Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac08b952-3ae6-3a26-b347-7aea628e6a71.roa
File: ac08b952-3ae6-3a26-b347-7aea628e6a71.roa (raw, json)
Hash identifier: dGmCzKA9f+2yE5T4Dt45+UXrn+e/Lf4ginn7pN9vVhs=
Subject key identifier: 93:0F:11:D0:41:96:CE:2F:9E:46:C0:90:52:D6:1B:57:C9:EE:A0:C3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E29B9A83AC7F0BCCBEFC91700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac08b952-3ae6-3a26-b347-7aea628e6a71.roa
Signing time: Mon 06 Jun 2022 12:00:00 +0000
ROA not before: Mon 06 Jun 2022 12:00:00 +0000
ROA not after: Tue 12 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 164.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:29:b9:a8:3a:c7:f0:bc:cb:ef:c9:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 6 12:00:00 2022 GMT
Not After : Jul 12 04:00:00 2022 GMT
Subject: CN=f48fc75b-39d1-4f16-84ed-5665a4ce169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c8:73:c0:06:13:f5:e5:74:d7:c3:20:6f:37:
07:a1:93:88:69:36:1c:9f:75:eb:6d:3f:3a:e7:ce:
33:d7:e1:8f:9a:43:27:f9:03:8a:73:40:99:69:14:
3d:a7:41:7d:3c:75:24:c5:29:b7:e6:17:c0:ac:90:
4d:34:cf:ce:b4:74:29:73:d8:38:da:97:1c:8b:ff:
ba:f6:86:9f:fb:63:c5:40:be:83:3b:59:9c:6e:62:
b2:b6:90:30:b5:74:22:26:bf:ee:96:7b:00:41:1a:
81:f7:95:a5:64:3a:54:4a:69:d1:f7:97:1d:1c:f1:
d5:ad:2b:e3:56:66:c9:87:2b:6d:d6:8e:5e:09:84:
c6:a4:81:db:3c:51:e7:94:c3:d8:da:13:35:20:3a:
8c:19:0e:23:c0:11:a9:5d:14:f2:e0:25:ea:a4:1f:
7c:d7:ca:87:b6:4e:ea:84:a0:32:97:c6:30:6e:74:
cc:65:b6:78:9b:e1:1c:d6:c4:53:b3:59:1a:af:d6:
fb:72:19:35:ec:41:e7:e2:da:4d:de:44:db:c7:5c:
e5:f9:4b:35:ee:2a:6c:78:a3:2e:f8:2d:c3:e9:79:
ec:8e:e3:d4:c5:10:dd:72:9c:4b:da:b1:16:87:f3:
4c:61:db:bf:23:19:88:99:dc:8f:ac:c0:36:3a:24:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0F:11:D0:41:96:CE:2F:9E:46:C0:90:52:D6:1B:57:C9:EE:A0:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac08b952-3ae6-3a26-b347-7aea628e6a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
164.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:26:c8:92:4d:7b:48:97:b2:ae:b8:f2:e6:90:1a:b5:c5:8c:
09:c2:dc:18:14:10:c8:00:59:68:09:fe:e3:a1:f2:e7:9c:dd:
ea:e0:c5:26:1f:54:be:b3:66:fa:3a:3c:29:fd:e5:b2:dd:fe:
70:75:4e:c3:36:07:32:05:b3:76:e1:fa:f3:c9:bc:c3:06:09:
98:d7:83:36:80:62:ef:e4:09:94:6a:ef:18:1f:d3:01:6f:e4:
df:9a:65:4b:cc:12:cd:90:8b:32:c1:fc:d7:6a:ff:86:51:92:
b6:9c:1c:08:63:ee:88:0b:bd:e1:d8:b1:36:ef:f8:50:75:27:
db:38:d0:01:0c:c0:c9:21:55:78:a0:f2:9e:de:19:c2:67:c8:
7c:8b:70:40:dc:3c:10:78:29:80:7d:e0:88:0e:7c:02:d1:a3:
fd:63:84:33:d5:50:d8:e0:5d:e2:65:19:33:36:ee:83:1d:fe:
43:d8:0b:79:03:4a:ac:ed:3a:7f:02:32:13:8d:df:4a:b0:3b:
8b:c0:ba:45:b1:cd:ca:1e:9f:57:f8:c3:49:c2:38:08:3b:06:
25:18:01:fe:d9:a8:31:d8:53:80:49:49:e8:4f:94:87:9b:ea:
1d:5f:87:c1:39:f8:fe:a6:2d:03:30:12:21:8e:af:c9:fb:df:
3e:14:28:23
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4puag6x/C8y+/JFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwNjEyMDAwMFoXDTIyMDcxMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZjQ4ZmM3NWItMzlkMS00ZjE2LTg0ZWQtNTY2NWE0Y2UxNjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMhzwAYT9eV018MgbzcHoZOIaTYcn3XrbT86
584z1+GPmkMn+QOKc0CZaRQ9p0F9PHUkxSm35hfArJBNNM/OtHQpc9g42pcci/+6
9oaf+2PFQL6DO1mcbmKytpAwtXQiJr/ulnsAQRqB95WlZDpUSmnR95cdHPHVrSvj
VmbJhytt1o5eCYTGpIHbPFHnlMPY2hM1IDqMGQ4jwBGpXRTy4CXqpB9818qHtk7q
hKAyl8YwbnTMZbZ4m+Ec1sRTs1kar9b7chk17EHn4tpN3kTbx1zl+Us17ipseKMu
+C3D6XnsjuPUxRDdcpxL2rEWh/NMYdu/IxmImdyPrMA2OiQxBQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJMPEdBBls4vnkbAkFLWG1fJ7qDDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWMwOGI5NTItM2FlNi0z
YTI2LWIzNDctN2FlYTYyOGU2YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApKgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjybIkk17SJeyrrjy5pAatcWMCcLcGBQQyABZaAn+46Hy55zd6uDFJh9U
vrNm+jo8Kf3lst3+cHVOwzYHMgWzduH688m8wwYJmNeDNoBi7+QJlGrvGB/TAW/k
35plS8wSzZCLMsH812r/hlGStpwcCGPuiAu94dixNu/4UHUn2zjQAQzAySFVeKDy
nt4ZwmfIfItwQNw8EHgpgH3giA58AtGj/WOEM9VQ2OBd4mUZMzbugx3+Q9gLeQNK
rO06fwIyE43fSrA7i8C6RbHNyh6fV/jDScI4CDsGJRgB/tmoMdhTgElJ6E+Uh5vq
HV+HwTn4/qYtAzASIY6vyfvfPhQoIw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:57 2025 by rpki-client