Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/92e3b1f3-706d-3824-a8b1-c642cbede6f1.roa
File: 92e3b1f3-706d-3824-a8b1-c642cbede6f1.roa (raw, json)
Hash identifier: Z+kzjbyHP0ht/vABrK3YPk1v2LLqlQGWM2aqn0+TEt8=
Subject key identifier: F3:B2:9D:D2:9C:9B:64:06:AE:E2:67:E9:3D:8C:A1:8A:1E:77:9F:21
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409313C736075F41E1BFA1B7A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/92e3b1f3-706d-3824-a8b1-c642cbede6f1.roa
Signing time: Fri 13 Jan 2023 12:00:00 +0000
ROA not before: Fri 13 Jan 2023 12:00:00 +0000
ROA not after: Sat 18 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 99.85.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:93:13:c7:36:07:5f:41:e1:bf:a1:b7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 13 12:00:00 2023 GMT
Not After : Feb 18 05:00:00 2023 GMT
Subject: CN=cb495a7e-aaf1-4651-8b84-80c85bd336e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:65:57:bf:d0:e2:dc:e7:b8:20:51:1f:a4:bf:
d7:fa:5f:a1:12:81:10:e7:b4:f5:8e:62:10:b8:02:
fb:b5:78:fc:6d:af:d1:93:bd:e4:4e:bc:2e:5f:a4:
bb:55:ae:86:aa:fb:00:b4:e9:52:97:a6:1f:8a:20:
47:51:47:49:ec:a2:95:75:f2:65:b1:25:82:db:27:
6f:a9:08:74:2b:08:1d:ec:1e:be:02:61:4e:0d:b1:
eb:8f:01:b6:a4:1b:24:23:f2:84:e6:dd:11:ed:0c:
44:0a:d6:c0:61:5d:a0:25:d1:f8:79:51:73:5f:89:
df:dc:e8:ca:7c:53:24:2f:f3:98:22:64:d4:27:49:
17:5a:a6:80:e9:8e:3f:b4:15:38:a2:6e:0b:54:36:
e3:84:77:fb:24:96:b6:a5:da:cc:e1:1b:31:fd:9d:
3b:d0:30:f0:7e:f2:a2:b7:3e:ea:1e:0e:aa:f7:61:
54:d5:86:83:01:fe:b2:7f:44:e3:e3:9b:06:4e:d8:
e7:04:c8:ea:4a:f5:67:c7:34:8f:c4:a2:63:32:f9:
96:32:f7:17:48:05:84:53:b4:ba:64:f2:e5:83:98:
7d:22:07:a8:b8:92:fc:37:88:c7:aa:11:b1:27:01:
fc:be:e0:6f:ae:4d:54:33:58:19:cc:c5:4b:9c:ef:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B2:9D:D2:9C:9B:64:06:AE:E2:67:E9:3D:8C:A1:8A:1E:77:9F:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/92e3b1f3-706d-3824-a8b1-c642cbede6f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.85.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:04:27:f1:24:83:91:44:89:27:28:ca:a0:27:68:28:87:69:
af:dc:37:60:66:af:e9:a5:c7:e3:55:d1:83:39:f3:3f:64:22:
27:f1:20:21:bb:dd:f0:54:00:16:d8:41:01:bd:43:9a:6e:a1:
8a:69:5c:0b:8c:ea:fc:dc:44:7d:65:08:df:c0:b9:0c:24:bb:
e7:c7:dc:a9:a1:ae:20:84:91:09:bd:e8:3d:6f:0b:fc:c7:ad:
72:39:45:52:10:8b:e8:85:c7:50:1b:7c:0d:c1:a2:75:4f:ac:
7c:e4:13:d6:8a:4d:35:ac:cf:24:70:04:dc:32:52:6b:1f:4e:
11:f1:ce:b1:70:59:5a:e2:db:b7:f9:a3:76:39:6e:b1:ed:e9:
98:ad:33:65:21:35:bc:fa:fa:13:44:fe:c6:b5:9b:30:99:ee:
0a:ac:c0:61:8a:8c:d8:d0:a1:70:c7:08:e9:fa:c1:a0:56:26:
7b:7f:56:ee:6d:04:33:7b:6c:7c:f3:d9:8d:f0:a1:ae:f4:94:
32:79:d0:24:c8:2a:92:10:b3:73:fd:43:94:49:7a:2b:71:b2:
e6:35:2f:42:77:d4:a9:3a:75:2b:bf:43:f6:06:ef:52:41:06:
9e:38:cf:e3:a1:c1:06:fb:34:4d:0b:e3:09:be:2f:22:05:27:
48:5a:60:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECTE8c2B19B4b+ht6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMzEyMDAwMFoXDTIzMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
Y2I0OTVhN2UtYWFmMS00NjUxLThiODQtODBjODViZDMzNmUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2VXv9Di3Oe4IFEfpL/X+l+hEoEQ57T1jmIQ
uAL7tXj8ba/Rk73kTrwuX6S7Va6GqvsAtOlSl6YfiiBHUUdJ7KKVdfJlsSWC2ydv
qQh0Kwgd7B6+AmFODbHrjwG2pBskI/KE5t0R7QxECtbAYV2gJdH4eVFzX4nf3OjK
fFMkL/OYImTUJ0kXWqaA6Y4/tBU4om4LVDbjhHf7JJa2pdrM4Rsx/Z070DDwfvKi
tz7qHg6q92FU1YaDAf6yf0Tj45sGTtjnBMjqSvVnxzSPxKJjMvmWMvcXSAWEU7S6
ZPLlg5h9IgeouJL8N4jHqhGxJwH8vuBvrk1UM1gZzMVLnO+5fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPOyndKcm2QGruJn6T2MoYoed58hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTJlM2IxZjMtNzA2ZC0z
ODI0LWE4YjEtYzY0MmNiZWRlNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY1WAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQEJ/Ekg5FEiScoyqAnaCiHaa/cN2Bmr+mlx+NV0YM58z9kIifxICG7
3fBUABbYQQG9Q5puoYppXAuM6vzcRH1lCN/AuQwku+fH3KmhriCEkQm96D1vC/zH
rXI5RVIQi+iFx1AbfA3BonVPrHzkE9aKTTWszyRwBNwyUmsfThHxzrFwWVri27f5
o3Y5brHt6ZitM2UhNbz6+hNE/sa1mzCZ7gqswGGKjNjQoXDHCOn6waBWJnt/Vu5t
BDN7bHzz2Y3woa70lDJ50CTIKpIQs3P9Q5RJeitxsuY1L0J31Kk6dSu/Q/YG71JB
Bp44z+OhwQb7NE0L4wm+LyIFJ0haYMI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:09:38 2025 by rpki-client