:03:ce:57:04:18:a0:14:d1:35:99:75:
3b:7a:8b:47:83:db:a5:a1:59:27:e3:cf:23:20:ed:
99:62:5e:95:43:be:7b:50:ef:89:bb:33:38:e5:2d:
16:e9:b3:82:60:2b:c3:05:73:4b:44:16:78:94:a2:
27:cb:57:66:79:ab:c2:af:a9:c7:2f:f6:47:44:77:
a7:9a:6c:16:39:52:4d:5a:16:0b:17:cf:37:d0:1e:
0f:68:45:ee:bf:9c:16:0d:72:ad:d6:36:26:15:c8:
56:41:18:a7:c6:22:1b:4d:d6:4e:23:2d:b0:de:ca:
f8:4b:ea:7c:b4:5d:bd:70:27:bc:80:72:78:2c:bf:
d2:7d:98:a0:20:26:91:f1:83:b3:73:70:8b:29:d2:
42:45:c1:c9:13:8a:ce:1c:b7:3a:82:88:d2:f3:ed:
8e:5c:98:b1:be:61:fb:27:29:23:5d:47:5a:1f:70:
26:c7:4f:ba:c3:e1:97:ba:8f:b9:25:3f:cc:39:74:
70:b6:bc:53:42:30:d3:e9:c1:42:a6:94:c7:35:9a:
e2:42:a1:31:ca:5e:1b:0c:c8:6a:8e:9d:36:f6:f4:
95:78:2d:40:b2:25:7c:4e:d5:15:af:fb:4f:60:97:
5f:32:8d:e1:85:67:2b:e2:b4:eb:f8:f2:c4:77:53:
6f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D4:02:EB:38:05:FC:4E:FE:61:0E:D9:8B:FC:EE:1A:30:BC:37:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8efe2831-254d-333d-8c1b-86a3aa530377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
132.223.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:05:73:b8:1b:8a:5e:89:61:c5:df:b8:61:31:a2:2d:b8:ce:
c3:b0:7e:8e:e6:f9:98:5c:20:c7:c7:07:79:a8:45:a3:19:76:
1c:89:e5:bc:f3:96:c8:bf:50:07:30:f3:85:b8:f7:e5:2c:6d:
d8:ff:04:24:70:39:fe:b7:35:0b:f6:d4:b4:4c:78:07:5b:68:
3a:78:04:63:06:ac:a7:d1:74:22:03:c0:6a:ce:21:4b:df:84:
ad:07:c2:19:69:72:f2:11:39:13:bd:e2:0d:c8:86:37:a7:8c:
96:4a:13:4a:9d:1e:78:7f:de:c7:84:50:d9:72:3a:85:58:5b:
fe:e9:59:23:5f:51:d8:d1:52:68:da:e4:13:5d:4b:d3:cf:8b:
9c:13:18:cc:f0:3f:b5:6f:9e:24:bd:cf:ea:e6:88:7b:8f:50:
7c:54:0b:0e:a5:1e:3c:01:3e:35:2a:1b:79:0d:6a:49:58:54:
3e:d5:08:b2:11:16:cb:1d:85:67:2b:2d:8c:e2:6f:70:cf:e8:
e4:4e:ef:53:1c:86:65:ac:b1:f3:59:a4:fe:6b:ed:13:ea:43:
b9:2d:d7:2a:b1:cf:b7:cb:46:a3:89:1a:88:f8:c0:e8:dc:b3:
54:8c:a9:50:f4:bd:f6:47:31:59:0e:b9:e5:0f:e5:79:20:d7:
63:00:69:54
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAlGDemWU1RQKle4eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwNTEyMDAwMFoXDTIzMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZmRjZDRlNDItYzA4My00NDQxLWFjZGUtNmJmNzVhMTlmOGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNpCA85XBBigFNE1mXU7eotHg9uloVkn488j
IO2ZYl6VQ757UO+JuzM45S0W6bOCYCvDBXNLRBZ4lKIny1dmeavCr6nHL/ZHRHen
mmwWOVJNWhYLF8830B4PaEXuv5wWDXKt1jYmFchWQRinxiIbTdZOIy2w3sr4S+p8
tF29cCe8gHJ4LL/SfZigICaR8YOzc3CLKdJCRcHJE4rOHLc6gojS8+2OXJixvmH7
JykjXUdaH3Amx0+6w+GXuo+5JT/MOXRwtrxTQjDT6cFCppTHNZriQqExyl4bDMhq
jp029vSVeC1AsiV8TtUVr/tPYJdfMo3hhWcr4rTr+PLEd1NvKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGfUAus4BfxO/mEO2Yv87howvDfVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGVmZTI4MzEtMjU0ZC0z
MzNkLThjMWItODZhM2FhNTMwMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhN8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWgVzuBuKXolhxd+4YTGiLbjOw7B+jub5mFwgx8cHeahFoxl2HInlvPOW
yL9QBzDzhbj35Sxt2P8EJHA5/rc1C/bUtEx4B1toOngEYwasp9F0IgPAas4hS9+E
rQfCGWly8hE5E73iDciGN6eMlkoTSp0eeH/ex4RQ2XI6hVhb/ulZI19R2NFSaNrk
E11L08+LnBMYzPA/tW+eJL3P6uaIe49QfFQLDqUePAE+NSobeQ1qSVhUPtUIshEW
yx2FZystjOJvcM/o5E7vUxyGZayx81mk/mvtE+pDuS3XKrHPt8tGo4kaiPjA6Nyz
VIypUPS99kcxWQ655Q/leSDXYwBpVA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:23 2025 by rpki-client