Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b517af49-5e32-3486-b2d2-9e4bd85a203b.roa
File: b517af49-5e32-3486-b2d2-9e4bd85a203b.roa (raw, json)
Hash identifier: nYMqh8AIEI0xKoE7jnqIWSKuHkn6z/SoTKQmru1Mdw4=
Subject key identifier: 3A:E7:4C:C3:0F:8A:59:B3:1E:40:76:B0:77:D1:DB:49:7C:B4:44:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E278B6A055044D559CBC74F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b517af49-5e32-3486-b2d2-9e4bd85a203b.roa
Signing time: Mon 06 Jun 2022 12:00:00 +0000
ROA not before: Mon 06 Jun 2022 12:00:00 +0000
ROA not after: Tue 12 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 40.177.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:27:8b:6a:05:50:44:d5:59:cb:c7:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 6 12:00:00 2022 GMT
Not After : Jul 12 04:00:00 2022 GMT
Subject: CN=9f565f7c-2be5-4ac3-b12c-f269b78c7f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:92:77:40:cd:7a:85:7d:ce:97:fe:e0:0b:
3e:61:08:94:37:25:db:f2:ec:97:80:c4:1c:82:ac:
56:ae:f0:16:c7:8c:aa:da:04:c6:42:bc:f4:71:8a:
be:76:05:d3:bb:88:fd:19:7f:57:c6:87:1e:10:8d:
61:41:4f:42:25:20:cb:6c:81:a5:5d:68:b2:10:5c:
e9:62:59:d1:af:60:8f:74:d5:ae:9d:59:c5:8e:78:
29:e1:04:44:e0:20:fe:26:89:2d:a6:6e:e6:0f:40:
b9:01:ac:cb:a9:d3:ea:0a:11:a4:6a:61:82:1b:30:
b1:36:69:15:95:c9:63:58:6a:df:f1:16:0d:19:2e:
5f:e7:0d:72:33:ab:42:81:f6:18:33:62:62:8e:0d:
3f:aa:ae:75:c8:6c:6a:37:4b:79:24:fa:14:eb:78:
9d:98:c5:43:fb:bd:31:6f:5a:3a:43:ed:b3:d9:9f:
59:31:99:df:1a:9a:17:b5:74:5a:ad:a3:24:69:2a:
04:cc:9e:8c:c2:de:4b:80:0a:4e:6a:a1:05:e0:a4:
e8:62:a8:d4:43:55:39:4c:05:4b:78:47:90:16:7d:
b1:71:e1:c4:65:1a:82:19:e2:42:13:28:fe:d9:e1:
63:45:f8:a3:af:40:e6:fa:1d:0e:1c:74:17:7a:e4:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E7:4C:C3:0F:8A:59:B3:1E:40:76:B0:77:D1:DB:49:7C:B4:44:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b517af49-5e32-3486-b2d2-9e4bd85a203b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:1a:34:6b:0a:70:3b:dd:aa:56:eb:6a:41:0d:a8:ac:f8:86:
03:ec:33:bb:b0:09:ab:ac:37:1b:d5:20:8b:00:e9:a8:2f:03:
bc:a6:93:37:c7:20:75:58:13:bd:70:c0:95:4d:5f:de:f3:62:
3d:83:1d:52:e1:a5:70:80:45:7d:23:0e:1e:59:78:f9:94:13:
37:de:3e:1d:f5:ff:7d:fb:32:ec:88:6d:3e:f5:70:49:02:95:
e8:65:71:7f:65:69:7f:a3:90:ad:2d:18:fc:d6:31:4a:92:a1:
06:41:95:33:4b:8c:d2:3a:93:de:54:56:ac:3a:71:37:19:0a:
63:71:cd:df:13:95:b2:18:69:b9:3c:69:d8:58:7b:71:01:c4:
23:b6:b0:4c:f0:7f:67:ea:34:43:c8:56:33:db:61:2c:0c:15:
8e:46:a6:2b:f4:8a:c8:b7:f0:99:dc:86:c2:3c:78:6d:7c:2a:
53:05:e3:35:63:c0:fe:cf:f0:47:10:bf:62:89:90:41:97:37:
22:4f:1f:fc:47:cb:f6:37:7f:54:ee:91:20:c7:93:cf:17:66:
5c:f6:39:ce:e3:1c:ba:5a:ed:f0:69:e1:92:4b:67:d6:d4:e3:
1c:b5:e2:6a:1f:47:f6:7a:a8:f4:dc:a1:c7:45:de:1b:e9:c7:
3f:69:77:4f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4ni2oFUETVWcvHT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwNjEyMDAwMFoXDTIyMDcxMjA0MDAwMFowLzEtMCsGA1UEAxMk
OWY1NjVmN2MtMmJlNS00YWMzLWIxMmMtZjI2OWI3OGM3ZjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiWSd0DNeoV9zpf+4As+YQiUNyXb8uyXgMQc
gqxWrvAWx4yq2gTGQrz0cYq+dgXTu4j9GX9XxoceEI1hQU9CJSDLbIGlXWiyEFzp
YlnRr2CPdNWunVnFjngp4QRE4CD+Joktpm7mD0C5AazLqdPqChGkamGCGzCxNmkV
lcljWGrf8RYNGS5f5w1yM6tCgfYYM2Jijg0/qq51yGxqN0t5JPoU63idmMVD+70x
b1o6Q+2z2Z9ZMZnfGpoXtXRaraMkaSoEzJ6Mwt5LgApOaqEF4KToYqjUQ1U5TAVL
eEeQFn2xceHEZRqCGeJCEyj+2eFjRfijr0Dm+h0OHHQXeuS3cwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDrnTMMPilmzHkB2sHfR20l8tESlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjUxN2FmNDktNWUzMi0z
NDg2LWIyZDItOWU0YmQ4NWEyMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATxo0awpwO92qVutqQQ2orPiGA+wzu7AJq6w3G9UgiwDpqC8DvKaTN8cg
dVgTvXDAlU1f3vNiPYMdUuGlcIBFfSMOHll4+ZQTN94+HfX/ffsy7IhtPvVwSQKV
6GVxf2Vpf6OQrS0Y/NYxSpKhBkGVM0uM0jqT3lRWrDpxNxkKY3HN3xOVshhpuTxp
2Fh7cQHEI7awTPB/Z+o0Q8hWM9thLAwVjkamK/SKyLfwmdyGwjx4bXwqUwXjNWPA
/s/wRxC/YomQQZc3Ik8f/EfL9jd/VO6RIMeTzxdmXPY5zuMculrt8Gnhkktn1tTj
HLXiah9H9nqo9Nyhx0XeG+nHP2l3Tw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:07:37 2025 by rpki-client