Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d1b9621-112c-37e5-ac6f-77f0ad4d3557.roa
File: 9d1b9621-112c-37e5-ac6f-77f0ad4d3557.roa (raw, json)
Hash identifier: +N8Y9pWJi2ngDqGaVaz01p4V90kInW1WT+wR8CwjbbQ=
Subject key identifier: 92:36:58:37:6B:92:FD:86:71:96:61:C7:06:4D:29:75:CA:A7:97:6E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6FE0F31DD238D05C6BB76080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d1b9621-112c-37e5-ac6f-77f0ad4d3557.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 198.41.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:e0:f3:1d:d2:38:d0:5c:6b:b7:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=6476eea7-bb79-4e45-9626-f6db7a71a3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:ca:67:b4:25:96:03:44:3c:60:de:4d:cc:
92:cf:8a:d0:3c:3f:33:5d:14:75:1a:55:e1:bf:fd:
78:6f:94:c3:ec:39:3c:75:ef:de:d5:db:cb:d2:12:
37:d6:d7:8a:05:03:13:14:a8:e5:0a:79:1b:7a:35:
0f:ed:eb:74:46:d0:02:90:47:52:ff:44:6f:38:00:
cf:ea:f1:0f:ce:40:76:ec:9b:00:e3:c1:5b:ad:54:
ef:87:35:c0:ae:5a:e5:88:18:05:58:0a:1a:cf:c7:
d8:6f:82:a4:67:18:1c:e9:b5:d5:01:4b:83:b2:fd:
34:11:b5:ab:a6:17:cb:eb:79:15:59:b8:62:fd:04:
3e:7d:28:28:be:b7:22:54:73:0b:07:8b:e4:84:46:
0b:c5:e3:e7:d7:01:4f:36:50:f7:34:11:30:9f:fa:
a8:22:48:ce:27:28:94:64:c5:07:41:ce:86:5e:f4:
2a:b5:10:c4:72:4b:fc:da:8e:c8:2a:9e:2e:93:b0:
50:7a:74:92:5e:90:14:1f:3d:93:5e:1d:5d:e1:d3:
a2:8b:6a:70:f5:e1:d5:f3:a5:0c:0f:b0:69:96:4b:
f6:53:aa:d1:dd:24:35:75:74:6c:c5:89:b9:9a:9a:
3f:47:af:ab:d8:db:3e:18:05:c0:19:aa:42:b6:6d:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:58:37:6B:92:FD:86:71:96:61:C7:06:4D:29:75:CA:A7:97:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9d1b9621-112c-37e5-ac6f-77f0ad4d3557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.41.96.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:4d:60:09:ba:54:48:61:6f:d3:ca:c7:4a:c3:9d:50:a6:f4:
bf:99:ed:d3:c1:c6:06:5b:83:71:7e:bf:c2:a0:3a:c4:45:8a:
a9:7a:12:dd:4a:05:af:7e:d9:6c:4c:88:ff:41:34:0f:42:76:
ec:b6:b3:60:a3:24:45:da:8a:00:0f:5e:61:c2:4e:66:da:78:
ed:e8:a2:a2:18:c7:8d:2c:61:40:b4:c0:23:6e:d9:68:da:af:
ae:35:c0:45:97:bc:f8:40:81:b2:14:c7:33:f4:50:12:e2:86:
f7:a2:24:16:a9:2f:70:c2:30:8c:14:7a:51:42:27:1c:8d:29:
76:21:d1:f6:43:f3:a8:f4:93:d9:43:59:e7:3d:72:83:d8:b3:
c6:d8:f8:50:20:c3:0e:43:30:91:bd:fd:bb:54:c3:23:83:9c:
ed:14:2f:67:4b:00:5e:18:96:2b:78:bf:c8:6a:42:16:88:56:
2b:52:e1:bf:50:42:d7:52:69:e1:b5:d3:b3:16:1a:29:a1:2e:
b3:3a:d9:01:fd:19:34:f5:62:e7:a4:d4:2d:ad:c2:78:9c:bc:
f9:9d:73:3c:de:6a:e3:2d:84:57:82:24:03:52:8f:fe:0c:af:
b7:64:3c:bf:29:de:52:b3:7e:e9:e0:51:8c:68:bd:e7:d1:c5:
fd:7c:7b:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxv4PMd0jjQXGu3YIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NjQ3NmVlYTctYmI3OS00ZTQ1LTk2MjYtZjZkYjdhNzFhM2YyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5DKZ7QllgNEPGDeTcySz4rQPD8zXRR1GlXh
v/14b5TD7Dk8de/e1dvL0hI31teKBQMTFKjlCnkbejUP7et0RtACkEdS/0RvOADP
6vEPzkB27JsA48FbrVTvhzXArlrliBgFWAoaz8fYb4KkZxgc6bXVAUuDsv00EbWr
phfL63kVWbhi/QQ+fSgovrciVHMLB4vkhEYLxePn1wFPNlD3NBEwn/qoIkjOJyiU
ZMUHQc6GXvQqtRDEckv82o7IKp4uk7BQenSSXpAUHz2TXh1d4dOii2pw9eHV86UM
D7Bplkv2U6rR3SQ1dXRsxYm5mpo/R6+r2Ns+GAXAGapCtm1ezQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJI2WDdrkv2GcZZhxwZNKXXKp5duMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOWQxYjk2MjEtMTEyYy0z
N2U1LWFjNmYtNzdmMGFkNGQzNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxilgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACxNYAm6VEhhb9PKx0rDnVCm9L+Z7dPBxgZbg3F+v8KgOsRFiql6Et1K
Ba9+2WxMiP9BNA9Cduy2s2CjJEXaigAPXmHCTmbaeO3ooqIYx40sYUC0wCNu2Wja
r641wEWXvPhAgbIUxzP0UBLihveiJBapL3DCMIwUelFCJxyNKXYh0fZD86j0k9lD
Wec9coPYs8bY+FAgww5DMJG9/btUwyODnO0UL2dLAF4Ylit4v8hqQhaIVitS4b9Q
QtdSaeG107MWGimhLrM62QH9GTT1Yuek1C2twnicvPmdczzeauMthFeCJANSj/4M
r7dkPL8p3lKzfungUYxovefRxf18e74=
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:49:49 2025 by rpki-client