Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab662f18-5a56-3005-8d6a-27d0ba4a4865.roa
File: ab662f18-5a56-3005-8d6a-27d0ba4a4865.roa (raw, json)
Hash identifier: YyJ9hZH/Yjlaa+5Cgi/wKnQYJlCG0+kdGkEcmd2QmkQ=
Subject key identifier: BF:87:B3:D6:AB:0D:A7:23:0B:40:40:3A:DB:EC:88:01:3B:09:DE:2A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EBC610DF83A5C5842A30563C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab662f18-5a56-3005-8d6a-27d0ba4a4865.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 99.87.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bc:61:0d:f8:3a:5c:58:42:a3:05:63:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=6dc1c18f-5740-4e5c-a9cc-053d0ad072bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:80:d0:43:af:4f:02:19:72:42:74:3b:4e:
29:67:6b:f2:aa:c1:e8:98:8b:8c:22:19:31:77:15:
62:ec:87:2a:55:df:98:6b:da:df:fc:a8:88:2d:df:
6b:5f:99:4d:ad:b9:fa:69:1d:bd:7e:f7:d6:31:09:
e8:c3:65:7d:49:c3:d5:f7:d8:d9:78:e1:aa:86:43:
7c:60:28:d8:4b:a6:6b:51:79:6a:68:ca:54:c3:41:
d6:36:12:77:02:2e:70:a0:96:b1:01:9c:8c:df:b7:
d2:bd:21:61:3f:33:51:5f:2e:a0:da:ab:71:ef:b5:
65:eb:76:bc:13:e8:35:e7:b5:a6:0b:de:85:2c:f0:
3e:19:6a:e6:e5:49:2b:e8:d3:11:71:18:4b:dd:db:
bf:c7:fb:e2:86:4b:7e:5c:cb:e4:5c:bb:af:0b:c2:
d9:0b:79:f6:e0:cc:96:45:96:c2:5f:3d:da:6d:c7:
55:a6:e2:4f:e0:1b:98:07:23:0b:6b:e3:aa:9a:29:
bc:0d:04:87:8e:b1:a4:d1:9d:06:44:ed:3d:53:7b:
d0:fa:7e:3a:b7:b1:a2:76:3a:12:5e:73:2a:87:6c:
0f:a4:19:ff:5f:c0:4e:09:d2:3c:cf:ba:b8:c7:eb:
8b:ca:e5:b7:dd:b4:b6:83:77:43:8e:c9:28:14:93:
2c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:87:B3:D6:AB:0D:A7:23:0B:40:40:3A:DB:EC:88:01:3B:09:DE:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab662f18-5a56-3005-8d6a-27d0ba4a4865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.87.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:0e:1a:10:03:41:b0:37:d9:ca:2e:2a:d9:21:9b:d4:6c:e5:
c5:09:2a:37:f8:4f:a6:60:af:7b:01:b4:9f:34:ec:15:fe:ec:
25:22:a8:d6:78:cd:8c:84:61:e1:3d:16:df:ca:75:7e:65:92:
14:3a:2b:ae:81:92:49:50:ce:ad:eb:6c:9f:95:8b:a7:47:fd:
3f:bb:4c:a3:83:e0:8c:5d:7b:f9:b8:33:ec:40:93:dc:64:b2:
8b:31:cd:7b:f1:20:9f:91:58:be:30:6f:d0:0c:05:22:b1:08:
1f:b7:07:75:ac:2b:b3:78:5a:bd:d0:46:6e:f2:3e:9f:9d:84:
5c:c8:f1:2c:5f:37:3d:05:36:4a:50:8c:1e:07:75:f6:c1:e7:
91:dc:be:bf:6b:0a:a2:dc:00:cd:09:dc:f1:8c:cc:0b:78:bc:
35:29:b5:32:09:2c:61:14:8d:19:ba:e8:ff:75:69:f8:ef:49:
5a:f4:1b:81:cb:4a:d3:0b:88:2a:19:14:79:f3:2c:ad:b8:56:
1b:8a:80:84:4f:57:37:7e:0d:da:0c:8d:27:f8:46:50:ef:57:
7a:8b:72:3c:65:9b:fc:f8:cb:50:c3:66:d2:97:65:a0:7e:5e:
72:d4:ff:6c:d3:7f:fc:d7:2e:e5:77:7c:9f:79:c2:4d:99:be:
65:02:0a:ba
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD68YQ34OlxYQqMFY8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcyOTEyMDAwMFoXDTIyMDkwMzA0MDAwMFowLzEtMCsGA1UEAxMk
NmRjMWMxOGYtNTc0MC00ZTVjLWE5Y2MtMDUzZDBhZDA3MmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zKA0EOvTwIZckJ0O04pZ2vyqsHomIuMIhkx
dxVi7IcqVd+Ya9rf/KiILd9rX5lNrbn6aR29fvfWMQnow2V9ScPV99jZeOGqhkN8
YCjYS6ZrUXlqaMpUw0HWNhJ3Ai5woJaxAZyM37fSvSFhPzNRXy6g2qtx77Vl63a8
E+g157WmC96FLPA+GWrm5Ukr6NMRcRhL3du/x/vihkt+XMvkXLuvC8LZC3n24MyW
RZbCXz3abcdVpuJP4BuYByMLa+Oqmim8DQSHjrGk0Z0GRO09U3vQ+n46t7GidjoS
XnMqh2wPpBn/X8BOCdI8z7q4x+uLyuW33bS2g3dDjskoFJMsiwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+Hs9arDacjC0BAOtvsiAE7Cd4qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWI2NjJmMTgtNWE1Ni0z
MDA1LThkNmEtMjdkMGJhNGE0ODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY1cAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgOGhADQbA32couKtkhm9Rs5cUJKjf4T6Zgr3sBtJ807BX+7CUiqNZ4
zYyEYeE9Ft/KdX5lkhQ6K66BkklQzq3rbJ+Vi6dH/T+7TKOD4Ixde/m4M+xAk9xk
sosxzXvxIJ+RWL4wb9AMBSKxCB+3B3WsK7N4Wr3QRm7yPp+dhFzI8SxfNz0FNkpQ
jB4HdfbB55Hcvr9rCqLcAM0J3PGMzAt4vDUptTIJLGEUjRm66P91afjvSVr0G4HL
StMLiCoZFHnzLK24VhuKgIRPVzd+DdoMjSf4RlDvV3qLcjxlm/z4y1DDZtKXZaB+
XnLU/2zTf/zXLuV3fJ95wk2ZvmUCCro=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:29 2025 by rpki-client