Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9412afbe-7731-30ec-a280-ed7f944e2eb5.roa
File: 9412afbe-7731-30ec-a280-ed7f944e2eb5.roa (raw, json)
Hash identifier: Ob/5DgRQt6ocVnPs2/SdTUI8Rf0MdQffJT/jAYlp4PI=
Subject key identifier: D3:6B:E0:88:BA:15:81:E4:22:6E:54:15:97:4B:1B:BE:F3:E1:96:76
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403AAC250B9F8BEC1407BD4000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9412afbe-7731-30ec-a280-ed7f944e2eb5.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 146.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:ac:25:0b:9f:8b:ec:14:07:bd:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=cfec5d41-269d-4779-9d42-2dd9802fbb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:57:79:c9:59:2f:96:45:62:5b:b5:d0:09:
da:1a:d7:86:78:8d:60:6e:75:96:1b:1f:c2:29:2e:
2b:f1:94:a9:f8:41:34:74:81:1f:3d:a3:1f:2e:95:
78:95:1c:ac:0f:8b:ac:28:34:2c:f5:6c:ab:ec:4b:
fc:ad:10:ca:34:1c:83:ac:f2:e9:4e:5b:fc:15:43:
8c:e3:26:7a:9a:12:69:1b:d9:8e:9d:ba:6c:74:96:
97:b0:41:58:41:b8:e8:c5:54:8e:d5:5a:da:bf:2f:
22:4c:29:0a:45:ec:8e:f3:6e:d6:ef:c0:60:36:bc:
6e:6d:d7:19:18:37:dc:80:35:e0:a0:e9:32:f9:1c:
46:15:be:8e:be:06:9a:99:29:50:ae:06:73:1b:0f:
ab:51:02:84:59:34:5e:d7:a7:7a:18:16:60:06:6d:
c3:50:a7:61:3e:b3:97:f6:dd:00:50:96:64:e6:2a:
02:32:ac:2c:a8:fc:af:48:e3:cd:f1:84:48:35:42:
a6:38:1e:98:82:1d:81:cb:cf:69:2b:0c:09:75:e9:
9f:76:ee:0d:38:a4:65:21:d6:d2:c6:47:bd:0a:fd:
9e:8b:0c:a9:a9:c5:5f:1c:d5:ea:51:5a:b7:c2:6a:
1b:a7:90:6f:d7:a9:ef:8d:26:5e:97:90:5d:f4:41:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6B:E0:88:BA:15:81:E4:22:6E:54:15:97:4B:1B:BE:F3:E1:96:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9412afbe-7731-30ec-a280-ed7f944e2eb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
146.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:ab:c0:83:f9:03:5b:da:4a:b3:3a:a7:94:7b:04:7d:37:e8:
ad:9e:57:c7:80:87:ea:2d:0d:52:11:e2:08:20:9e:92:72:93:
0a:06:40:d1:7e:44:b0:e0:81:32:98:8c:d9:59:c5:ed:43:4d:
5a:95:d5:e1:50:95:2c:29:c0:a1:75:52:2b:8f:e7:83:7d:f4:
12:4d:7f:07:e6:67:b9:3f:56:cd:d7:9f:2a:71:a3:f1:5f:bc:
1a:42:27:8b:37:20:cb:d8:49:3e:f5:b2:e8:96:cd:6f:29:d5:
3e:d6:eb:b2:1c:71:86:28:8b:ac:2c:ff:60:90:ba:12:d8:6d:
19:17:69:49:51:e4:08:3c:85:c6:fb:4a:33:5e:12:bf:92:68:
8b:b5:b7:93:70:75:a4:f5:fb:41:c0:22:53:c1:66:c3:a8:3f:
4f:f7:da:68:7f:ce:30:e7:94:41:f5:c8:8f:62:05:af:87:e2:
4d:4a:e5:69:b9:51:4b:06:a0:fa:47:de:a6:00:f5:1e:b0:7e:
04:98:ea:1a:05:ff:bb:c4:43:76:7c:da:69:65:d3:f6:90:31:
c3:bc:1e:4a:47:f6:83:5d:40:0a:8b:44:d9:f2:3d:9b:cd:7d:
30:42:38:88:4f:2d:7f:51:63:7d:2a:80:c2:6c:13:39:da:91:
a0:ea:21:b7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA6rCULn4vsFAe9QAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMzEyMDAwMFoXDTIzMDExODA1MDAwMFowLzEtMCsGA1UEAxMk
Y2ZlYzVkNDEtMjY5ZC00Nzc5LTlkNDItMmRkOTgwMmZiYjQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuNXeclZL5ZFYlu10AnaGteGeI1gbnWWGx/C
KS4r8ZSp+EE0dIEfPaMfLpV4lRysD4usKDQs9Wyr7Ev8rRDKNByDrPLpTlv8FUOM
4yZ6mhJpG9mOnbpsdJaXsEFYQbjoxVSO1Vravy8iTCkKReyO827W78BgNrxubdcZ
GDfcgDXgoOky+RxGFb6OvgaamSlQrgZzGw+rUQKEWTRe16d6GBZgBm3DUKdhPrOX
9t0AUJZk5ioCMqwsqPyvSOPN8YRINUKmOB6Ygh2By89pKwwJdemfdu4NOKRlIdbS
xke9Cv2eiwypqcVfHNXqUVq3wmobp5Bv16nvjSZel5Bd9EEVBQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNNr4Ii6FYHkIm5UFZdLG77z4ZZ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTQxMmFmYmUtNzczMS0z
MGVjLWEyODAtZWQ3Zjk0NGUyZWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkoIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAc6vAg/kDW9pKszqnlHsEfTforZ5Xx4CH6i0NUhHiCCCeknKTCgZA0X5E
sOCBMpiM2VnF7UNNWpXV4VCVLCnAoXVSK4/ng330Ek1/B+ZnuT9WzdefKnGj8V+8
GkInizcgy9hJPvWy6JbNbynVPtbrshxxhiiLrCz/YJC6EthtGRdpSVHkCDyFxvtK
M14Sv5Joi7W3k3B1pPX7QcAiU8Fmw6g/T/faaH/OMOeUQfXIj2IFr4fiTUrlablR
Swag+kfepgD1HrB+BJjqGgX/u8RDdnzaaWXT9pAxw7weSkf2g11ACotE2fI9m819
MEI4iE8tf1FjfSqAwmwTOdqRoOohtw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:17 2025 by rpki-client