Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b67665ab-1b98-3b54-84d0-46356d99cd9d.roa
File: b67665ab-1b98-3b54-84d0-46356d99cd9d.roa (raw, json)
Hash identifier: 9k2UoRILCZ5PKYjX1p9QUy64VJapYbgwGzzWvWlld3w=
Subject key identifier: 71:B1:44:C9:6D:80:A9:C0:3F:FE:B1:2C:87:34:62:CC:40:6A:DC:3E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584035689B8E9403BA0E5255B300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b67665ab-1b98-3b54-84d0-46356d99cd9d.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 168.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:68:9b:8e:94:03:ba:0e:52:55:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=1afb120c-3089-465e-8567-6925f7006d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:df:74:02:a6:3e:d6:09:c4:96:10:46:89:
0a:41:ab:b7:58:8d:3f:1b:ec:d0:87:b5:01:14:2d:
60:3e:28:bd:a2:47:9e:60:03:69:63:e1:cb:a3:ea:
4d:75:5a:45:60:04:53:26:c8:de:9f:d9:f3:5e:08:
01:19:5c:f5:43:f0:63:0a:ef:f0:93:a4:f8:7a:a3:
3a:f1:6a:66:f0:40:30:d0:5a:28:04:0a:36:ee:d8:
e1:73:5c:4d:f3:fa:35:b5:5b:aa:a6:d1:21:b6:bb:
96:01:05:ca:49:a3:85:25:56:e5:dc:08:07:c9:5d:
45:80:2a:47:b2:f0:8f:67:bc:c7:cf:17:29:68:73:
b7:e0:52:eb:21:77:b2:a3:c5:14:38:d7:2f:7f:77:
9d:e8:4d:08:39:7b:c7:19:aa:c4:60:65:42:5c:1c:
6b:e1:3c:08:ab:cb:e9:fe:92:89:3a:67:29:d3:1a:
de:01:34:4a:e2:8c:94:5a:27:83:12:a0:74:20:4e:
43:f4:39:7a:46:89:54:00:21:7a:2d:76:fd:23:e3:
c6:99:78:ec:f4:5f:56:eb:61:71:c6:6d:67:6a:85:
43:8c:66:cb:f5:73:8d:ac:4a:b7:27:56:76:c4:dd:
78:c6:27:91:ca:c6:e2:3c:5d:59:b3:da:a5:7c:00:
1c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B1:44:C9:6D:80:A9:C0:3F:FE:B1:2C:87:34:62:CC:40:6A:DC:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b67665ab-1b98-3b54-84d0-46356d99cd9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
168.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:e1:29:d6:a1:b3:7d:8d:89:95:b7:96:b5:b4:f0:c9:2d:de:
19:11:92:b6:4f:12:ab:0e:27:e0:84:b2:71:f0:10:50:04:ca:
eb:98:9b:0a:f6:89:94:89:66:c4:1f:8b:3f:78:d7:97:c5:b3:
3e:ad:47:66:98:48:50:b6:a8:38:d5:4d:5c:2b:d3:2b:85:8b:
01:eb:bc:43:5a:19:7b:9d:ae:d4:c3:2a:e5:ab:57:9f:51:80:
ce:e8:5a:0a:03:c0:8e:ae:de:a4:66:13:37:1a:6f:fc:6b:43:
6d:1b:61:4b:c6:d8:00:e7:8c:53:be:a5:e7:28:60:55:11:a3:
c1:38:a5:fc:e8:0f:7b:5b:a9:71:94:be:ad:12:ce:c0:24:cb:
6f:4b:39:78:93:9f:92:31:66:89:5b:04:87:76:14:a6:00:c2:
0f:c6:b1:8b:cc:29:e9:3a:42:ef:7f:b3:a0:db:47:7b:77:69:
2c:bd:73:1a:14:9b:d9:2d:ae:19:db:9e:bc:da:a5:d3:23:fc:
18:51:b2:59:20:4b:be:cd:37:4a:65:5f:82:1e:83:f5:d4:d4:
4f:4a:e6:2e:78:b1:2a:ef:cf:dd:f0:c6:91:f0:42:13:04:8b:
aa:f0:a2:85:4b:2d:76:d3:fd:47:14:ab:32:d2:61:9d:01:7b:
33:a5:a8:9a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA1aJuOlAO6DlJVswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMTEyMDAwMFoXDTIzMDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
MWFmYjEyMGMtMzA4OS00NjVlLTg1NjctNjkyNWY3MDA2ZDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAPfdAKmPtYJxJYQRokKQau3WI0/G+zQh7UB
FC1gPii9okeeYANpY+HLo+pNdVpFYARTJsjen9nzXggBGVz1Q/BjCu/wk6T4eqM6
8Wpm8EAw0FooBAo27tjhc1xN8/o1tVuqptEhtruWAQXKSaOFJVbl3AgHyV1FgCpH
svCPZ7zHzxcpaHO34FLrIXeyo8UUONcvf3ed6E0IOXvHGarEYGVCXBxr4TwIq8vp
/pKJOmcp0xreATRK4oyUWieDEqB0IE5D9Dl6RolUACF6LXb9I+PGmXjs9F9W62Fx
xm1naoVDjGbL9XONrEq3J1Z2xN14xieRysbiPF1Zs9qlfAAcuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHGxRMltgKnAP/6xLIc0YsxAatw+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjY3NjY1YWItMWI5OC0z
YjU0LTg0ZDAtNDYzNTZkOTljZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqJ0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAE+Ep1qGzfY2JlbeWtbTwyS3eGRGStk8Sqw4n4ISycfAQUATK65ibCvaJ
lIlmxB+LP3jXl8WzPq1HZphIULaoONVNXCvTK4WLAeu8Q1oZe52u1MMq5atXn1GA
zuhaCgPAjq7epGYTNxpv/GtDbRthS8bYAOeMU76l5yhgVRGjwTil/OgPe1upcZS+
rRLOwCTLb0s5eJOfkjFmiVsEh3YUpgDCD8axi8wp6TpC73+zoNtHe3dpLL1zGhSb
2S2uGduevNql0yP8GFGyWSBLvs03SmVfgh6D9dTUT0rmLnixKu/P3fDGkfBCEwSL
qvCihUstdtP9RxSrMtJhnQF7M6Womg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:30 2025 by rpki-client