Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7a9e842-6551-3681-b0f2-c42e249fe21a.roa
File: a7a9e842-6551-3681-b0f2-c42e249fe21a.roa (raw, json)
Hash identifier: EkebFRti7LTPP75eq0lyZaTMISvw8Dcw9TMIdfwnBmA=
Subject key identifier: E2:6C:AA:5D:F4:F4:D5:A6:23:79:AA:FB:9E:B3:3A:E6:9A:BB:7B:76
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F3B0DF7F22675AF53566A7AC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7a9e842-6551-3681-b0f2-c42e249fe21a.roa
Signing time: Mon 12 Sep 2022 12:00:00 +0000
ROA not before: Mon 12 Sep 2022 12:00:00 +0000
ROA not after: Tue 18 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3b:0d:f7:f2:26:75:af:53:56:6a:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 12 12:00:00 2022 GMT
Not After : Oct 18 04:00:00 2022 GMT
Subject: CN=40792251-9d51-4918-911d-1f1fba304242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:a6:24:76:2d:9c:d9:6a:cb:65:12:d5:57:
68:61:24:69:ac:d7:69:3e:2d:21:7c:39:44:a4:7e:
38:27:ad:a6:fb:86:66:59:20:bc:0a:c5:61:ed:8d:
09:a5:02:eb:8a:b9:3f:b2:63:af:44:d4:7a:5d:8b:
96:d7:ee:fb:11:00:ce:ba:e7:03:5e:38:51:27:06:
27:a6:b8:7f:6d:3a:a4:0a:83:aa:fd:3b:9c:5c:9a:
a2:70:40:55:18:34:0d:99:df:8b:dd:b6:5a:73:b2:
c6:6f:5e:e0:4c:47:af:18:14:35:c6:be:eb:5e:b8:
d3:ef:5b:c4:02:3f:5b:2b:1e:b2:05:30:d9:f2:17:
69:86:be:ff:15:80:26:ae:70:d6:27:99:9a:a9:ea:
85:db:bf:eb:dc:5c:8f:e9:c8:76:6e:b6:8e:dd:64:
a3:54:ee:de:d0:e8:7f:be:c8:ff:77:50:1d:1d:1a:
e5:f5:e3:94:f7:ae:71:76:0f:34:75:bc:28:a2:fe:
49:99:ee:c3:88:68:88:87:d9:f4:d6:05:9b:ed:29:
87:76:89:a8:7e:03:46:aa:6b:fd:c6:49:77:38:24:
50:ea:23:49:3a:e3:2a:8c:8e:3e:13:f7:df:b5:ab:
93:7a:34:89:08:c4:c8:d3:85:b7:87:68:ec:d6:e3:
cd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6C:AA:5D:F4:F4:D5:A6:23:79:AA:FB:9E:B3:3A:E6:9A:BB:7B:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a7a9e842-6551-3681-b0f2-c42e249fe21a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:cf:99:9d:fb:57:85:20:20:2a:27:e7:6b:31:58:93:74:5b:
1f:36:21:61:a5:67:e8:cf:6c:d1:51:6c:2e:19:3f:1b:d6:fb:
65:bb:b6:55:01:6a:ae:ca:7b:11:69:e6:53:eb:b1:fc:c9:1d:
8d:3e:af:61:48:82:1e:3e:9e:99:93:6e:5b:ed:66:fd:98:0e:
70:63:56:73:1b:05:a3:79:92:26:42:4a:88:c2:b2:48:79:9d:
bd:df:69:15:af:32:dd:c7:c3:9d:bb:2e:f7:7c:1e:4f:fd:e3:
e4:04:71:d3:c0:a3:94:61:fe:d6:c6:f6:c9:ec:8f:ae:6b:b9:
57:07:f3:52:25:e9:9b:f7:3e:7e:0a:1d:69:f1:d0:2d:7f:05:
9f:74:e6:c6:f4:50:62:67:89:ce:e0:30:25:bc:fe:73:8a:6f:
92:30:5c:93:f8:56:3c:49:53:3d:0c:63:08:22:ab:b5:18:52:
cc:6a:24:aa:d1:79:20:5d:19:b9:b2:28:32:d7:35:70:98:57:
c1:12:1c:e8:d6:77:f4:fd:0b:12:3c:ee:ef:73:54:d2:da:d1:
7f:3a:36:7e:fd:18:7c:75:39:e3:c4:d8:04:91:d3:71:c8:23:
02:49:c5:f2:dd:ac:61:07:0b:d5:6e:60:9d:8f:e7:40:f7:b5:
48:f8:0f:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD87DffyJnWvU1ZqesAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkxMjEyMDAwMFoXDTIyMTAxODA0MDAwMFowLzEtMCsGA1UEAxMk
NDA3OTIyNTEtOWQ1MS00OTE4LTkxMWQtMWYxZmJhMzA0MjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1SmJHYtnNlqy2US1VdoYSRprNdpPi0hfDlE
pH44J62m+4ZmWSC8CsVh7Y0JpQLrirk/smOvRNR6XYuW1+77EQDOuucDXjhRJwYn
prh/bTqkCoOq/TucXJqicEBVGDQNmd+L3bZac7LGb17gTEevGBQ1xr7rXrjT71vE
Aj9bKx6yBTDZ8hdphr7/FYAmrnDWJ5maqeqF27/r3FyP6ch2braO3WSjVO7e0Oh/
vsj/d1AdHRrl9eOU965xdg80dbwoov5Jme7DiGiIh9n01gWb7SmHdomofgNGqmv9
xkl3OCRQ6iNJOuMqjI4+E/fftauTejSJCMTI04W3h2js1uPNLwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOJsql309NWmI3mq+56zOuaau3t2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTdhOWU4NDItNjU1MS0z
NjgxLWIwZjItYzQyZTI0OWZlMjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAM8+ZnftXhSAgKifnazFYk3RbHzYhYaVn6M9s0VFsLhk/G9b7Zbu2VQFq
rsp7EWnmU+ux/MkdjT6vYUiCHj6emZNuW+1m/ZgOcGNWcxsFo3mSJkJKiMKySHmd
vd9pFa8y3cfDnbsu93weT/3j5ARx08CjlGH+1sb2yeyPrmu5VwfzUiXpm/c+fgod
afHQLX8Fn3TmxvRQYmeJzuAwJbz+c4pvkjBck/hWPElTPQxjCCKrtRhSzGokqtF5
IF0ZubIoMtc1cJhXwRIc6NZ39P0LEjzu73NU0trRfzo2fv0YfHU548TYBJHTccgj
AknF8t2sYQcL1W5gnY/nQPe1SPgPPg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:47 2025 by rpki-client