Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91c1b303-a711-38e0-8720-afd3661c6a27.roa
File: 91c1b303-a711-38e0-8720-afd3661c6a27.roa (raw, json)
Hash identifier: VUZtF5c4RvOYpNOFQX+G4yj+g2hje1L2DLbhcZGAJ3g=
Subject key identifier: C2:4D:14:F7:34:1E:CE:A5:99:84:D0:28:03:F1:0E:02:7B:E3:72:0F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EEB23D2257EA85DB306E85230
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91c1b303-a711-38e0-8720-afd3661c6a27.roa
Signing time: Mon 15 Aug 2022 12:00:00 +0000
ROA not before: Mon 15 Aug 2022 12:00:00 +0000
ROA not after: Tue 20 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 40.178.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:eb:23:d2:25:7e:a8:5d:b3:06:e8:52:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 15 12:00:00 2022 GMT
Not After : Sep 20 04:00:00 2022 GMT
Subject: CN=f075ee14-9d66-49d4-aa99-433fc765e0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:95:71:2e:fd:56:95:5b:58:b3:99:4b:c3:af:
be:f4:b2:b0:e8:b7:d9:b1:73:75:20:51:74:04:ad:
59:f3:25:e9:af:b7:54:74:2d:e9:98:2e:dc:64:fe:
a4:92:5b:36:68:91:26:7d:37:ef:20:1f:79:92:38:
f9:4f:6d:ab:2c:02:ee:70:86:17:b4:cb:16:94:c8:
96:ed:38:f4:66:21:1b:da:05:fb:15:6a:b2:db:80:
50:a9:10:ff:66:b4:7e:82:96:82:6a:ad:3a:a0:6b:
b1:85:de:c2:0d:77:ec:26:c3:4e:eb:bf:67:66:5d:
eb:8e:2e:cb:f9:c8:91:3d:02:48:22:69:3b:0d:60:
f5:99:a5:18:2a:5b:22:1b:0a:d7:83:eb:75:f5:64:
8c:27:dc:ed:0d:90:2b:e3:b1:6e:2d:10:ea:a0:03:
e6:9a:57:77:f6:cd:66:dc:29:f0:f1:f7:de:52:7c:
5a:40:76:4c:12:ce:fb:f8:ed:07:92:98:7e:a2:45:
e3:40:eb:4f:55:79:85:de:c5:b9:ed:51:f7:fd:5c:
a7:b8:6b:e7:ec:73:2d:1b:ea:ee:7c:09:48:d6:06:
60:ef:59:af:c5:97:db:57:83:7b:a0:10:d0:f6:73:
ea:5b:31:03:dc:ef:c7:81:6d:7c:4f:e7:08:58:4b:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4D:14:F7:34:1E:CE:A5:99:84:D0:28:03:F1:0E:02:7B:E3:72:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91c1b303-a711-38e0-8720-afd3661c6a27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.178.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:53:bf:4a:2f:b6:9e:f1:b1:b4:5f:52:3c:d9:a5:5e:5a:27:
5a:46:4f:23:73:43:45:a0:be:2f:6b:43:34:d1:71:e5:67:2f:
dd:84:5a:aa:5f:b9:66:be:3c:ba:35:c9:33:05:9e:f1:f1:fa:
35:b9:2c:e2:bf:a4:5c:e8:3d:71:ac:3e:9d:9f:73:51:a1:fe:
9e:08:40:82:ba:6f:81:55:8a:7c:29:5d:19:61:82:ea:9f:4a:
af:0c:fc:1f:49:9e:a3:ab:2c:71:4c:a8:ca:c2:ae:bd:6f:1f:
a7:9d:6f:44:37:62:78:7b:c1:72:86:7c:c5:10:c8:62:8a:8b:
8b:b9:66:92:3a:cc:b9:67:c1:77:95:37:46:0c:63:6e:91:ab:
43:9d:f3:23:02:53:00:45:2b:62:10:5f:01:5e:6f:31:db:f5:
b8:a2:09:87:fa:db:a4:c0:61:45:91:cf:4b:11:99:a0:f4:c6:
f6:1e:e4:89:ee:78:96:da:fb:5b:99:ed:82:95:b0:81:41:ce:
39:78:7f:71:7c:3d:9a:cf:27:2d:b4:ee:1f:f6:07:7f:c8:ce:
2d:05:0d:98:84:e6:ba:47:fc:f9:89:11:54:b6:de:04:68:eb:
2b:06:8f:2d:69:ae:9a:bc:40:61:4c:03:74:f8:f9:53:83:11:
52:ad:94:41
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7rI9IlfqhdswboUjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxNTEyMDAwMFoXDTIyMDkyMDA0MDAwMFowLzEtMCsGA1UEAxMk
ZjA3NWVlMTQtOWQ2Ni00OWQ0LWFhOTktNDMzZmM3NjVlMGFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpVxLv1WlVtYs5lLw6++9LKw6LfZsXN1IFF0
BK1Z8yXpr7dUdC3pmC7cZP6kkls2aJEmfTfvIB95kjj5T22rLALucIYXtMsWlMiW
7Tj0ZiEb2gX7FWqy24BQqRD/ZrR+gpaCaq06oGuxhd7CDXfsJsNO679nZl3rji7L
+ciRPQJIImk7DWD1maUYKlsiGwrXg+t19WSMJ9ztDZAr47FuLRDqoAPmmld39s1m
3Cnw8ffeUnxaQHZMEs77+O0Hkph+okXjQOtPVXmF3sW57VH3/VynuGvn7HMtG+ru
fAlI1gZg71mvxZfbV4N7oBDQ9nPqWzED3O/HgW18T+cIWEsHqQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMJNFPc0Hs6lmYTQKAPxDgJ743IPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTFjMWIzMDMtYTcxMS0z
OGUwLTg3MjAtYWZkMzY2MWM2YTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjlO/Si+2nvGxtF9SPNmlXlonWkZPI3NDRaC+L2tDNNFx5Wcv3YRaql+5
Zr48ujXJMwWe8fH6Nbks4r+kXOg9caw+nZ9zUaH+nghAgrpvgVWKfCldGWGC6p9K
rwz8H0meo6sscUyoysKuvW8fp51vRDdieHvBcoZ8xRDIYoqLi7lmkjrMuWfBd5U3
RgxjbpGrQ53zIwJTAEUrYhBfAV5vMdv1uKIJh/rbpMBhRZHPSxGZoPTG9h7kie54
ltr7W5ntgpWwgUHOOXh/cXw9ms8nLbTuH/YHf8jOLQUNmITmukf8+YkRVLbeBGjr
KwaPLWmumrxAYUwDdPj5U4MRUq2UQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:59 2025 by rpki-client