Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b0869f6a-2e9c-3416-805d-2d5da127a142.roa
File: b0869f6a-2e9c-3416-805d-2d5da127a142.roa (raw, json)
Hash identifier: 4s+fDt9u46bE+FX1l5eQvWouqKLA7cQR1GWLPc1LjSo=
Subject key identifier: 00:78:A7:9E:51:53:4A:56:57:A0:F9:95:3E:3D:DF:44:4F:59:4D:CC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401DBCB243E3D69BAA8F21FD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b0869f6a-2e9c-3416-805d-2d5da127a142.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 108.128.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1d:bc:b2:43:e3:d6:9b:aa:8f:21:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=7c8afdcf-836f-44f9-a626-c225c025b239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:28:ea:74:20:e9:03:48:0d:14:45:d1:89:68:
f9:22:f4:6f:dc:e7:43:b0:3b:5d:58:17:69:bb:cc:
10:79:d7:1c:c0:42:09:09:fd:26:5a:61:8f:a3:41:
5a:74:99:1d:f6:8b:e6:31:c9:11:fb:ca:53:30:29:
8c:77:01:15:82:3d:97:30:24:45:f1:55:e3:aa:ec:
ba:06:1f:f1:17:74:8e:47:ad:a8:80:09:fc:24:cc:
46:0a:9b:cf:05:b7:1a:6b:44:04:a6:09:6a:e2:a3:
7d:33:91:a9:11:ad:1e:e7:a5:aa:b3:3e:4d:0a:53:
ca:88:39:fb:af:45:57:78:77:ef:86:b5:06:84:2f:
c6:af:ff:98:97:b5:58:c8:1d:87:34:dd:98:9a:d7:
d8:9b:0c:f2:70:df:a9:4c:5c:f5:a4:38:ea:cd:ef:
8b:f5:f0:b0:aa:a1:08:4a:54:1a:c6:f2:88:b1:c8:
74:e0:95:13:de:90:6a:96:56:ea:09:04:c3:e4:e1:
e6:14:34:93:87:25:61:ac:81:45:9f:f0:11:30:fc:
d9:3c:6a:46:c4:26:33:83:51:8e:e7:b1:75:b8:0c:
f3:a5:1f:8a:c3:90:06:6a:ff:97:6c:ad:07:fa:c0:
c5:a5:86:0d:3e:43:e9:b6:14:04:cc:91:39:c2:99:
24:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:78:A7:9E:51:53:4A:56:57:A0:F9:95:3E:3D:DF:44:4F:59:4D:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b0869f6a-2e9c-3416-805d-2d5da127a142.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.128.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:b2:96:e2:c9:1a:4c:e7:09:8f:83:0c:7c:16:92:c2:12:ac:
22:d8:13:fb:f6:58:9e:35:c4:82:e1:16:00:60:78:7e:06:29:
ee:e2:5b:3c:08:41:1d:f0:84:3c:2b:de:9f:5a:94:f8:cf:c6:
f1:93:a0:da:a2:9d:0c:ab:da:15:f2:8f:a1:52:dd:06:62:3c:
15:76:f9:cb:5b:56:31:63:be:c5:e4:0a:a9:84:fe:77:bf:1c:
33:e2:79:ca:f7:4d:69:d0:08:29:27:cf:a2:8b:df:67:e9:46:
0a:fb:3d:78:f2:0d:45:1a:2b:b8:c8:d8:26:07:f7:73:38:ae:
9d:e4:90:d0:0f:18:ee:5d:cd:b5:c1:9a:3d:3b:38:5e:b8:88:
ed:65:c8:d7:d8:21:12:fd:a3:0c:6e:e8:2c:e7:4d:11:2b:d1:
e7:ec:3f:66:2f:64:3a:24:7c:88:53:d6:13:a9:9c:9a:c2:33:
a1:b3:66:10:b8:6e:2a:69:58:e3:96:81:7a:32:38:8c:a8:52:
b0:45:7c:e3:32:35:14:45:e4:92:db:44:31:93:9d:6c:6a:8c:
be:5b:9e:01:b0:76:a3:35:7a:09:ea:a4:12:df:0f:aa:84:99:
35:e2:3a:9c:51:ae:77:be:c6:be:78:6f:dd:26:7c:68:f6:f0:
00:19:08:3d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAdvLJD49abqo8h/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
N2M4YWZkY2YtODM2Zi00NGY5LWE2MjYtYzIyNWMwMjViMjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ijqdCDpA0gNFEXRiWj5IvRv3OdDsDtdWBdp
u8wQedccwEIJCf0mWmGPo0FadJkd9ovmMckR+8pTMCmMdwEVgj2XMCRF8VXjquy6
Bh/xF3SOR62ogAn8JMxGCpvPBbcaa0QEpglq4qN9M5GpEa0e56Wqsz5NClPKiDn7
r0VXeHfvhrUGhC/Gr/+Yl7VYyB2HNN2YmtfYmwzycN+pTFz1pDjqze+L9fCwqqEI
SlQaxvKIsch04JUT3pBqllbqCQTD5OHmFDSThyVhrIFFn/ARMPzZPGpGxCYzg1GO
57F1uAzzpR+Kw5AGav+XbK0H+sDFpYYNPkPpthQEzJE5wpkkjQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAB4p55RU0pWV6D5lT4930RPWU3MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjA4NjlmNmEtMmU5Yy0z
NDE2LTgwNWQtMmQ1ZGExMjdhMTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDbIAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAG7KW4skaTOcJj4MMfBaSwhKsItgT+/ZYnjXEguEWAGB4fgYp7uJbPAhB
HfCEPCven1qU+M/G8ZOg2qKdDKvaFfKPoVLdBmI8FXb5y1tWMWO+xeQKqYT+d78c
M+J5yvdNadAIKSfPoovfZ+lGCvs9ePINRRoruMjYJgf3cziuneSQ0A8Y7l3NtcGa
PTs4XriI7WXI19ghEv2jDG7oLOdNESvR5+w/Zi9kOiR8iFPWE6mcmsIzobNmELhu
KmlY45aBejI4jKhSsEV84zI1FEXkkttEMZOdbGqMvlueAbB2ozV6CeqkEt8PqoSZ
NeI6nFGud77Gvnhv3SZ8aPbwABkIPQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:33 2025 by rpki-client