Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af1b5d54-c85c-3109-8bd6-bec7d8121a3e.roa
File: af1b5d54-c85c-3109-8bd6-bec7d8121a3e.roa (raw, json)
Hash identifier: NRP90RxCG+0fUHKzActBEGfi4QbW1Y26r2Q9yX2L72g=
Subject key identifier: E9:32:A7:41:52:EA:C3:E8:D6:76:A6:E1:0C:79:C1:4F:DF:D0:D2:C3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C68F47A6FA3E5EA765B603580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af1b5d54-c85c-3109-8bd6-bec7d8121a3e.roa
Signing time: Wed 29 Dec 2021 05:00:00 +0000
ROA not before: Wed 29 Dec 2021 05:00:00 +0000
ROA not after: Wed 02 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 76.223.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:68:f4:7a:6f:a3:e5:ea:76:5b:60:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 05:00:00 2021 GMT
Not After : Feb 2 05:00:00 2022 GMT
Subject: CN=152ef305-7545-4659-8a79-e809663b07aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:01:20:9a:a1:50:4a:60:f5:0b:96:c1:8f:
45:55:71:77:85:88:44:3c:17:c3:9a:0d:ba:f8:9a:
f4:41:8b:d5:3a:37:c8:13:20:bc:fc:68:44:86:d1:
73:43:bb:40:30:38:3a:70:e2:44:a4:bd:6f:4f:85:
85:d6:e2:49:0a:b7:29:7c:be:77:f4:73:bf:f9:44:
93:44:91:65:b5:ad:ed:e4:41:08:3c:18:99:82:15:
c7:50:74:12:b8:15:f7:fc:89:8e:82:ea:31:93:22:
5b:db:44:43:b1:01:1e:04:60:1b:1f:7f:a5:de:2b:
23:3b:3a:be:ca:eb:af:ac:0e:72:ce:3e:d1:e0:e6:
b3:cb:3a:8b:e6:ae:34:df:11:f4:98:f7:39:d2:a4:
7e:97:57:d6:4a:63:e2:d8:bc:df:7b:0d:38:44:fa:
dc:45:b2:bc:76:6b:bf:8b:80:36:bf:58:ce:77:9e:
75:f6:90:cc:f3:82:a5:92:6e:23:76:df:19:d0:cd:
0b:54:01:6f:1a:ea:99:9c:d7:5b:a1:50:cb:ce:b9:
4e:79:00:d0:64:57:92:1e:19:43:69:56:65:33:ec:
a4:11:9b:05:62:6c:29:d3:a4:34:9a:c8:b5:d2:11:
b2:e7:f7:91:98:85:91:1e:81:b1:88:c8:64:71:c8:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:32:A7:41:52:EA:C3:E8:D6:76:A6:E1:0C:79:C1:4F:DF:D0:D2:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af1b5d54-c85c-3109-8bd6-bec7d8121a3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.160.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:83:3f:2e:dc:79:6a:04:c2:21:0c:91:fb:7b:3d:31:12:b5:
ce:a9:f8:4b:26:2b:df:a7:e0:1e:45:ea:af:d2:0e:4a:10:5a:
cf:bf:62:d5:e2:1b:bd:f2:6a:39:91:ef:19:5c:0d:1c:b2:b3:
14:3e:7c:1b:7d:f4:59:78:98:5d:7b:7c:5a:87:b1:46:62:52:
68:07:38:8a:30:6f:c4:8e:14:6d:65:59:64:4d:e3:e0:a9:7b:
26:d8:ca:95:12:86:df:c1:4d:d8:66:21:f4:54:ff:d2:6b:f4:
59:b2:ee:21:2b:54:3c:95:a9:cc:5c:4d:ee:3a:e0:f5:cc:07:
d6:99:6b:b2:a4:15:b1:25:23:d0:a0:69:f6:b4:b5:79:48:c8:
5e:67:04:50:d5:c3:82:89:25:92:2d:19:32:ba:11:f5:ef:34:
7f:c8:ac:cd:83:7c:12:67:66:52:e3:d4:59:fa:d6:a7:5b:e9:
93:28:50:4b:9a:84:dc:a7:4a:06:74:65:2c:d3:b9:ab:9f:dc:
01:da:2d:50:88:f8:95:7c:65:81:f2:2a:7a:bc:05:8d:57:75:
f9:b7:b7:0f:e6:77:bb:fc:fe:00:44:12:28:a5:8f:bf:1a:c0:
27:a1:7b:93:44:21:51:e6:ea:be:ce:32:11:98:60:bd:06:8f:
fb:d1:b5:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDxo9Hpvo+XqdltgNYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIyOTA1MDAwMFoXDTIyMDIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
MTUyZWYzMDUtNzU0NS00NjU5LThhNzktZTgwOTY2M2IwN2FhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OkBIJqhUEpg9QuWwY9FVXF3hYhEPBfDmg26
+Jr0QYvVOjfIEyC8/GhEhtFzQ7tAMDg6cOJEpL1vT4WF1uJJCrcpfL539HO/+UST
RJFlta3t5EEIPBiZghXHUHQSuBX3/ImOguoxkyJb20RDsQEeBGAbH3+l3isjOzq+
yuuvrA5yzj7R4OazyzqL5q403xH0mPc50qR+l1fWSmPi2Lzfew04RPrcRbK8dmu/
i4A2v1jOd5519pDM84Klkm4jdt8Z0M0LVAFvGuqZnNdboVDLzrlOeQDQZFeSHhlD
aVZlM+ykEZsFYmwp06Q0msi10hGy5/eRmIWRHoGxiMhkccgkKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOkyp0FS6sPo1nam4Qx5wU/f0NLDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWYxYjVkNTQtYzg1Yy0z
MTA5LThiZDYtYmVjN2Q4MTIxYTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTN+gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+DPy7ceWoEwiEMkft7PTEStc6p+EsmK9+n4B5F6q/SDkoQWs+/YtXi
G73yajmR7xlcDRyysxQ+fBt99Fl4mF17fFqHsUZiUmgHOIowb8SOFG1lWWRN4+Cp
eybYypUSht/BTdhmIfRU/9Jr9Fmy7iErVDyVqcxcTe464PXMB9aZa7KkFbElI9Cg
afa0tXlIyF5nBFDVw4KJJZItGTK6EfXvNH/IrM2DfBJnZlLj1Fn61qdb6ZMoUEua
hNynSgZ0ZSzTuauf3AHaLVCI+JV8ZYHyKnq8BY1Xdfm3tw/md7v8/gBEEiilj78a
wCehe5NEIVHm6r7OMhGYYL0Gj/vRtRg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:53:30 2025 by rpki-client