Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90a565e3-cad7-3b2e-83fa-15b64ec2dcaa.roa
File: 90a565e3-cad7-3b2e-83fa-15b64ec2dcaa.roa (raw, json)
Hash identifier: OBvaI87HsPJeuz5dOzxj7mNuzULrXdJC0WOAf/axrGw=
Subject key identifier: F2:95:DE:7C:2A:0D:23:5F:6C:DE:4C:88:09:B8:9A:27:CB:A1:E9:18
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403AFE20FC9017A38E56F4AA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90a565e3-cad7-3b2e-83fa-15b64ec2dcaa.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 129.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:fe:20:fc:90:17:a3:8e:56:f4:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=3f535eb8-d75d-4f44-a3d8-31d4cfe3cb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8c:b8:ef:20:50:f5:db:9f:7a:44:c9:0f:ef:
7a:cd:e2:05:10:d7:63:36:bc:a4:7c:96:66:30:81:
21:52:65:df:59:0a:66:3d:6f:34:03:9a:cb:74:99:
da:3d:74:85:f5:a8:6b:92:18:8e:44:f0:a4:4e:5f:
1d:14:9b:64:af:02:9e:0e:e6:ba:74:d6:61:77:0f:
a0:e3:8d:0a:21:fb:4a:62:e8:6b:2b:f9:a6:fe:91:
0c:f9:15:bf:77:24:64:65:4d:b0:10:dd:9e:3b:64:
c6:e6:9c:40:8b:33:d8:a7:f7:cd:e6:66:36:71:a3:
07:68:77:40:a0:29:da:84:cb:ff:4c:31:48:42:66:
7d:4a:29:a5:8a:17:6a:19:b5:bb:6f:be:92:56:9e:
73:c4:12:d5:09:91:e1:f1:ed:38:b9:ca:d2:8e:4a:
c3:ac:95:45:ad:64:d1:2e:89:60:84:ab:7d:18:3e:
86:ca:f7:bc:b0:59:96:31:f4:9e:76:f0:2b:d8:fb:
22:e7:46:3a:90:5a:db:3b:b6:32:ab:d7:16:70:74:
fb:5b:bb:39:ff:27:11:75:53:2d:ab:83:8a:6e:39:
8e:54:71:c6:d2:55:f2:35:23:48:30:c4:34:ac:b6:
17:83:55:9b:89:db:c1:28:d9:8e:d0:c2:69:4f:21:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:95:DE:7C:2A:0D:23:5F:6C:DE:4C:88:09:B8:9A:27:CB:A1:E9:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90a565e3-cad7-3b2e-83fa-15b64ec2dcaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:8c:b8:d1:da:1f:f6:8f:bf:00:d7:15:39:1c:95:35:43:5f:
09:53:8c:1f:df:56:28:ce:0f:ce:d4:d5:e0:4b:00:94:47:17:
76:40:b3:3f:27:2b:37:06:36:87:c9:8f:fb:02:b6:0f:17:05:
25:4e:ba:c6:62:fa:74:df:a0:7b:3e:e1:f2:0f:8d:9b:62:ca:
6d:e2:33:c2:96:c8:df:b5:51:31:ba:99:9c:50:aa:09:49:89:
6c:fb:e8:2f:62:80:cd:5e:c8:82:7a:0c:b5:32:78:39:5c:45:
a3:f6:50:87:ec:a2:e9:12:57:50:ed:a3:54:09:14:02:79:71:
53:13:84:e6:a7:50:6d:ef:2d:f2:f8:db:7b:1e:0b:b9:7e:24:
80:ec:e7:ab:df:aa:5f:a3:25:11:5f:ec:8d:c5:cc:8e:14:2d:
db:c1:de:5a:81:e9:54:1e:91:aa:79:8f:1b:fc:75:08:2a:42:
ab:ac:56:7e:2c:5d:d6:4f:aa:c4:90:aa:8e:ba:21:6a:7d:cf:
4b:75:a1:33:08:70:f5:f6:53:42:c5:60:c1:45:0b:da:e7:a8:
ee:23:67:a7:15:6a:9b:ec:93:cb:83:2d:65:9d:d0:ba:9b:73:
0a:42:42:e3:ae:ab:56:21:03:8b:99:e3:ad:50:33:0a:9d:eb:
a7:47:d4:fd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA6/iD8kBejjlb0qoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMzEyMDAwMFoXDTIzMDExODA1MDAwMFowLzEtMCsGA1UEAxMk
M2Y1MzVlYjgtZDc1ZC00ZjQ0LWEzZDgtMzFkNGNmZTNjYjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4y47yBQ9dufekTJD+96zeIFENdjNrykfJZm
MIEhUmXfWQpmPW80A5rLdJnaPXSF9ahrkhiORPCkTl8dFJtkrwKeDua6dNZhdw+g
440KIftKYuhrK/mm/pEM+RW/dyRkZU2wEN2eO2TG5pxAizPYp/fN5mY2caMHaHdA
oCnahMv/TDFIQmZ9SimlihdqGbW7b76SVp5zxBLVCZHh8e04ucrSjkrDrJVFrWTR
LolghKt9GD6Gyve8sFmWMfSedvAr2Psi50Y6kFrbO7Yyq9cWcHT7W7s5/ycRdVMt
q4OKbjmOVHHG0lXyNSNIMMQ0rLYXg1WbidvBKNmO0MJpTyEzmwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPKV3nwqDSNfbN5MiAm4mifLoekYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTBhNTY1ZTMtY2FkNy0z
YjJlLTgzZmEtMTViNjRlYzJkY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAge8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQoy40dof9o+/ANcVORyVNUNfCVOMH99WKM4PztTV4EsAlEcXdkCzPycr
NwY2h8mP+wK2DxcFJU66xmL6dN+gez7h8g+Nm2LKbeIzwpbI37VRMbqZnFCqCUmJ
bPvoL2KAzV7IgnoMtTJ4OVxFo/ZQh+yi6RJXUO2jVAkUAnlxUxOE5qdQbe8t8vjb
ex4LuX4kgOznq9+qX6MlEV/sjcXMjhQt28HeWoHpVB6RqnmPG/x1CCpCq6xWfixd
1k+qxJCqjrohan3PS3WhMwhw9fZTQsVgwUUL2ueo7iNnpxVqm+yTy4MtZZ3Quptz
CkJC466rViEDi5njrVAzCp3rp0fU/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:58 2025 by rpki-client