Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8298ce6-5ecf-36c8-9b78-c510318f1147.roa
File: b8298ce6-5ecf-36c8-9b78-c510318f1147.roa (raw, json)
Hash identifier: Ui6Zc3iF2Lw72PhLHOjEDV3VmyXvThZCIsoX7iQDglg=
Subject key identifier: A8:F2:FA:96:8B:C4:6D:7E:21:18:C2:1A:C2:C5:FB:36:1C:BD:F2:27
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E20D3C509E447CBA0D80B4000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8298ce6-5ecf-36c8-9b78-c510318f1147.roa
Signing time: Fri 03 Jun 2022 20:03:08 +0000
ROA not before: Fri 03 Jun 2022 20:03:08 +0000
ROA not after: Sat 09 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 65.8.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:20:d3:c5:09:e4:47:cb:a0:d8:0b:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 3 20:03:08 2022 GMT
Not After : Jul 9 04:00:00 2022 GMT
Subject: CN=eebcaf7d-34d7-423e-ba52-4d2776b39baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:62:3c:37:19:37:75:90:b5:8a:9b:3a:f7:
b4:8e:0e:0d:ed:f2:0f:b7:80:81:e8:ea:a4:f5:cb:
96:80:1e:17:83:ed:3d:25:97:71:dd:6e:5a:61:11:
64:cd:c4:36:7e:ce:11:d3:91:3f:a1:d1:eb:b3:b5:
01:f9:ba:a2:c4:70:4a:08:12:ba:45:30:a3:ce:8d:
00:19:50:f8:ac:8a:96:e2:61:59:d0:95:24:fd:12:
c8:82:2f:a1:64:b6:07:1f:cb:79:f1:d5:5d:88:87:
a9:d2:35:16:5d:5a:53:1a:78:ab:48:a6:bd:c5:97:
73:41:87:65:6b:d6:fd:41:3a:98:2f:e0:5f:fb:f7:
02:4b:28:da:ac:a5:88:c8:37:11:e7:14:c6:f5:e7:
80:7d:bf:0c:81:86:fc:cf:14:15:dd:9e:7a:c9:77:
1a:aa:22:bb:9e:ba:bb:20:12:a7:f1:7e:a6:67:66:
b7:84:99:3f:14:ea:99:89:fc:49:28:59:4c:96:b4:
57:8d:82:9e:1f:14:58:5f:aa:6f:ce:58:61:3d:c7:
08:fc:b8:57:ca:0f:61:63:67:ac:16:69:13:b9:64:
3a:50:58:3a:f8:1d:c7:6a:8f:e0:75:15:14:aa:f5:
8e:91:03:8c:82:14:64:e8:bc:54:e5:a7:ab:5b:f2:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F2:FA:96:8B:C4:6D:7E:21:18:C2:1A:C2:C5:FB:36:1C:BD:F2:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8298ce6-5ecf-36c8-9b78-c510318f1147.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.8.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:fa:7b:e3:8a:4a:ab:bf:63:db:2f:97:bf:ec:24:f4:3c:a1:
78:99:6e:89:40:36:dc:6f:32:d3:44:4e:09:5f:10:00:f9:a3:
58:52:7f:dd:1f:01:8b:4d:e9:11:53:8e:f7:07:a9:2b:4d:14:
5f:44:22:bc:9e:4b:12:6b:7f:16:0a:e8:4a:5a:bf:52:79:81:
8b:4c:06:e4:46:09:69:da:96:5b:1c:29:aa:6c:fa:00:5e:fb:
4c:da:40:ce:19:e1:30:4b:e6:1a:d9:eb:47:82:85:de:17:79:
2c:53:54:64:58:38:c3:48:21:dc:20:85:7e:56:c3:26:5d:26:
a4:91:44:3b:60:a0:2c:8c:22:de:7f:04:d1:30:3b:48:97:f3:
7c:7b:75:01:99:73:85:e9:31:e1:36:50:3a:50:b2:40:dc:1b:
c3:dc:10:39:52:e5:54:dd:2a:df:63:8b:df:e8:42:dd:74:df:
44:c4:cd:74:c2:d0:77:d2:f9:f4:3e:5d:17:26:24:9c:92:91:
8e:04:05:e8:c1:48:53:fd:15:b6:a3:a5:f6:c7:9d:54:fc:a2:
48:d1:32:ab:40:2b:bf:52:48:77:6f:11:05:b6:ce:33:55:15:
2d:05:ac:a1:e7:99:82:4b:20:c8:f3:dd:45:a5:9a:f4:a4:f6:
11:7c:7c:f1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4g08UJ5EfLoNgLQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwMzIwMDMwOFoXDTIyMDcwOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWViY2FmN2QtMzRkNy00MjNlLWJhNTItNGQyNzc2YjM5YmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0piPDcZN3WQtYqbOve0jg4N7fIPt4CB6Oqk
9cuWgB4Xg+09JZdx3W5aYRFkzcQ2fs4R05E/odHrs7UB+bqixHBKCBK6RTCjzo0A
GVD4rIqW4mFZ0JUk/RLIgi+hZLYHH8t58dVdiIep0jUWXVpTGnirSKa9xZdzQYdl
a9b9QTqYL+Bf+/cCSyjarKWIyDcR5xTG9eeAfb8MgYb8zxQV3Z56yXcaqiK7nrq7
IBKn8X6mZ2a3hJk/FOqZifxJKFlMlrRXjYKeHxRYX6pvzlhhPccI/LhXyg9hY2es
FmkTuWQ6UFg6+B3Hao/gdRUUqvWOkQOMghRk6LxU5aerW/IhlwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKjy+paLxG1+IRjCGsLF+zYcvfInMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjgyOThjZTYtNWVjZi0z
NmM4LTliNzgtYzUxMDMxOGYxMTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCQQgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAR/p744pKq79j2y+Xv+wk9DyheJluiUA23G8y00ROCV8QAPmjWFJ/3R8B
i03pEVOO9wepK00UX0QivJ5LEmt/FgroSlq/UnmBi0wG5EYJadqWWxwpqmz6AF77
TNpAzhnhMEvmGtnrR4KF3hd5LFNUZFg4w0gh3CCFflbDJl0mpJFEO2CgLIwi3n8E
0TA7SJfzfHt1AZlzhekx4TZQOlCyQNwbw9wQOVLlVN0q32OL3+hC3XTfRMTNdMLQ
d9L59D5dFyYknJKRjgQF6MFIU/0VtqOl9sedVPyiSNEyq0Arv1JId28RBbbOM1UV
LQWsoeeZgksgyPPdRaWa9KT2EXx88Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:08 2025 by rpki-client