Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7a12a0b-5ddd-3d9e-b120-eb0330bb7189.roa
File: a7a12a0b-5ddd-3d9e-b120-eb0330bb7189.roa (raw, json)
Hash identifier: ei4LiWLlMqWQ7AhPg2UHlLFoceAVp8y3OdeBlk/SC/A=
Subject key identifier: 09:EE:EB:64:C2:E6:76:E4:DB:F6:C8:5F:78:AC:D2:67:1D:CE:D2:6B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E95C26F13CC7B137328807EB0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7a12a0b-5ddd-3d9e-b120-eb0330bb7189.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:95:c2:6f:13:cc:7b:13:73:28:80:7e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=1656621c-647a-462c-b52c-3c7bcf8b66ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:33:2d:62:39:14:46:a1:3b:4e:97:0f:2c:
f1:ae:52:43:1e:45:2c:ec:c1:c7:a5:34:d8:dd:82:
d6:6d:27:bb:83:87:ca:2f:1b:7e:23:c8:16:d4:f2:
a8:a3:4b:a7:49:a5:fc:7d:73:81:c7:73:61:3e:0a:
e4:cf:13:ab:11:89:de:9f:8c:45:9f:cb:1f:fb:96:
b5:be:bb:a0:a3:f1:d0:e7:96:c5:e4:8a:72:d5:43:
08:29:0e:93:0b:aa:00:9d:a7:5f:95:ad:a6:aa:ee:
25:f4:66:4a:44:8f:dc:93:2d:30:c1:af:81:e7:ec:
de:d8:0a:6b:53:3a:07:72:66:db:a3:9c:f8:74:30:
c3:ad:96:94:1f:22:09:b2:37:94:5d:20:ac:72:16:
77:25:62:ac:2e:22:00:0f:a6:0a:96:5d:7c:bd:c7:
54:39:be:4a:66:f3:c3:9c:c3:1f:92:f6:d6:3e:f0:
27:1b:53:68:9e:d9:5f:61:c2:2d:23:df:be:8e:47:
62:cc:e8:e8:ed:85:5c:3c:30:b5:6b:0f:ec:79:7f:
f2:46:6f:cb:d9:df:f5:e7:ef:0c:88:ca:26:94:c0:
f2:5c:d1:a9:87:a4:ed:7b:23:a3:90:0d:84:f1:08:
6c:1f:54:43:b1:ff:4a:a7:65:d7:98:25:48:d4:e3:
01:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:EB:64:C2:E6:76:E4:DB:F6:C8:5F:78:AC:D2:67:1D:CE:D2:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7a12a0b-5ddd-3d9e-b120-eb0330bb7189.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:a2:67:63:af:0d:2f:44:7f:7e:de:23:0c:dd:b7:b8:e9:21:
64:51:60:11:1a:79:62:4f:84:7b:f6:bf:7d:74:d8:fd:1b:a9:
8c:5d:f4:f4:80:c7:b0:95:fb:4a:fb:25:6a:85:98:4e:53:fe:
5b:92:8a:7e:1c:b7:89:ec:dc:e9:ef:b8:7c:5f:01:31:85:3d:
81:40:ad:31:5d:1e:1b:bf:5d:b7:06:ab:a8:e6:c7:cf:48:ab:
d0:d6:54:12:7f:dc:66:10:c0:ba:7b:b3:67:58:57:69:c0:be:
6f:12:16:2f:25:68:4b:12:14:d6:58:35:84:5a:fc:d6:de:1c:
3a:c8:7b:37:ff:8e:7a:cc:cf:ea:d1:d0:60:5e:fe:a6:a8:24:
5a:9a:0b:07:d7:82:98:80:df:a8:36:96:6e:16:d4:43:92:90:
89:2e:c5:fd:d9:97:ac:fb:17:4c:c9:57:67:ef:f2:6f:cc:46:
1c:a1:f5:3c:4c:a8:72:85:bd:aa:47:76:b5:0f:03:dd:23:5e:
84:54:2e:09:91:76:61:53:82:be:2a:a2:8a:39:5b:0f:f8:47:
90:0c:b4:f1:a9:27:46:6e:f0:08:4d:9b:24:58:15:c1:74:cf:
65:b9:79:3d:53:58:fa:04:18:ec:77:bb:95:d2:99:d5:e3:9e:
47:b1:c2:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6Vwm8TzHsTcyiAfrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxNTEyMDAwMFoXDTIyMDgyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MTY1NjYyMWMtNjQ3YS00NjJjLWI1MmMtM2M3YmNmOGI2NmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI8zLWI5FEahO06XDyzxrlJDHkUs7MHHpTTY
3YLWbSe7g4fKLxt+I8gW1PKoo0unSaX8fXOBx3NhPgrkzxOrEYnen4xFn8sf+5a1
vrugo/HQ55bF5Ipy1UMIKQ6TC6oAnadfla2mqu4l9GZKRI/cky0wwa+B5+ze2Apr
UzoHcmbbo5z4dDDDrZaUHyIJsjeUXSCschZ3JWKsLiIAD6YKll18vcdUOb5KZvPD
nMMfkvbWPvAnG1NontlfYcItI9++jkdizOjo7YVcPDC1aw/seX/yRm/L2d/15+8M
iMomlMDyXNGph6TteyOjkA2E8QhsH1RDsf9Kp2XXmCVI1OMBCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnu62TC5nbk2/bIX3is0mcdztJrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTdhMTJhMGItNWRkZC0z
ZDllLWIxMjAtZWIwMzMwYmI3MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR5gAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACuiZ2OvDS9Ef37eIwzdt7jpIWRRYBEaeWJPhHv2v3102P0bqYxd9PSA
x7CV+0r7JWqFmE5T/luSin4ct4ns3OnvuHxfATGFPYFArTFdHhu/XbcGq6jmx89I
q9DWVBJ/3GYQwLp7s2dYV2nAvm8SFi8laEsSFNZYNYRa/NbeHDrIezf/jnrMz+rR
0GBe/qaoJFqaCwfXgpiA36g2lm4W1EOSkIkuxf3Zl6z7F0zJV2fv8m/MRhyh9TxM
qHKFvapHdrUPA90jXoRULgmRdmFTgr4qooo5Ww/4R5AMtPGpJ0Zu8AhNmyRYFcF0
z2W5eT1TWPoEGOx3u5XSmdXjnkexwsU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:34 2025 by rpki-client