Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8ea8390-1103-3aa8-8443-a8514cb9dbc8.roa
File: b8ea8390-1103-3aa8-8443-a8514cb9dbc8.roa (raw, json)
Hash identifier: YNDTnKrOHF3EYCnRg9tzWlP3DmAMFYDWFgZS13l3snE=
Subject key identifier: 76:76:46:85:5F:AC:29:99:8C:26:B9:20:69:AD:D8:D2:E7:52:3A:C4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6DA0CB50270D769D95A65C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8ea8390-1103-3aa8-8443-a8514cb9dbc8.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 198.200.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6d:a0:cb:50:27:0d:76:9d:95:a6:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=b804b47e-6a3d-441d-9133-301161667cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ec:2f:b8:3b:5a:3d:22:e0:46:93:e5:c5:a2:
eb:43:51:58:d4:50:27:e1:bb:6f:f1:6f:6e:e9:e5:
7f:79:23:ef:71:aa:9d:cb:05:e3:fe:87:16:e9:32:
f4:37:73:d7:6a:36:52:1d:9b:06:e5:7a:ac:e8:4a:
df:52:ae:a0:00:a0:d1:0b:79:dd:36:90:68:98:70:
a7:e2:64:be:f4:75:2a:ae:d9:fe:e3:08:be:7b:75:
0a:c4:97:7a:8b:aa:30:10:b9:fc:45:53:bb:5b:1d:
80:85:7c:5e:c2:48:3d:8c:53:cd:5c:6d:83:8a:20:
20:d2:b5:19:cc:c2:95:c3:e6:a7:74:f0:d6:55:51:
38:8f:64:50:2c:00:6b:3d:d5:35:74:94:d4:41:29:
3d:a0:60:e3:3d:66:33:ee:67:a6:00:3e:20:56:14:
64:58:18:fe:31:e8:67:43:fc:3b:48:d5:e3:c4:11:
80:f8:bb:13:38:90:7c:06:cb:a4:9a:d1:7a:a7:74:
c6:d7:87:05:3c:8e:f8:2c:ff:ef:fd:02:54:43:97:
e7:4d:9f:1c:d1:0f:db:f7:9b:47:5f:7d:8a:6d:ed:
f6:28:cb:dd:e3:fb:31:dd:f2:ae:0d:27:f0:3a:6f:
19:fe:fe:12:a3:6f:ba:95:fa:eb:9d:21:ec:93:72:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:76:46:85:5F:AC:29:99:8C:26:B9:20:69:AD:D8:D2:E7:52:3A:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b8ea8390-1103-3aa8-8443-a8514cb9dbc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
198.200.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:46:aa:d8:90:f7:85:19:83:e0:8c:10:ff:c3:84:12:a0:ab:
95:9a:12:1c:2c:d5:ee:80:b0:4c:ac:81:f2:b2:6d:98:78:14:
d3:4f:a4:07:b1:38:6b:53:66:88:e1:8d:40:d5:57:5f:e0:f4:
9c:95:dd:3b:34:5d:e2:c3:5e:a3:59:6e:59:43:05:76:09:a6:
eb:39:48:13:dc:bb:d4:92:83:fe:10:75:b0:09:eb:1f:d8:47:
86:a6:84:50:fa:ef:56:5e:f9:50:62:e9:0a:2c:55:55:fc:f1:
5a:22:c5:66:9b:c2:f2:88:f7:8e:04:f1:b1:03:7e:c3:2a:47:
e6:15:e8:24:a8:19:13:57:a7:13:3f:71:ed:8a:93:79:a8:24:
72:b4:3c:d7:50:51:aa:e3:50:3a:6e:1c:a3:ee:a1:68:14:90:
09:f4:48:93:4d:9d:21:00:5f:c6:23:8a:e3:86:d9:5d:e0:52:
27:66:dd:8a:ce:6b:6f:3e:e6:fe:ff:16:c5:1c:f4:d2:dd:6a:
64:33:23:fa:71:33:5b:2b:6c:1c:45:f0:ab:0c:13:9c:5b:86:
15:aa:50:30:ff:57:4f:36:26:e7:14:4e:22:f0:2f:44:db:ef:
f9:77:14:29:ae:be:dd:53:ce:d7:53:1c:06:ef:64:01:71:c7:
c5:95:5d:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5toMtQJw12nZWmXEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcwMTEyMDAwMFoXDTIyMDgwNjA0MDAwMFowLzEtMCsGA1UEAxMk
YjgwNGI0N2UtNmEzZC00NDFkLTkxMzMtMzAxMTYxNjY3Y2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguwvuDtaPSLgRpPlxaLrQ1FY1FAn4btv8W9u
6eV/eSPvcaqdywXj/ocW6TL0N3PXajZSHZsG5Xqs6ErfUq6gAKDRC3ndNpBomHCn
4mS+9HUqrtn+4wi+e3UKxJd6i6owELn8RVO7Wx2AhXxewkg9jFPNXG2DiiAg0rUZ
zMKVw+andPDWVVE4j2RQLABrPdU1dJTUQSk9oGDjPWYz7memAD4gVhRkWBj+Mehn
Q/w7SNXjxBGA+LsTOJB8BsukmtF6p3TG14cFPI74LP/v/QJUQ5fnTZ8c0Q/b95tH
X32Kbe32KMvd4/sx3fKuDSfwOm8Z/v4So2+6lfrrnSHsk3LfNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHZ2RoVfrCmZjCa5IGmt2NLnUjrEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjhlYTgzOTAtMTEwMy0z
YWE4LTg0NDMtYTg1MTRjYjlkYmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsiVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJZGqtiQ94UZg+CMEP/DhBKgq5WaEhws1e6AsEysgfKybZh4FNNPpAex
OGtTZojhjUDVV1/g9JyV3Ts0XeLDXqNZbllDBXYJpus5SBPcu9SSg/4QdbAJ6x/Y
R4amhFD671Ze+VBi6QosVVX88VoixWabwvKI944E8bEDfsMqR+YV6CSoGRNXpxM/
ce2Kk3moJHK0PNdQUarjUDpuHKPuoWgUkAn0SJNNnSEAX8YjiuOG2V3gUidm3YrO
a28+5v7/FsUc9NLdamQzI/pxM1srbBxF8KsME5xbhhWqUDD/V082JucUTiLwL0Tb
7/l3FCmuvt1TztdTHAbvZAFxx8WVXUo=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:28 2025 by rpki-client