Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ab93ae2-f18d-35b7-b481-3deb19f0bfa3.roa
File: 9ab93ae2-f18d-35b7-b481-3deb19f0bfa3.roa (raw, json)
Hash identifier: ow9HuH3OiGg9YQ6Dr7jdkFOlb4geSZczzz2BSSeFdbo=
Subject key identifier: 55:B3:09:88:FC:EF:5F:F7:41:5B:E5:0B:C8:46:B1:0A:41:0E:BE:9B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409A2C31A054A783AF03812440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ab93ae2-f18d-35b7-b481-3deb19f0bfa3.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.181.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9a:2c:31:a0:54:a7:83:af:03:81:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=cb5af835-577b-409d-be90-2e9fc6ee980b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:61:de:0f:14:dd:12:42:07:e8:46:09:21:
90:f8:59:6a:b0:5a:50:60:da:3e:94:60:61:73:f4:
b1:17:0a:0b:15:fd:09:42:30:ee:bb:f0:b5:6c:21:
78:0b:50:2a:dd:b6:4e:5b:7e:1d:b0:f9:eb:88:32:
73:0e:bd:ba:e5:45:b6:ac:78:a3:97:1c:d3:bd:8b:
09:5e:bd:13:28:98:ab:83:16:0a:1c:ba:9e:26:df:
54:a0:1e:98:91:75:a7:a0:11:f5:52:e4:35:3f:03:
01:ba:ef:d6:2a:88:c8:3f:67:3b:b3:eb:d3:51:a1:
37:a7:98:cb:37:c7:05:fc:52:7d:9e:eb:f4:55:a5:
cd:af:cd:59:da:75:ad:b5:6e:35:13:29:23:77:f6:
a1:90:9b:7e:f5:6d:87:a3:ef:fc:ce:55:e0:c8:58:
2d:53:8f:bd:b0:da:23:2d:9a:fc:8f:3b:77:6b:f0:
8e:74:26:59:e1:da:69:5a:cc:80:1e:1f:ce:19:12:
88:8e:09:ae:d3:8a:4c:51:a9:2e:27:e7:49:f7:3d:
70:bd:72:79:73:d0:e8:6b:5f:16:f9:78:22:7c:71:
c3:d2:c2:62:47:1b:6f:09:c8:00:c0:53:0b:3a:e5:
dc:1e:b2:82:e3:4d:e6:70:9b:93:e3:c4:9b:56:62:
d0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B3:09:88:FC:EF:5F:F7:41:5B:E5:0B:C8:46:B1:0A:41:0E:BE:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9ab93ae2-f18d-35b7-b481-3deb19f0bfa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.181.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:32:43:6e:87:26:ec:2f:94:b1:cd:91:2b:f3:ad:10:5f:b1:
5f:23:4b:da:1d:74:e8:7e:d1:85:37:ee:0d:b8:f9:91:7b:d9:
08:90:c7:92:67:cf:91:49:7e:40:d5:80:b0:d0:9c:07:09:57:
58:ea:1d:c2:9a:00:82:2d:c0:55:7c:33:e9:d3:56:8d:d7:4e:
de:9d:37:38:95:ba:aa:92:46:ce:06:8e:c8:e4:7e:56:d1:bf:
2a:5c:3c:a8:56:b7:50:85:c9:8a:82:33:8b:ab:d3:c1:ca:7a:
5b:5f:8e:9e:3c:75:60:c5:fe:2f:3b:b8:54:f8:f1:5b:64:36:
28:7f:cd:77:bb:dc:7e:0f:20:92:88:e8:ba:94:fc:f2:21:07:
b2:05:6d:78:3e:04:49:f0:90:2b:8d:e2:53:6b:22:dd:ba:d5:
d4:80:cf:ad:16:66:ff:46:a6:d7:e6:ba:17:fc:59:4d:52:55:
82:be:03:d2:79:83:e1:0f:27:61:02:f5:11:68:34:e8:55:48:
1b:81:2d:ad:8c:7a:3a:bb:d0:1b:f7:08:b8:c2:c8:0f:e9:6c:
f9:21:67:6f:16:79:8f:2c:d5:a5:e7:28:95:c8:57:42:3c:10:
1c:4d:6b:b8:94:81:c5:f9:a1:05:98:37:87:98:72:09:d6:cc:
32:2d:f3:ec
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECaLDGgVKeDrwOBJEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExNjEyMDAwMFoXDTIzMDIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
Y2I1YWY4MzUtNTc3Yi00MDlkLWJlOTAtMmU5ZmM2ZWU5ODBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWlh3g8U3RJCB+hGCSGQ+FlqsFpQYNo+lGBh
c/SxFwoLFf0JQjDuu/C1bCF4C1Aq3bZOW34dsPnriDJzDr265UW2rHijlxzTvYsJ
Xr0TKJirgxYKHLqeJt9UoB6YkXWnoBH1UuQ1PwMBuu/WKojIP2c7s+vTUaE3p5jL
N8cF/FJ9nuv0VaXNr81Z2nWttW41Eykjd/ahkJt+9W2Ho+/8zlXgyFgtU4+9sNoj
LZr8jzt3a/COdCZZ4dppWsyAHh/OGRKIjgmu04pMUakuJ+dJ9z1wvXJ5c9Doa18W
+XgifHHD0sJiRxtvCcgAwFMLOuXcHrKC403mcJuT48SbVmLQxQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFWzCYj871/3QVvlC8hGsQpBDr6bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOWFiOTNhZTItZjE4ZC0z
NWI3LWI0ODEtM2RlYjE5ZjBiZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXDJDbocm7C+Usc2RK/OtEF+xXyNL2h106H7RhTfuDbj5kXvZCJDHkmfP
kUl+QNWAsNCcBwlXWOodwpoAgi3AVXwz6dNWjddO3p03OJW6qpJGzgaOyOR+VtG/
Klw8qFa3UIXJioIzi6vTwcp6W1+Onjx1YMX+Lzu4VPjxW2Q2KH/Nd7vcfg8gkojo
upT88iEHsgVteD4ESfCQK43iU2si3brV1IDPrRZm/0am1+a6F/xZTVJVgr4D0nmD
4Q8nYQL1EWg06FVIG4EtrYx6OrvQG/cIuMLID+ls+SFnbxZ5jyzVpecolchXQjwQ
HE1ruJSBxfmhBZg3h5hyCdbMMi3z7A==
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:58:11 2025 by rpki-client