Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b72a9e2c-8edc-32a9-af43-d320c1929be9.roa
File: b72a9e2c-8edc-32a9-af43-d320c1929be9.roa (raw, json)
Hash identifier: iZFgjvNJ6Z7YLOnliUX8FEgSvJH9/43yG9OGtBirY80=
Subject key identifier: 22:9B:58:D3:80:6B:61:6D:EA:62:2D:C3:2F:53:A5:BE:F7:1B:92:64
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FAF767DBFA67F09AE5800BB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b72a9e2c-8edc-32a9-af43-d320c1929be9.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 40.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:af:76:7d:bf:a6:7f:09:ae:58:00:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=d2d58053-47fe-494f-a5f5-4340d77a9923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:c5:8b:7b:3b:03:94:b0:b7:c7:e1:f9:85:
a3:4b:ee:f4:ae:ae:53:ec:77:77:da:31:81:3e:ae:
37:c6:7a:c6:43:ba:87:c3:bf:c4:0e:29:64:21:0f:
1e:09:a1:ef:63:aa:77:08:a2:af:69:dc:28:c6:c5:
da:7f:53:ef:25:56:a2:16:b7:3b:b4:b2:eb:ec:1a:
d8:ba:f6:ba:d1:d9:4a:f9:9c:a3:54:bf:37:3f:d9:
37:ab:9a:fd:1e:e1:e4:90:64:84:04:6c:53:64:6c:
ff:3d:53:7d:a3:49:dc:10:e7:4f:d8:56:78:ac:f6:
17:20:d5:29:4c:76:9b:80:09:3b:57:a4:7b:50:a4:
ae:96:95:fa:45:0c:b0:59:17:f9:35:e9:b9:25:6f:
c8:43:18:e2:b2:08:1e:fd:43:3a:c7:89:cf:9f:21:
94:7e:5a:71:98:c9:a6:d3:c4:c2:d8:ed:f0:2a:34:
6e:0e:f4:97:fc:2a:e0:40:e3:69:59:be:d9:17:1e:
1d:ba:58:bd:3a:81:49:52:53:58:56:bf:54:0c:15:
a4:97:e8:d3:78:2a:c0:a4:f4:6e:4a:17:2c:97:b3:
7a:64:c1:48:8f:c9:1a:67:80:9c:af:09:9f:c4:41:
af:44:39:d8:d7:26:2c:3a:67:af:d9:4b:67:19:cb:
df:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9B:58:D3:80:6B:61:6D:EA:62:2D:C3:2F:53:A5:BE:F7:1B:92:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b72a9e2c-8edc-32a9-af43-d320c1929be9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:58:27:2c:a4:77:a3:d6:0b:f5:7d:46:d1:aa:01:21:7c:b9:
97:ff:7a:c9:2e:30:0f:9b:45:4b:7d:1d:1b:a2:82:7c:34:ba:
55:e0:c1:88:70:bb:ec:74:24:7a:0f:eb:d6:f7:58:56:82:5e:
e6:d3:2b:f3:e9:78:af:dc:ac:b0:b4:05:9d:90:75:2d:e9:9c:
04:2d:72:7c:64:fc:d6:30:0e:0d:a6:9d:fb:9d:4b:d4:5b:bc:
90:0e:41:a2:34:8e:0f:52:5c:95:43:a3:a8:fb:37:fb:8b:1d:
61:bc:fa:7d:d3:22:32:13:ed:c5:17:86:bd:16:e3:92:78:04:
c5:87:73:7c:73:40:7f:9e:46:2a:24:44:fd:1d:fd:4e:f2:c3:
9c:6b:1c:6b:ce:81:c1:6d:03:09:4b:72:9d:d5:b4:f6:82:37:
12:87:45:f9:a7:ca:15:4b:0b:da:54:99:fe:99:eb:e4:e1:d3:
7f:80:89:7c:82:da:c0:ec:d8:c8:4c:8f:e6:5c:ce:26:e7:8e:
c7:4b:09:4b:8a:a2:99:86:9a:d4:61:e3:f5:f3:25:2a:ff:22:
d0:77:e8:06:b8:33:10:71:a5:1a:14:99:f6:bf:61:22:6d:a6:
5e:ba:36:9b:80:90:c4:2b:d3:bc:fa:5b:2e:8d:e8:89:41:fc:
77:14:4c:0e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+vdn2/pn8JrlgAuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNDEyMDAwMFoXDTIyMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZDJkNTgwNTMtNDdmZS00OTRmLWE1ZjUtNDM0MGQ3N2E5OTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWTFi3s7A5Swt8fh+YWjS+70rq5T7Hd32jGB
Pq43xnrGQ7qHw7/EDilkIQ8eCaHvY6p3CKKvadwoxsXaf1PvJVaiFrc7tLLr7BrY
uva60dlK+ZyjVL83P9k3q5r9HuHkkGSEBGxTZGz/PVN9o0ncEOdP2FZ4rPYXINUp
THabgAk7V6R7UKSulpX6RQywWRf5Nem5JW/IQxjisgge/UM6x4nPnyGUflpxmMmm
08TC2O3wKjRuDvSX/CrgQONpWb7ZFx4duli9OoFJUlNYVr9UDBWkl+jTeCrApPRu
Shcsl7N6ZMFIj8kaZ4CcrwmfxEGvRDnY1yYsOmev2UtnGcvfUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCKbWNOAa2Ft6mItwy9Tpb73G5JkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjcyYTllMmMtOGVkYy0z
MmE5LWFmNDMtZDMyMGMxOTI5YmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAa1gnLKR3o9YL9X1G0aoBIXy5l/96yS4wD5tFS30dG6KCfDS6VeDBiHC7
7HQkeg/r1vdYVoJe5tMr8+l4r9yssLQFnZB1LemcBC1yfGT81jAODaad+51L1Fu8
kA5BojSOD1JclUOjqPs3+4sdYbz6fdMiMhPtxReGvRbjkngExYdzfHNAf55GKiRE
/R39TvLDnGsca86BwW0DCUtyndW09oI3EodF+afKFUsL2lSZ/pnr5OHTf4CJfILa
wOzYyEyP5lzOJueOx0sJS4qimYaa1GHj9fMlKv8i0HfoBrgzEHGlGhSZ9r9hIm2m
Xro2m4CQxCvTvPpbLo3oiUH8dxRMDg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:42:02 2025 by rpki-client