Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a83f258-a5ec-3027-a422-31342e6e1672.roa
File: 9a83f258-a5ec-3027-a422-31342e6e1672.roa (raw, json)
Hash identifier: WJJOTJMkbUn2LKSz0NVkG6wcLgdBp1A1wfeDUAMaOnk=
Subject key identifier: A4:92:AF:00:26:A2:3B:0E:41:6C:78:19:14:56:62:7C:26:C4:17:C4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F7E67A3999AEC9D2240381C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a83f258-a5ec-3027-a422-31342e6e1672.roa
Signing time: Fri 07 Oct 2022 14:24:07 +0000
ROA not before: Fri 07 Oct 2022 14:24:07 +0000
ROA not after: Fri 11 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 130.171.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7e:67:a3:99:9a:ec:9d:22:40:38:1c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 7 14:24:07 2022 GMT
Not After : Nov 11 05:00:00 2022 GMT
Subject: CN=4a57aeea-b819-4325-98d2-780393e04bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:f2:44:05:70:4a:e4:c3:a7:0b:58:90:91:
f5:b5:00:d6:a2:30:a0:17:7e:e2:81:da:a1:16:39:
3d:e2:7f:11:01:fe:08:dc:cb:71:74:86:54:ea:e0:
8c:e0:0b:ba:9f:c5:d7:ad:1b:77:53:f7:13:71:5c:
4d:83:4d:ba:7e:b9:cf:a8:44:d5:34:b6:d4:fe:08:
d3:a6:e7:f6:9c:11:b4:6f:e7:21:5d:b1:c4:62:5a:
cc:1d:91:26:b7:cf:89:cc:d2:7f:12:13:7b:9b:9a:
d5:b8:ab:ae:40:ff:88:f5:55:43:4b:7e:d4:20:cc:
21:db:c4:c9:82:1d:aa:f0:96:a4:9f:88:bf:58:eb:
7e:43:ed:3f:20:a9:ab:2b:b7:cc:7f:5e:4c:5c:0c:
d2:a4:d0:48:5f:05:5f:d3:ba:50:93:70:dd:5d:64:
1c:d3:e6:48:70:ba:5a:1f:91:8e:c4:d0:fa:30:d9:
07:75:a8:88:4e:fd:0e:b6:ed:82:ff:bb:75:94:18:
31:73:fa:9d:34:6d:95:70:8d:59:a0:08:50:72:50:
5c:9b:25:eb:08:58:d0:5a:db:73:83:f8:c1:c7:90:
22:6d:0d:1f:34:35:3b:91:08:de:46:1f:83:8c:6e:
dc:38:a6:76:db:52:b9:99:8d:3e:2d:6d:4f:30:40:
9d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:92:AF:00:26:A2:3B:0E:41:6C:78:19:14:56:62:7C:26:C4:17:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9a83f258-a5ec-3027-a422-31342e6e1672.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
130.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:72:11:8f:df:ef:60:9d:f1:dc:b2:60:b9:d9:43:f6:5e:01:
cf:86:8f:de:03:e0:3f:2a:71:ec:43:df:5f:45:a4:6d:50:12:
cd:46:c0:32:c2:8f:2a:e5:49:56:d1:5e:9e:34:a6:c3:d8:21:
04:26:f6:f4:3c:ba:4e:ab:1c:88:34:97:0a:56:6a:98:9c:7c:
ec:c2:55:e7:1b:35:66:6e:a8:5b:01:4c:0d:40:3e:87:7f:99:
03:f8:ff:b9:e1:69:86:b1:17:0c:e5:8f:4c:33:3d:45:c1:51:
fe:6e:56:96:1d:af:07:38:06:f7:22:f3:0e:22:5f:99:11:30:
31:39:52:2b:5b:0a:3d:b1:4e:4e:15:33:a8:e4:c1:97:a7:13:
3d:e6:1d:60:f6:07:78:86:55:66:ec:c8:f4:f7:b5:6b:ce:84:
3c:4a:47:3b:57:a5:bd:14:93:b8:41:f9:20:82:6c:b1:78:cf:
56:39:21:6f:cb:1f:37:0d:e0:a9:c8:45:eb:a8:df:1e:73:40:
1b:31:62:12:83:e1:84:a5:81:e8:92:d4:65:e2:64:2a:63:df:
7c:c4:59:e7:ab:6e:e9:4d:46:32:39:39:85:88:4d:4b:47:fb:
3a:9f:18:6e:95:42:91:1a:df:6b:af:1c:3f:3f:b9:a4:7a:d2:
d8:51:34:3b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9+Z6OZmuydIkA4HEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAwNzE0MjQwN1oXDTIyMTExMTA1MDAwMFowLzEtMCsGA1UEAxMk
NGE1N2FlZWEtYjgxOS00MzI1LTk4ZDItNzgwMzkzZTA0YmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt7yRAVwSuTDpwtYkJH1tQDWojCgF37igdqh
Fjk94n8RAf4I3MtxdIZU6uCM4Au6n8XXrRt3U/cTcVxNg026frnPqETVNLbU/gjT
puf2nBG0b+chXbHEYlrMHZEmt8+JzNJ/EhN7m5rVuKuuQP+I9VVDS37UIMwh28TJ
gh2q8Jakn4i/WOt+Q+0/IKmrK7fMf15MXAzSpNBIXwVf07pQk3DdXWQc0+ZIcLpa
H5GOxND6MNkHdaiITv0Otu2C/7t1lBgxc/qdNG2VcI1ZoAhQclBcmyXrCFjQWttz
g/jBx5AibQ0fNDU7kQjeRh+DjG7cOKZ221K5mY0+LW1PMECd4wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKSSrwAmojsOQWx4GRRWYnwmxBfEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOWE4M2YyNTgtYTVlYy0z
MDI3LWE0MjItMzEzNDJlNmUxNjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgqswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAI3IRj9/vYJ3x3LJgudlD9l4Bz4aP3gPgPypx7EPfX0WkbVASzUbAMsKP
KuVJVtFenjSmw9ghBCb29Dy6TqsciDSXClZqmJx87MJV5xs1Zm6oWwFMDUA+h3+Z
A/j/ueFphrEXDOWPTDM9RcFR/m5Wlh2vBzgG9yLzDiJfmREwMTlSK1sKPbFOThUz
qOTBl6cTPeYdYPYHeIZVZuzI9Pe1a86EPEpHO1elvRSTuEH5IIJssXjPVjkhb8sf
Nw3gqchF66jfHnNAGzFiEoPhhKWB6JLUZeJkKmPffMRZ56tu6U1GMjk5hYhNS0f7
Op8YbpVCkRrfa68cPz+5pHrS2FE0Ow==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:27 2025 by rpki-client