Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91da9c6c-3007-3a3e-9b74-0adb7f6a5728.roa
File: 91da9c6c-3007-3a3e-9b74-0adb7f6a5728.roa (raw, json)
Hash identifier: lFvxjnyUzZXgDuMjnT6MoQBbeDJybty71h2XtSbMXD0=
Subject key identifier: A8:2F:3D:1B:06:53:76:D6:7A:91:FF:59:D2:B5:BC:88:33:B8:F1:8D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBF494C8A379C5D417953C98A
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91da9c6c-3007-3a3e-9b74-0adb7f6a5728.roa
Signing time: Sat 30 Jul 2022 12:00:00 +0000
ROA not before: Sat 30 Jul 2022 12:00:00 +0000
ROA not after: Sun 04 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bf:49:4c:8a:37:9c:5d:41:79:53:c9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 30 12:00:00 2022 GMT
Not After : Sep 4 04:00:00 2022 GMT
Subject: CN=35633c52-23bc-4f93-bf31-be79b91973a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:73:ae:68:af:07:00:33:9a:bf:20:ff:86:ec:
12:d6:ad:23:55:f8:78:34:59:a7:e5:43:13:1e:c6:
69:ff:51:ea:dc:8d:3a:6a:73:6f:0e:ea:8b:d8:0d:
de:3f:88:f7:e7:2e:e2:26:ad:15:18:0c:1a:26:59:
e6:2d:58:1d:1b:32:54:00:80:8e:f5:1c:87:e8:7c:
f0:f1:55:09:ef:f4:f9:40:3f:d9:7e:73:2b:05:cb:
8b:3f:43:40:aa:e3:a7:2d:08:71:4a:00:3a:90:ca:
3d:4a:29:f7:e3:21:d4:24:19:33:89:9b:f6:85:26:
58:e2:37:8b:1c:e3:fb:30:15:f3:4d:ab:08:70:c7:
cc:64:33:12:84:09:06:a4:fc:fc:08:25:22:26:9e:
53:03:5d:b7:e2:9f:bc:13:b5:ed:5b:12:24:fa:b6:
e2:26:f7:a5:3f:e6:b0:fa:b3:8f:45:0c:f8:54:ac:
39:8c:90:4a:70:f1:76:16:2a:4e:2f:97:45:04:68:
c0:0e:47:cb:fe:19:38:42:12:99:ae:5a:78:81:c5:
cb:47:63:37:33:37:6c:cc:b3:19:46:3a:53:26:82:
9c:8d:db:b1:a1:6d:df:59:94:3c:cd:da:8a:b3:05:
8c:fc:6c:fa:8e:04:b1:9c:87:b1:6c:97:a5:45:76:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2F:3D:1B:06:53:76:D6:7A:91:FF:59:D2:B5:BC:88:33:B8:F1:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/91da9c6c-3007-3a3e-9b74-0adb7f6a5728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:da:6d:ba:93:86:36:da:a5:38:33:80:cc:cf:75:96:15:d5:
a0:f9:df:e2:d1:b1:16:19:b9:77:7f:cd:82:c1:07:24:98:b1:
00:97:0f:56:ea:e5:15:65:8f:e5:44:eb:f9:4f:d1:6e:b1:af:
70:cf:6a:83:50:b7:b1:5b:78:43:36:81:b0:5f:1d:ae:f7:2a:
05:1c:53:24:7e:3b:bb:d3:b5:41:ba:a5:fa:8f:04:31:95:46:
5a:c8:93:d7:20:f2:8b:f9:2f:eb:58:28:dc:a3:ff:e1:b6:28:
50:cc:a3:bd:1a:d3:cf:f7:67:78:b6:e6:02:0f:a7:ea:dd:5e:
3c:fe:f6:77:59:14:e8:c1:dd:8c:79:f8:9b:00:25:65:17:26:
2c:43:46:3c:e1:dc:1d:c8:08:49:77:3c:8f:3a:ae:4b:e9:39:
0c:76:9f:f8:55:ec:48:14:9b:d0:ab:f5:f4:27:a1:7d:16:e3:
1d:06:db:2f:c8:0e:b4:63:ad:9c:43:e6:8d:40:b1:54:b8:c8:
bb:3a:f4:37:2f:b2:b5:1d:a0:d8:bc:82:6a:04:54:dd:9d:4f:
72:4b:cb:52:ea:2e:ff:e4:5b:54:fd:0a:85:92:9e:cb:0e:d6:
06:c4:7f:1a:6e:66:9e:34:0f:7b:39:c7:26:3a:d9:79:b1:ba:
8e:70:a8:32
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6/SUyKN5xdQXlTyYowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDczMDEyMDAwMFoXDTIyMDkwNDA0MDAwMFowLzEtMCsGA1UEAxMk
MzU2MzNjNTItMjNiYy00ZjkzLWJmMzEtYmU3OWI5MTk3M2E2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHOuaK8HADOavyD/huwS1q0jVfh4NFmn5UMT
HsZp/1Hq3I06anNvDuqL2A3eP4j35y7iJq0VGAwaJlnmLVgdGzJUAICO9RyH6Hzw
8VUJ7/T5QD/ZfnMrBcuLP0NAquOnLQhxSgA6kMo9Sin34yHUJBkziZv2hSZY4jeL
HOP7MBXzTasIcMfMZDMShAkGpPz8CCUiJp5TA1234p+8E7XtWxIk+rbiJvelP+aw
+rOPRQz4VKw5jJBKcPF2FipOL5dFBGjADkfL/hk4QhKZrlp4gcXLR2M3MzdszLMZ
RjpTJoKcjduxoW3fWZQ8zdqKswWM/Gz6jgSxnIexbJelRXaXvQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKgvPRsGU3bWepH/WdK1vIgzuPGNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTFkYTljNmMtMzAwNy0z
YTNlLTliNzQtMGFkYjdmNmE1NzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCZBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkdptupOGNtqlODOAzM91lhXVoPnf4tGxFhm5d3/NgsEHJJixAJcPVurl
FWWP5UTr+U/RbrGvcM9qg1C3sVt4QzaBsF8drvcqBRxTJH47u9O1Qbql+o8EMZVG
WsiT1yDyi/kv61go3KP/4bYoUMyjvRrTz/dneLbmAg+n6t1ePP72d1kU6MHdjHn4
mwAlZRcmLENGPOHcHcgISXc8jzquS+k5DHaf+FXsSBSb0Kv19CehfRbjHQbbL8gO
tGOtnEPmjUCxVLjIuzr0Ny+ytR2g2LyCagRU3Z1PckvLUuou/+RbVP0KhZKeyw7W
BsR/Gm5mnjQPeznHJjrZebG6jnCoMg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:51 2025 by rpki-client