Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6e53b8e-0b4d-3ffc-bfa1-ed58335bd36b.roa
File: a6e53b8e-0b4d-3ffc-bfa1-ed58335bd36b.roa (raw, json)
Hash identifier: 5OpAy99qqQGCcYRcWDKRvDnFufbVhiDxzPk9EwECTms=
Subject key identifier: 1B:67:F6:6E:B3:F6:6A:A4:43:73:22:A3:3C:33:EB:18:CD:01:B1:68
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBE1A1EBCB28B517504B92E40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6e53b8e-0b4d-3ffc-bfa1-ed58335bd36b.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:1a:1e:bc:b2:8b:51:75:04:b9:2e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=0f9fd4df-d6fc-4dc2-813f-ed8ec636c2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:17:d4:0c:6e:27:e0:6b:79:b7:44:78:12:
c7:83:d4:7f:9c:62:e9:51:36:c4:02:48:2d:b8:36:
ae:56:2a:6b:74:f8:8d:80:71:fe:50:ad:e0:ce:cd:
47:b2:8a:18:fe:45:c5:53:c0:94:2d:a2:00:49:c9:
82:2d:1b:81:37:3b:52:d5:e2:57:4d:13:e1:e6:be:
e1:d3:11:9d:c2:8f:64:38:f0:47:80:81:b9:db:33:
bc:89:17:f2:c1:ac:21:90:45:a6:57:fa:a3:d6:ce:
54:f4:09:8b:d6:53:fa:3c:a3:c5:12:30:62:57:b5:
a3:a6:2e:0b:36:ba:39:58:e3:10:0e:e7:8d:9e:d7:
37:2b:bd:f1:87:96:12:cc:8e:34:00:c2:32:21:92:
a4:9d:97:7b:6a:24:a8:f4:0a:b2:14:aa:8b:1c:20:
70:ce:1b:59:c8:73:5f:25:ea:b5:88:0b:98:e2:92:
5d:cf:21:87:4c:bf:6b:21:fc:73:1c:09:69:9a:57:
e0:74:2a:27:ae:00:78:b6:51:16:4c:00:f6:b8:e7:
22:ef:88:bb:c0:1b:6f:14:be:eb:e9:5f:a1:7c:a3:
a0:c4:ae:75:69:61:12:83:10:cd:a6:03:7a:ed:fa:
16:71:06:69:e3:84:35:30:3a:79:0d:f5:ac:bd:70:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:67:F6:6E:B3:F6:6A:A4:43:73:22:A3:3C:33:EB:18:CD:01:B1:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a6e53b8e-0b4d-3ffc-bfa1-ed58335bd36b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:c1:af:2c:14:bd:09:53:22:38:36:6e:1e:8e:00:94:03:9a:
e1:04:d2:ec:e8:20:b0:04:3c:fd:ad:0b:27:4d:f0:da:cd:8d:
0c:7e:ae:38:0b:62:ab:64:6a:63:2c:5b:d2:c9:85:9b:01:42:
a9:cf:df:70:33:4d:79:6b:f6:df:e7:6e:04:bc:c5:02:0a:90:
06:ac:6c:82:e9:75:0d:08:aa:b6:a3:c7:29:b6:90:9a:59:bc:
27:7f:a7:81:34:78:a3:53:4a:1e:32:86:88:e2:fd:48:0c:34:
b6:63:8c:07:58:12:a4:b7:3e:2c:10:20:9a:9b:3b:06:c0:68:
ed:53:1b:2d:94:c6:73:bf:2e:37:32:50:42:8d:19:b4:e0:b8:
9a:74:23:88:0f:df:0b:1e:55:7a:19:e9:90:4a:6c:15:4f:b9:
88:f3:65:01:bf:af:4f:2b:70:55:6a:2a:b7:6b:a0:b3:36:4e:
d1:f1:e8:64:a0:6b:72:5f:e1:d7:84:23:44:47:61:dc:ba:27:
0c:65:0a:53:dd:b7:94:95:36:eb:a4:16:29:b9:f1:aa:02:39:
c0:ac:d9:51:78:40:8c:6e:a7:52:3d:20:08:e7:45:d0:cf:fe:
4d:c6:8b:4a:8f:f0:d9:13:fc:f2:80:9d:43:28:1c:19:42:62:
01:da:94:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDy+Gh68sotRdQS5LkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
MGY5ZmQ0ZGYtZDZmYy00ZGMyLTgxM2YtZWQ4ZWM2MzZjMmZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkgX1AxuJ+BrebdEeBLHg9R/nGLpUTbEAkgt
uDauViprdPiNgHH+UK3gzs1HsooY/kXFU8CULaIAScmCLRuBNztS1eJXTRPh5r7h
0xGdwo9kOPBHgIG52zO8iRfywawhkEWmV/qj1s5U9AmL1lP6PKPFEjBiV7Wjpi4L
Nro5WOMQDueNntc3K73xh5YSzI40AMIyIZKknZd7aiSo9AqyFKqLHCBwzhtZyHNf
Jeq1iAuY4pJdzyGHTL9rIfxzHAlpmlfgdConrgB4tlEWTAD2uOci74i7wBtvFL7r
6V+hfKOgxK51aWESgxDNpgN67foWcQZp44Q1MDp5DfWsvXDOrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBtn9m6z9mqkQ3Miozwz6xjNAbFoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTZlNTNiOGUtMGI0ZC0z
ZmZjLWJmYTEtZWQ1ODMzNWJkMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmMCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKTBrywUvQlTIjg2bh6OAJQDmuEE0uzoILAEPP2tCydN8NrNjQx+rjgL
YqtkamMsW9LJhZsBQqnP33AzTXlr9t/nbgS8xQIKkAasbILpdQ0Iqrajxym2kJpZ
vCd/p4E0eKNTSh4yhoji/UgMNLZjjAdYEqS3PiwQIJqbOwbAaO1TGy2UxnO/Ljcy
UEKNGbTguJp0I4gP3wseVXoZ6ZBKbBVPuYjzZQG/r08rcFVqKrdroLM2TtHx6GSg
a3Jf4deEI0RHYdy6JwxlClPdt5SVNuukFim58aoCOcCs2VF4QIxup1I9IAjnRdDP
/k3Gi0qP8NkT/PKAnUMoHBlCYgHalDo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:34 2025 by rpki-client