Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98f5f6d2-2dfe-35b9-912f-b45da75e8955.roa
File: 98f5f6d2-2dfe-35b9-912f-b45da75e8955.roa (raw, json)
Hash identifier: 8bl1twhfuuZi7LWVC+wYJkZ4P7eKWzOxDbcVZi4SQg8=
Subject key identifier: 30:12:0D:70:13:00:82:7B:CB:A2:FA:64:09:D9:E9:E3:AB:C4:7C:87
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405EE83BB6A54965CA9863B040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98f5f6d2-2dfe-35b9-912f-b45da75e8955.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 151.148.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5e:e8:3b:b6:a5:49:65:ca:98:63:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=3b0999b7-6bde-4f0a-9978-cfd7e04c0263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:a4:71:2e:31:a7:9b:c0:53:81:2a:3b:bc:
50:24:30:e1:3d:fd:29:0c:d2:82:67:5d:53:31:d0:
f6:ee:ad:56:00:c1:7c:c6:5d:1f:c8:67:1a:1c:3e:
73:75:c8:59:f5:89:4a:5a:2a:76:17:16:60:f1:07:
bb:c7:f2:66:83:37:bc:36:6b:e0:17:1e:06:f0:6e:
d6:7d:da:95:57:a6:17:9a:30:61:5e:c4:ec:51:14:
a6:71:aa:98:ea:10:84:3c:82:05:95:2d:ae:30:1e:
c0:15:d9:ea:fd:92:13:43:c4:51:97:82:f6:03:da:
86:d1:5f:8d:09:ba:95:33:be:20:5d:21:fa:52:42:
2e:ec:ed:04:72:7a:da:54:78:89:35:aa:7c:d0:7f:
54:ba:18:c7:0d:2a:e1:05:af:99:36:b1:ea:ad:1e:
9a:92:5c:90:11:07:70:0e:6f:3a:d6:fc:1b:d5:fa:
6c:09:a5:35:93:61:6d:9b:82:f0:24:14:4f:ea:bf:
c5:eb:b4:b7:5a:1d:10:63:3c:30:63:23:0d:fa:22:
55:74:62:f7:b2:11:0c:df:2c:70:75:93:25:9f:c5:
99:a4:f9:4f:68:60:55:df:df:af:ee:ca:70:e7:49:
88:e9:fa:e5:7b:98:f2:a1:a9:b5:f6:0a:09:65:56:
e3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:12:0D:70:13:00:82:7B:CB:A2:FA:64:09:D9:E9:E3:AB:C4:7C:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98f5f6d2-2dfe-35b9-912f-b45da75e8955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.148.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:05:db:c9:6d:3c:f4:7f:ae:9f:35:01:aa:26:56:cd:83:48:
b3:ab:58:7e:91:e4:5b:0b:5e:a6:ef:c2:6c:7e:fa:46:4a:68:
e0:7e:6c:08:1a:99:2e:8a:0d:4c:06:e1:39:47:c1:c3:25:41:
ec:c7:7e:fa:fc:b4:3e:15:68:7b:6c:26:c2:cd:c6:1b:17:8e:
97:96:6e:56:3a:1b:e9:50:cb:1b:b4:64:10:8a:71:f2:df:ed:
9b:0b:05:52:e2:48:f6:47:32:db:a8:6e:aa:13:d9:78:47:e2:
8a:56:44:52:a7:fb:04:a9:e1:02:e6:a7:66:28:72:6d:ee:24:
36:81:13:24:35:5c:fc:f0:d8:fe:1f:c4:97:50:93:97:0f:e9:
4d:b2:5c:ab:4e:22:ab:71:4d:ab:a7:60:1e:fb:b0:f4:6f:89:
16:81:0d:8a:34:a7:c5:72:f5:40:e2:66:df:b3:03:73:31:4d:
c1:93:1e:8b:70:68:90:fd:94:b4:c7:78:11:a4:fe:b1:eb:90:
e1:68:0f:9a:48:90:e8:5f:a2:35:2f:22:a7:2f:de:93:c6:39:
cd:8c:66:c0:4f:f4:6e:a4:c5:45:14:cd:07:ce:bd:71:4c:4f:
a5:5f:e3:b6:ab:c5:a5:67:f7:a9:b1:d1:a8:a2:f6:e0:1a:be:
02:00:1a:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBe6Du2pUllyphjsEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNjEyMDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
M2IwOTk5YjctNmJkZS00ZjBhLTk5NzgtY2ZkN2UwNGMwMjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGGkcS4xp5vAU4EqO7xQJDDhPf0pDNKCZ11T
MdD27q1WAMF8xl0fyGcaHD5zdchZ9YlKWip2FxZg8Qe7x/Jmgze8NmvgFx4G8G7W
fdqVV6YXmjBhXsTsURSmcaqY6hCEPIIFlS2uMB7AFdnq/ZITQ8RRl4L2A9qG0V+N
CbqVM74gXSH6UkIu7O0EcnraVHiJNap80H9UuhjHDSrhBa+ZNrHqrR6aklyQEQdw
Dm861vwb1fpsCaU1k2Ftm4LwJBRP6r/F67S3Wh0QYzwwYyMN+iJVdGL3shEM3yxw
dZMln8WZpPlPaGBV39+v7spw50mI6frle5jyoam19goJZVbj/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDASDXATAIJ7y6L6ZAnZ6eOrxHyHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOThmNWY2ZDItMmRmZS0z
NWI5LTkxMmYtYjQ1ZGE3NWU4OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl5QQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAcF28ltPPR/rp81AaomVs2DSLOrWH6R5FsLXqbvwmx++kZKaOB+bAga
mS6KDUwG4TlHwcMlQezHfvr8tD4VaHtsJsLNxhsXjpeWblY6G+lQyxu0ZBCKcfLf
7ZsLBVLiSPZHMtuobqoT2XhH4opWRFKn+wSp4QLmp2Yocm3uJDaBEyQ1XPzw2P4f
xJdQk5cP6U2yXKtOIqtxTaunYB77sPRviRaBDYo0p8Vy9UDiZt+zA3MxTcGTHotw
aJD9lLTHeBGk/rHrkOFoD5pIkOhfojUvIqcv3pPGOc2MZsBP9G6kxUUUzQfOvXFM
T6Vf47arxaVn96mx0aii9uAavgIAGpc=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:08:28 2025 by rpki-client