Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1ad5f72-57fa-3122-aa63-52c69b2d6949.roa
File: b1ad5f72-57fa-3122-aa63-52c69b2d6949.roa (raw, json)
Hash identifier: FS0o8ZoI5/rfx+cGGiKmWPLyfs+3mPY0k3NjlxYVhFo=
Subject key identifier: 25:E6:A4:EC:57:FD:BA:3F:8C:15:72:CC:B2:B4:52:F7:B7:9F:B9:8B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5604E88910F365DD9692CA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1ad5f72-57fa-3122-aa63-52c69b2d6949.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 27 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 40.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:56:04:e8:89:10:f3:65:dd:96:92:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Apr 27 04:00:00 2022 GMT
Subject: CN=a9d53983-5fc8-4e59-9afa-378f760b92fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:b6:45:05:68:05:eb:26:aa:0f:76:57:cb:
ff:85:1f:e2:ce:0a:05:92:1a:f5:1a:af:ca:0c:60:
3c:79:ff:82:c9:8f:ed:9f:b1:ca:eb:fb:19:95:df:
d9:01:a4:eb:c7:46:f4:73:76:17:5b:ed:4e:0c:9b:
ca:68:98:29:e1:9a:f3:6d:ea:8d:34:7c:be:48:52:
c6:41:31:ac:b4:ea:91:3e:d6:67:fc:ba:b9:03:c0:
a9:28:94:b8:d0:4a:76:f2:44:2c:b7:05:c0:d5:02:
f0:79:dc:ec:57:76:c6:6b:40:c8:ba:93:61:85:1e:
3c:23:6e:a5:03:4e:b0:73:8f:d9:4b:12:a9:94:c5:
9a:56:47:61:31:28:e4:28:de:5c:a4:9f:9b:55:81:
c2:77:d2:09:41:23:26:dc:1a:03:34:ba:c3:ce:78:
da:18:cd:cb:2b:01:88:03:d4:04:91:70:1b:21:8a:
a7:27:75:67:26:ab:ad:97:94:86:36:32:39:ea:ec:
f3:41:a3:08:80:df:ce:67:7c:c4:81:34:a1:80:00:
5e:95:12:4a:9b:8d:2b:a4:06:19:d5:54:45:87:01:
78:27:21:54:80:bd:9e:9d:c1:3a:35:99:5c:db:9c:
5c:33:dc:dd:69:60:d7:b6:f0:84:e0:c7:79:de:21:
58:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E6:A4:EC:57:FD:BA:3F:8C:15:72:CC:B2:B4:52:F7:B7:9F:B9:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1ad5f72-57fa-3122-aa63-52c69b2d6949.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:03:1f:a6:04:32:20:e0:33:1e:75:3d:e9:f8:68:4c:d1:17:
9b:05:28:21:74:6f:3a:00:df:01:17:e9:23:85:64:95:26:1f:
ad:a7:61:3a:a5:8a:95:ce:25:bf:2b:d8:38:2d:f4:4e:e2:1e:
37:57:cb:78:1c:df:83:09:bf:bc:73:f8:95:fd:c0:9a:d9:e8:
ef:51:f8:d1:be:6f:a7:3a:c6:50:1f:e5:17:1b:ba:01:eb:ea:
8a:7d:e9:59:19:ee:c8:4a:0d:1f:ba:fd:43:59:e8:f7:2c:72:
de:d6:03:54:c3:ab:d3:eb:e0:26:98:fc:07:ba:2b:ec:3a:98:
88:67:be:a5:a2:55:69:0c:d8:63:92:26:af:a0:1b:97:cd:d7:
05:e8:f1:c0:18:2d:9d:1d:95:bd:8b:bf:9e:9e:f7:6a:44:f3:
57:a8:f7:6f:78:99:e1:c9:2b:99:34:5d:82:08:cb:c3:26:27:
de:f2:62:48:07:dc:51:5d:7c:fa:6f:7b:44:37:55:b2:ae:9b:
2b:0f:80:20:45:9f:45:7c:5f:50:96:f5:39:f5:25:1b:e2:df:
19:23:30:e3:f2:b7:47:71:ae:dc:e3:25:55:ad:15:9b:c7:9e:
8b:71:43:4d:49:8c:29:1d:a7:73:54:14:35:d5:c5:e9:8f:7a:
af:19:c1:8f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1WBOiJEPNl3ZaSygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyMzA0MDAwMFoXDTIyMDQyNzA0MDAwMFowLzEtMCsGA1UEAxMk
YTlkNTM5ODMtNWZjOC00ZTU5LTlhZmEtMzc4Zjc2MGI5MmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPy2RQVoBesmqg92V8v/hR/izgoFkhr1Gq/K
DGA8ef+CyY/tn7HK6/sZld/ZAaTrx0b0c3YXW+1ODJvKaJgp4ZrzbeqNNHy+SFLG
QTGstOqRPtZn/Lq5A8CpKJS40Ep28kQstwXA1QLwedzsV3bGa0DIupNhhR48I26l
A06wc4/ZSxKplMWaVkdhMSjkKN5cpJ+bVYHCd9IJQSMm3BoDNLrDznjaGM3LKwGI
A9QEkXAbIYqnJ3VnJqutl5SGNjI56uzzQaMIgN/OZ3zEgTShgABelRJKm40rpAYZ
1VRFhwF4JyFUgL2encE6NZlc25xcM9zdaWDXtvCE4Md53iFYFQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCXmpOxX/bo/jBVyzLK0Uve3n7mLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjFhZDVmNzItNTdmYS0z
MTIyLWFhNjMtNTJjNjliMmQ2OTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqAMfpgQyIOAzHnU96fhoTNEXmwUoIXRvOgDfARfpI4VklSYfradhOqWK
lc4lvyvYOC30TuIeN1fLeBzfgwm/vHP4lf3Amtno71H40b5vpzrGUB/lFxu6Aevq
in3pWRnuyEoNH7r9Q1no9yxy3tYDVMOr0+vgJpj8B7or7DqYiGe+paJVaQzYY5Im
r6Abl83XBejxwBgtnR2VvYu/np73akTzV6j3b3iZ4ckrmTRdggjLwyYn3vJiSAfc
UV18+m97RDdVsq6bKw+AIEWfRXxfUJb1OfUlG+LfGSMw4/K3R3Gu3OMlVa0Vm8ee
i3FDTUmMKR2nc1QUNdXF6Y96rxnBjw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:15:02 2025 by rpki-client