Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af9406cd-f64d-3939-9449-2ddfb695b879.roa
File: af9406cd-f64d-3939-9449-2ddfb695b879.roa (raw, json)
Hash identifier: bbW/FAa7fOWZ+idupAjHd2L5n1yQxrh4FHpP0zxenxY=
Subject key identifier: 67:BF:2A:FE:2A:85:24:07:D2:49:A8:6C:3D:19:45:4C:E7:13:29:64
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404050798685742CA2BB6F4DC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af9406cd-f64d-3939-9449-2ddfb695b879.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 198.99.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:50:79:86:85:74:2c:a2:bb:6f:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=ac0a39bc-5e52-4eab-801e-6b974493bdef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:f7:92:56:a2:2e:de:75:45:62:47:5b:e5:
36:91:0d:2a:dd:9b:6d:d1:39:07:dc:8a:96:ee:24:
45:86:7e:df:18:60:59:d9:df:bf:47:04:4c:e1:2d:
31:6c:c5:e0:2a:00:f1:56:27:a4:23:06:4d:69:36:
c3:d0:e0:f2:f8:c4:f3:17:dc:82:d0:56:95:ce:4b:
95:6e:9d:9a:e5:38:0c:10:75:c3:0c:99:58:2c:95:
2b:c8:37:68:6a:c2:ea:b3:84:06:1b:c3:b2:3e:bd:
8d:e5:76:96:be:d8:88:9d:7b:f3:51:a8:ba:ed:0a:
15:1d:36:f7:ac:e8:e1:2d:77:47:eb:f4:4b:67:a9:
cb:08:ce:32:8d:b2:fa:d4:dd:4a:f4:a4:da:dc:58:
4e:69:7b:e9:27:f8:a7:39:65:f8:d8:45:c6:f5:7b:
b4:9c:a8:2d:3c:2e:41:6a:04:6b:f6:00:ad:7e:19:
4b:e9:ec:cb:26:26:49:70:6a:5e:fc:da:18:48:34:
96:0c:60:36:de:9a:47:b3:96:a4:7b:6a:76:48:0a:
20:cf:90:25:79:84:3a:3e:9e:f3:8b:81:9b:44:e5:
0a:d3:26:04:2a:20:9c:34:94:b4:6c:87:0f:c7:c6:
e9:a2:a2:45:e5:9d:49:14:45:8c:87:c1:8c:a1:fb:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:2A:FE:2A:85:24:07:D2:49:A8:6C:3D:19:45:4C:E7:13:29:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af9406cd-f64d-3939-9449-2ddfb695b879.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.99.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:00:7a:d1:c5:66:04:e6:64:5b:45:68:f8:35:e8:db:2b:8a:
ce:86:5e:4d:ea:67:c1:5e:c3:51:43:bb:ea:f1:2a:18:52:de:
09:12:f0:91:f4:65:b9:79:fc:53:8c:85:a1:ac:9e:02:ff:d8:
f5:14:fc:f2:82:1a:fd:57:eb:f9:a3:4a:24:08:b9:db:8d:38:
98:86:ce:bc:f5:42:5b:bc:d2:df:49:45:75:09:cc:e9:e7:a5:
65:82:7c:5c:1e:60:08:b1:6d:12:9b:81:16:bb:36:ef:5c:73:
39:4c:de:b3:14:13:69:1b:fa:c1:a7:7e:cb:d8:42:16:92:fa:
03:6c:97:d9:a0:bc:23:83:c0:2a:43:e9:18:2d:fd:64:de:a5:
6e:8a:21:0a:45:a8:17:eb:ed:fa:07:0e:66:b9:e8:00:61:51:
26:36:fb:93:eb:07:cd:8d:b7:7a:26:36:32:3e:45:03:32:ef:
4d:9d:3b:47:92:fd:3a:76:63:59:18:f4:9a:12:df:eb:ba:dc:
ca:38:21:ea:6a:c6:5d:32:22:a9:22:3d:a7:78:0e:47:46:48:
ae:06:71:b8:dc:39:d0:9e:d1:1a:e7:58:c6:73:fb:9d:ab:f6:
55:75:02:0a:02:91:2a:35:61:56:83:53:73:a5:d6:ec:2f:31:
fc:4e:1e:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBAUHmGhXQsortvTcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
YWMwYTM5YmMtNWU1Mi00ZWFiLTgwMWUtNmI5NzQ0OTNiZGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRz3klaiLt51RWJHW+U2kQ0q3Ztt0TkH3IqW
7iRFhn7fGGBZ2d+/RwRM4S0xbMXgKgDxViekIwZNaTbD0ODy+MTzF9yC0FaVzkuV
bp2a5TgMEHXDDJlYLJUryDdoasLqs4QGG8OyPr2N5XaWvtiInXvzUai67QoVHTb3
rOjhLXdH6/RLZ6nLCM4yjbL61N1K9KTa3FhOaXvpJ/inOWX42EXG9Xu0nKgtPC5B
agRr9gCtfhlL6ezLJiZJcGpe/NoYSDSWDGA23ppHs5ake2p2SAogz5AleYQ6Pp7z
i4GbROUK0yYEKiCcNJS0bIcPx8bpoqJF5Z1JFEWMh8GMofuUAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGe/Kv4qhSQH0kmobD0ZRUznEylkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWY5NDA2Y2QtZjY0ZC0z
OTM5LTk0NDktMmRkZmI2OTViODc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmMCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKYAetHFZgTmZFtFaPg16Nsris6GXk3qZ8Few1FDu+rxKhhS3gkS8JH0
Zbl5/FOMhaGsngL/2PUU/PKCGv1X6/mjSiQIuduNOJiGzrz1Qlu80t9JRXUJzOnn
pWWCfFweYAixbRKbgRa7Nu9cczlM3rMUE2kb+sGnfsvYQhaS+gNsl9mgvCODwCpD
6Rgt/WTepW6KIQpFqBfr7foHDma56ABhUSY2+5PrB82Nt3omNjI+RQMy702dO0eS
/Tp2Y1kY9JoS3+u63Mo4Iepqxl0yIqkiPad4DkdGSK4GcbjcOdCe0RrnWMZz+52r
9lV1AgoCkSo1YVaDU3Ol1uwvMfxOHjc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:31 2025 by rpki-client