Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afe2dfba-08e5-3c8a-a915-23ae949231b2.roa
File: afe2dfba-08e5-3c8a-a915-23ae949231b2.roa (raw, json)
Hash identifier: Zf/TwE4KMKHfSkW5+Zpzacq52U7GcUE6SPkt9kQj9PI=
Subject key identifier: CE:41:C8:A5:5D:EE:20:14:68:35:6B:44:99:CB:E7:08:43:52:0A:A2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD1B2C3E591D0F27446C37140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afe2dfba-08e5-3c8a-a915-23ae949231b2.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 99.87.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d1:b2:c3:e5:91:d0:f2:74:46:c3:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=59e5d35a-8d86-4ef4-ad12-094f76d9a072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:81:bc:b6:09:18:d4:fd:af:c0:ed:67:8a:
1b:14:b2:1c:ad:13:ec:38:c4:87:3c:70:83:50:21:
94:3e:77:9b:61:1c:90:a9:4e:59:63:29:c4:18:e7:
62:f1:0b:94:af:f6:e6:f7:68:b0:da:16:75:c6:0e:
ab:3e:01:42:95:8b:7f:14:c9:22:e2:e3:95:85:94:
c6:b4:be:b3:82:1c:25:8d:5c:9b:a5:57:a6:32:e2:
dd:3d:60:b0:fe:47:2b:fb:4b:1d:13:01:f0:41:c2:
07:95:f7:8d:cf:6a:36:37:5d:65:cd:cb:f9:95:7a:
56:70:46:e0:b0:5a:bb:c3:e7:e4:13:05:93:e2:5c:
be:f5:3b:e9:fe:e2:d7:f1:ad:d7:f7:1f:1f:a6:a4:
99:af:1d:22:29:10:ee:8d:b9:2a:2c:cb:11:c9:7d:
37:d2:49:a8:b4:e9:b0:05:07:e0:30:28:b9:d4:11:
95:f1:a4:8a:f8:a8:5d:e3:90:32:48:e7:d0:b8:b7:
1d:a5:47:d7:5c:b3:2f:6e:28:88:2d:51:51:4f:1d:
ce:ca:02:ee:cd:24:47:6d:98:57:fd:ed:db:30:ba:
6c:f2:7c:91:25:da:83:b2:77:89:0b:06:b6:f6:62:
49:dd:c2:04:d2:48:3d:75:15:40:20:d2:d7:77:7e:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:41:C8:A5:5D:EE:20:14:68:35:6B:44:99:CB:E7:08:43:52:0A:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afe2dfba-08e5-3c8a-a915-23ae949231b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
99.87.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:83:b9:d7:04:c2:73:88:3f:50:09:10:00:01:43:dd:43:51:
b7:2b:7a:b5:bd:e2:bb:52:3b:1a:aa:65:22:28:2a:e0:ee:05:
1d:49:1e:b0:01:6d:96:c9:07:92:98:81:81:d9:08:8d:0c:f0:
5f:6f:73:2b:71:ce:dd:e3:2d:b6:24:51:32:ce:ae:44:28:f8:
a5:82:3f:0c:1f:f2:14:a3:c2:75:97:e4:ce:7a:43:9f:0c:0f:
37:c5:fe:b5:fa:da:23:61:85:6f:72:f9:66:dc:58:e9:8e:b6:
09:c5:4c:27:b8:40:3c:cc:81:6c:51:d0:61:4d:08:a7:1c:55:
d1:d2:dc:14:0f:3a:9d:6b:b3:c1:99:2b:13:99:cd:3d:ea:ad:
f7:bf:21:70:b4:55:7c:dc:76:1c:fd:63:95:c3:5c:62:b8:44:
85:bc:1d:3e:a4:99:4c:ed:f5:ac:91:20:68:24:0c:20:51:0e:
f0:57:a8:4a:c2:8c:54:2a:4b:d8:1f:40:c1:b1:a9:87:44:11:
6f:5d:20:36:ac:73:45:57:2d:e5:d7:f0:62:2b:4c:f2:45:7f:
e0:3e:37:e3:23:af:cd:d9:99:09:cb:b2:67:c9:38:e9:c4:9d:
0e:f5:bf:08:bd:82:14:92:c2:94:e4:77:4a:b1:e3:8a:fb:78:
8b:51:29:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3RssPlkdDydEbDcUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUwNjEyMDAwMFoXDTIyMDYxMTA0MDAwMFowLzEtMCsGA1UEAxMk
NTllNWQzNWEtOGQ4Ni00ZWY0LWFkMTItMDk0Zjc2ZDlhMDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxeBvLYJGNT9r8DtZ4obFLIcrRPsOMSHPHCD
UCGUPnebYRyQqU5ZYynEGOdi8QuUr/bm92iw2hZ1xg6rPgFClYt/FMki4uOVhZTG
tL6zghwljVybpVemMuLdPWCw/kcr+0sdEwHwQcIHlfeNz2o2N11lzcv5lXpWcEbg
sFq7w+fkEwWT4ly+9Tvp/uLX8a3X9x8fpqSZrx0iKRDujbkqLMsRyX030kmotOmw
BQfgMCi51BGV8aSK+Khd45AySOfQuLcdpUfXXLMvbiiILVFRTx3OygLuzSRHbZhX
/e3bMLps8nyRJdqDsneJCwa29mJJ3cIE0kg9dRVAINLXd36RywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5ByKVd7iAUaDVrRJnL5whDUgqiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWZlMmRmYmEtMDhlNS0z
YzhhLWE5MTUtMjNhZTk0OTIzMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHY1cAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWDudcEwnOIP1AJEAABQ91DUbcrerW94rtSOxqqZSIoKuDuBR1JHrAB
bZbJB5KYgYHZCI0M8F9vcytxzt3jLbYkUTLOrkQo+KWCPwwf8hSjwnWX5M56Q58M
DzfF/rX62iNhhW9y+WbcWOmOtgnFTCe4QDzMgWxR0GFNCKccVdHS3BQPOp1rs8GZ
KxOZzT3qrfe/IXC0VXzcdhz9Y5XDXGK4RIW8HT6kmUzt9ayRIGgkDCBRDvBXqErC
jFQqS9gfQMGxqYdEEW9dIDasc0VXLeXX8GIrTPJFf+A+N+Mjr83ZmQnLsmfJOOnE
nQ71vwi9ghSSwpTkd0qx44r7eItRKbk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:22 2025 by rpki-client