Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5c97dc0-45f2-3691-9932-12acfd4223c2.roa
File: a5c97dc0-45f2-3691-9932-12acfd4223c2.roa (raw, json)
Hash identifier: Jx99IBeDQZZx8kB3IwNMoO2KGgwoP0ar9Njc3JL7KZ4=
Subject key identifier: 88:65:E2:B9:BE:94:E0:C9:DF:7B:0B:7C:2C:8E:2A:CB:84:2C:FD:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBDB22AB35374B0A8964E8200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5c97dc0-45f2-3691-9932-12acfd4223c2.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 76.223.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:b2:2a:b3:53:74:b0:a8:96:4e:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=279f8508-5d62-43b5-a016-93f74355353f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fe:ff:b4:41:6f:47:41:45:df:45:10:c5:20:
85:44:47:78:7d:2a:95:0b:a6:cb:c3:f7:7d:25:0e:
39:37:df:c0:5a:42:ba:be:4a:74:ad:bc:0d:73:04:
ac:b2:67:d0:90:eb:13:e5:90:c0:0c:9e:e5:c1:40:
2c:f8:ca:ed:6a:54:d0:15:92:db:91:ad:50:ad:64:
4a:0b:c0:90:56:16:0b:68:ed:fc:c0:9c:7f:9b:71:
27:ad:50:48:db:c0:0a:8e:24:f1:ea:c6:53:b0:e6:
57:f4:2e:43:5d:3a:84:74:e4:57:ee:dd:e2:e5:82:
98:c1:e5:ef:96:f6:c6:58:ea:22:76:11:74:df:e4:
aa:3d:75:74:00:34:fd:2e:1f:05:c1:3a:cd:df:54:
c7:1c:81:0e:8d:9f:82:ed:b2:3a:26:da:80:4a:e6:
4c:be:ad:e0:57:15:d8:5b:4a:e5:43:bc:d2:ae:b1:
30:07:43:a8:1a:62:6a:21:ff:81:e6:99:dd:2c:fc:
32:a7:41:a8:21:71:62:fb:59:7c:76:a3:ce:41:e7:
6c:36:fa:34:77:fb:d6:bb:56:f5:00:6e:27:69:0e:
cd:61:8e:31:e0:67:6d:22:dd:b5:8a:ef:d3:aa:76:
47:42:48:d2:af:be:37:fe:0e:cf:8d:d9:50:73:7f:
55:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:65:E2:B9:BE:94:E0:C9:DF:7B:0B:7C:2C:8E:2A:CB:84:2C:FD:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a5c97dc0-45f2-3691-9932-12acfd4223c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:2f:d2:40:cd:a0:4b:2a:57:2b:f0:c6:2d:9f:44:bc:f1:05:
5f:f9:ef:af:2c:f1:22:e6:9a:2d:9e:6c:60:9d:d5:d8:6f:d5:
13:b1:f7:56:8e:bd:2e:3d:53:60:76:21:64:be:5e:78:95:a0:
09:b1:54:a7:b8:ce:dc:ae:59:06:85:6c:64:19:d4:6e:e9:f0:
38:5f:24:f6:5d:7a:64:9a:93:a6:7a:98:45:fe:08:e8:89:a7:
0f:51:c3:81:78:d3:d5:ef:6c:41:3f:ce:5e:e3:89:88:89:ac:
03:f1:0e:84:06:f2:16:55:08:26:e7:3c:5f:d8:c0:34:f5:44:
fc:89:9e:9b:4e:1f:f2:14:f1:91:a6:a8:51:ad:c3:25:39:38:
ff:99:3f:75:56:a8:4a:6e:09:98:dc:3f:66:6a:19:78:eb:a0:
78:c0:02:c9:16:34:b3:a0:ac:3b:66:2c:dc:8e:3c:01:06:d2:
33:1c:d9:a8:3f:5c:b1:e6:35:b0:dc:3f:33:e8:02:45:ba:3c:
46:a1:3a:60:58:29:d8:88:f0:5a:32:e7:60:bc:60:e2:a9:9f:
51:20:1e:35:b8:1b:28:55:e0:62:4d:8c:0e:c7:9a:6e:5f:c4:
0b:cb:1b:20:0f:8a:50:44:7e:da:41:68:58:7c:ef:fc:bf:7c:
8a:e3:cc:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDy9siqzU3SwqJZOggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
Mjc5Zjg1MDgtNWQ2Mi00M2I1LWEwMTYtOTNmNzQzNTUzNTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/7/tEFvR0FF30UQxSCFREd4fSqVC6bLw/d9
JQ45N9/AWkK6vkp0rbwNcwSssmfQkOsT5ZDADJ7lwUAs+MrtalTQFZLbka1QrWRK
C8CQVhYLaO38wJx/m3EnrVBI28AKjiTx6sZTsOZX9C5DXTqEdORX7t3i5YKYweXv
lvbGWOoidhF03+SqPXV0ADT9Lh8FwTrN31THHIEOjZ+C7bI6JtqASuZMvq3gVxXY
W0rlQ7zSrrEwB0OoGmJqIf+B5pndLPwyp0GoIXFi+1l8dqPOQedsNvo0d/vWu1b1
AG4naQ7NYY4x4GdtIt21iu/TqnZHQkjSr743/g7PjdlQc39VdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIhl4rm+lODJ33sLfCyOKsuELP0/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTVjOTdkYzAtNDVmMi0z
NjkxLTk5MzItMTJhY2ZkNDIyM2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTN+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFwv0kDNoEsqVyvwxi2fRLzxBV/5768s8SLmmi2ebGCd1dhv1ROx91aO
vS49U2B2IWS+XniVoAmxVKe4ztyuWQaFbGQZ1G7p8DhfJPZdemSak6Z6mEX+COiJ
pw9Rw4F409XvbEE/zl7jiYiJrAPxDoQG8hZVCCbnPF/YwDT1RPyJnptOH/IU8ZGm
qFGtwyU5OP+ZP3VWqEpuCZjcP2ZqGXjroHjAAskWNLOgrDtmLNyOPAEG0jMc2ag/
XLHmNbDcPzPoAkW6PEahOmBYKdiI8Foy52C8YOKpn1EgHjW4GyhV4GJNjA7Hmm5f
xAvLGyAPilBEftpBaFh87/y/fIrjzLU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:14:07 2025 by rpki-client