Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8aeea30-69f7-3ea6-a9ed-e6fe0792a8ee.roa
File: a8aeea30-69f7-3ea6-a9ed-e6fe0792a8ee.roa (raw, json)
Hash identifier: RqNxVe4dcTFddrH2+eAUszWB4I3fa56rwCeH9l/aB9M=
Subject key identifier: 2D:6F:3E:40:E2:6B:7C:C3:5F:A5:2C:1A:52:E7:4E:08:79:4D:22:35
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6E2E4777880A39370CE32D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8aeea30-69f7-3ea6-a9ed-e6fe0792a8ee.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 99.83.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6e:2e:47:77:88:0a:39:37:0c:e3:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=2ece3f35-70fe-48e5-8fdc-52fd51cb19de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:79:91:36:39:b5:89:d8:1a:e1:67:44:80:1f:
74:15:5a:31:6b:b3:18:62:ff:cf:25:2a:8c:32:fc:
01:4b:6d:55:10:f7:b5:c4:90:9a:f7:62:0d:e4:b8:
c8:9a:c5:9c:96:3d:ce:f3:54:26:9c:99:fb:be:41:
54:a3:a9:96:85:36:61:1c:6a:ea:84:a5:3a:33:0e:
e6:5f:8f:d3:85:1f:97:45:14:8b:b8:c3:cc:fc:2a:
e9:ba:68:58:18:77:8d:02:fe:76:ec:90:c3:4e:e0:
54:f2:5f:03:cf:17:53:18:fc:a1:95:c8:86:b2:50:
a0:21:bc:4e:b4:bd:94:cf:ad:a5:25:95:e5:e7:85:
12:53:25:11:f8:3e:ac:ef:ba:bb:a7:6b:8a:0f:55:
84:19:29:44:fd:00:ea:58:46:d4:57:cb:3a:79:42:
ee:f7:8e:78:50:7d:79:db:c7:38:0a:ad:7a:89:39:
3c:c9:86:d6:76:81:56:8d:3c:f2:65:7c:48:37:bb:
a4:eb:50:6b:91:58:a6:93:05:eb:4e:da:ce:ca:a5:
9e:cf:c0:9f:cb:d3:72:02:61:6e:0f:67:eb:13:a6:
b2:c4:c2:73:42:9d:13:eb:41:b1:4e:cd:96:65:1a:
4b:02:ba:52:45:43:5f:e4:17:e7:e7:ad:c8:9e:1f:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6F:3E:40:E2:6B:7C:C3:5F:A5:2C:1A:52:E7:4E:08:79:4D:22:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8aeea30-69f7-3ea6-a9ed-e6fe0792a8ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.83.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:79:a5:88:88:ed:e2:84:08:e1:ba:4f:07:ee:df:76:56:2e:
f6:f1:2c:9b:82:2b:2b:d1:f9:3a:93:c6:5b:cd:05:59:e4:e2:
95:ad:1f:d9:36:bd:2c:29:41:99:36:a1:b6:0d:20:a8:cd:bc:
e4:09:2d:0b:63:6e:6a:6d:e7:e6:50:64:b2:f1:53:36:a3:d8:
4f:59:2e:d7:b2:48:db:88:b9:25:2d:67:4a:5e:bd:8b:d3:84:
12:ed:a9:19:8d:e9:26:7d:de:9a:1d:a5:f2:d6:3f:88:94:f8:
48:a8:57:c8:1b:cb:69:7d:c8:97:aa:6d:03:f4:ab:03:bd:2e:
9d:39:f4:70:f0:c3:03:97:6e:80:65:45:73:1c:c7:d6:4e:4d:
42:85:d3:ab:3e:e0:22:18:b6:4f:b9:0f:7b:85:c6:54:55:5f:
18:db:71:c9:61:68:74:60:b5:84:50:1f:01:95:f9:f7:d8:21:
ce:29:f7:65:cc:bf:24:1f:19:05:50:c9:ab:a1:bf:21:d9:66:
01:b6:a0:6f:ad:aa:cc:74:3a:14:e5:df:10:7a:76:5b:ea:0f:
f4:14:a7:a4:2d:bf:d7:f3:e5:4c:f9:b3:80:6b:c5:aa:c4:bd:
5f:dd:dd:bc:8b:77:f5:35:7c:82:f8:6b:a5:89:0d:77:57:17:
b6:15:b9:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5uLkd3iAo5NwzjLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcwMTEyMDAwMFoXDTIyMDgwNjA0MDAwMFowLzEtMCsGA1UEAxMk
MmVjZTNmMzUtNzBmZS00OGU1LThmZGMtNTJmZDUxY2IxOWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3mRNjm1idga4WdEgB90FVoxa7MYYv/PJSqM
MvwBS21VEPe1xJCa92IN5LjImsWclj3O81QmnJn7vkFUo6mWhTZhHGrqhKU6Mw7m
X4/ThR+XRRSLuMPM/CrpumhYGHeNAv527JDDTuBU8l8DzxdTGPyhlciGslCgIbxO
tL2Uz62lJZXl54USUyUR+D6s77q7p2uKD1WEGSlE/QDqWEbUV8s6eULu9454UH15
28c4Cq16iTk8yYbWdoFWjTzyZXxIN7uk61BrkVimkwXrTtrOyqWez8Cfy9NyAmFu
D2frE6ayxMJzQp0T60GxTs2WZRpLArpSRUNf5Bfn563Inh+N+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1vPkDia3zDX6UsGlLnTgh5TSI1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYThhZWVhMzAtNjlmNy0z
ZWE2LWE5ZWQtZTZmZTA3OTJhOGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY1OAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADR5pYiI7eKECOG6Twfu33ZWLvbxLJuCKyvR+TqTxlvNBVnk4pWtH9k2
vSwpQZk2obYNIKjNvOQJLQtjbmpt5+ZQZLLxUzaj2E9ZLteySNuIuSUtZ0pevYvT
hBLtqRmN6SZ93podpfLWP4iU+EioV8gby2l9yJeqbQP0qwO9Lp059HDwwwOXboBl
RXMcx9ZOTUKF06s+4CIYtk+5D3uFxlRVXxjbcclhaHRgtYRQHwGV+ffYIc4p92XM
vyQfGQVQyauhvyHZZgG2oG+tqsx0OhTl3xB6dlvqD/QUp6Qtv9fz5Uz5s4BrxarE
vV/d3byLd/U1fIL4a6WJDXdXF7YVue4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:02 2025 by rpki-client