Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac1701ec-ec1b-3b11-a4c9-2778e07a6cd1.roa
File: ac1701ec-ec1b-3b11-a4c9-2778e07a6cd1.roa (raw, json)
Hash identifier: jw9/zX0jz4saczeLcl1YZCb7UjJsfMVoFMNFioqf+ks=
Subject key identifier: BF:64:CB:D6:EE:AA:A3:81:47:D0:1C:7D:64:A3:02:2B:BD:43:85:02
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5A44D3B9BC7C29CA7E419E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac1701ec-ec1b-3b11-a4c9-2778e07a6cd1.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5a:44:d3:b9:bc:7c:29:ca:7e:41:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=394b31d5-d659-43bc-b61a-f84b6dbd1f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:00:83:19:96:4f:e5:a1:b7:28:e0:a2:60:
ad:06:ba:35:5f:46:84:00:04:fc:6c:d8:d2:e2:2a:
f1:07:fb:95:4e:0c:f1:67:36:a7:b4:a7:91:1a:bc:
ce:50:66:5b:b2:b7:ad:09:0e:2a:a5:81:c0:28:ef:
68:a0:e2:ec:fc:42:5f:91:87:96:99:f9:eb:45:1d:
9d:3e:0a:b8:38:49:4b:6e:fd:ef:72:09:ec:c1:f4:
e8:b2:70:d7:1b:95:a0:55:92:93:4b:58:9f:53:28:
99:8f:0c:bb:ef:55:36:9e:0e:59:50:6a:cc:52:fa:
89:82:8c:9e:a1:2c:f0:18:1b:cc:a4:e0:28:04:aa:
fa:6a:59:3b:05:ce:a2:db:e4:84:e6:1a:23:53:8e:
54:cb:bf:54:da:c0:4b:56:b9:67:99:ab:38:d7:3c:
3a:54:aa:a8:4f:a1:00:bf:3a:af:ff:12:2c:b1:b1:
95:cc:ed:87:c5:94:8f:6d:38:68:54:e2:9c:f6:ff:
ba:42:03:79:a2:2d:e4:a3:9b:cc:ed:9e:79:e4:04:
ad:9c:af:67:0e:e3:0e:f2:22:f2:fb:21:ab:43:43:
03:a2:ea:de:e7:ab:bf:67:ad:70:ab:c6:2e:f4:d5:
8d:42:d4:bc:a6:8a:20:c2:88:f1:0e:ec:0d:da:ec:
be:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:64:CB:D6:EE:AA:A3:81:47:D0:1C:7D:64:A3:02:2B:BD:43:85:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac1701ec-ec1b-3b11-a4c9-2778e07a6cd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:fa:fd:31:0a:83:68:a0:d0:ea:e6:9f:ac:40:01:fa:fe:ee:
cd:f7:d9:88:ed:af:86:32:18:8a:89:36:5d:69:a0:9e:29:27:
00:05:63:17:91:a9:62:ec:f0:72:fc:b0:c8:3a:63:e5:d3:08:
c1:bc:14:73:67:9f:4f:34:54:6f:99:ee:f7:c1:08:0f:57:9b:
66:8c:5f:07:3d:c3:02:f1:5e:18:eb:d1:3a:65:31:05:25:c5:
8f:ed:09:9c:89:34:53:ed:d0:2a:44:58:7d:97:dc:ab:d9:8e:
8b:19:e9:7f:c5:f0:18:4b:b2:f2:d8:69:7f:d3:9c:80:86:0f:
eb:b5:03:1a:8c:34:1a:9c:84:9e:05:05:91:4b:ae:ff:e4:20:
1e:ff:fd:0f:b4:04:29:52:d9:31:40:56:51:89:ab:c1:18:d2:
e8:b5:86:40:f6:38:e9:b8:c3:11:8e:cb:f6:0f:ac:b3:b5:1b:
bb:38:30:b9:5f:02:9f:a7:cf:83:99:30:6a:32:f1:26:20:51:
15:b2:f7:ea:69:32:03:aa:eb:a2:1d:8c:ab:c1:2b:e4:f5:69:
1a:f6:33:9a:92:8b:8b:e5:fd:6c:6a:f9:e9:ba:7e:aa:e0:23:
bb:c3:8b:c0:b1:ec:57:57:c2:11:61:94:bb:be:4e:d4:34:1a:
1c:ce:33:d4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1aRNO5vHwpyn5BngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
Mzk0YjMxZDUtZDY1OS00M2JjLWI2MWEtZjg0YjZkYmQxZjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdIAgxmWT+WhtyjgomCtBro1X0aEAAT8bNjS
4irxB/uVTgzxZzantKeRGrzOUGZbsretCQ4qpYHAKO9ooOLs/EJfkYeWmfnrRR2d
Pgq4OElLbv3vcgnswfTosnDXG5WgVZKTS1ifUyiZjwy771U2ng5ZUGrMUvqJgoye
oSzwGBvMpOAoBKr6alk7Bc6i2+SE5hojU45Uy79U2sBLVrlnmas41zw6VKqoT6EA
vzqv/xIssbGVzO2HxZSPbThoVOKc9v+6QgN5oi3ko5vM7Z555AStnK9nDuMO8iLy
+yGrQ0MDoure56u/Z61wq8Yu9NWNQtS8poogwojxDuwN2uy+5wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL9ky9buqqOBR9AcfWSjAiu9Q4UCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWMxNzAxZWMtZWMxYi0z
YjExLWE0YzktMjc3OGUwN2E2Y2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgBUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQvr9MQqDaKDQ6uafrEAB+v7uzffZiO2vhjIYiok2XWmgniknAAVjF5Gp
YuzwcvywyDpj5dMIwbwUc2efTzRUb5nu98EID1ebZoxfBz3DAvFeGOvROmUxBSXF
j+0JnIk0U+3QKkRYfZfcq9mOixnpf8XwGEuy8thpf9OcgIYP67UDGow0GpyEngUF
kUuu/+QgHv/9D7QEKVLZMUBWUYmrwRjS6LWGQPY46bjDEY7L9g+ss7UbuzgwuV8C
n6fPg5kwajLxJiBRFbL36mkyA6rroh2Mq8Er5PVpGvYzmpKLi+X9bGr56bp+quAj
u8OLwLHsV1fCEWGUu75O1DQaHM4z1A==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:25 2025 by rpki-client