Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba7b56c0-c393-3371-8aa8-3d2fd84c9301.roa
File: ba7b56c0-c393-3371-8aa8-3d2fd84c9301.roa (raw, json)
Hash identifier: pNtJ6C78vPvjhtoPbJWEdmDKD/dMgJkmHe22iUcvGsg=
Subject key identifier: 3B:8B:41:2C:A0:62:54:90:BA:1F:C7:D0:30:37:D8:A1:B4:EE:0C:3B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6E0942187DF9D379D1420F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba7b56c0-c393-3371-8aa8-3d2fd84c9301.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 108.128.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6e:09:42:18:7d:f9:d3:79:d1:42:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=da94fd21-3169-4fdc-a705-2414987aeaa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:0b:e2:f0:6b:04:bb:20:d7:e7:ff:b6:b3:
b9:86:39:8e:3b:84:83:e7:c0:29:62:98:ce:6d:ff:
69:d4:5d:1f:ee:d2:60:b9:ae:40:aa:fa:b5:a0:0f:
71:a5:4e:de:4a:90:1f:96:a7:22:55:a9:62:9a:3e:
0f:ac:9f:20:74:66:e5:3a:4d:64:b3:da:7c:80:5f:
b6:91:21:de:f9:de:9c:a2:4a:e0:53:d8:45:9b:80:
c2:11:9b:4e:c1:d4:fb:79:ab:66:7d:50:f5:c9:59:
3f:25:87:f9:16:18:6b:ee:65:a1:39:81:13:e6:f2:
10:c3:ee:06:f2:ce:96:f3:a7:4e:cb:6e:4a:bc:61:
74:b0:aa:a1:66:07:7f:6a:35:5b:df:72:c6:0c:9b:
f6:4c:ab:a8:e5:cd:89:6a:b1:34:d6:2e:78:0a:ea:
b9:91:15:34:68:65:e4:c5:0d:df:bf:02:34:a8:0f:
d5:ba:41:9c:f5:d7:13:f7:6d:77:53:14:2a:8e:50:
d6:2d:4c:f3:37:9a:c5:d6:2a:07:63:51:de:88:67:
ad:93:c7:02:e7:f4:00:4c:1a:04:1e:5b:26:6b:74:
08:d0:37:b6:e3:d0:aa:f0:f7:39:b9:fe:e7:6b:5c:
52:e1:77:4f:e6:b2:c3:a5:16:5f:03:12:d9:48:66:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8B:41:2C:A0:62:54:90:BA:1F:C7:D0:30:37:D8:A1:B4:EE:0C:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba7b56c0-c393-3371-8aa8-3d2fd84c9301.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.128.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:28:b1:e6:f0:ed:39:3f:99:cd:78:78:8f:bc:24:d4:ca:a1:
c3:dd:f1:1f:f9:8d:16:c5:b2:94:8a:59:a0:4c:03:40:c9:6d:
53:5e:3b:3e:44:d6:dd:89:2e:bb:c1:0b:98:6e:4e:0c:46:91:
b6:49:32:18:9f:23:50:e8:51:fc:f1:ed:22:72:74:c4:e9:8b:
e6:0e:09:b3:f3:e8:05:3f:18:bc:ce:59:b5:28:08:23:29:d6:
a4:fe:df:f8:7d:bd:36:f8:d7:ee:64:6b:1b:b6:d2:97:bf:3e:
e7:f2:47:47:3c:99:be:dc:cf:9b:2d:21:b8:06:78:6a:6e:8a:
15:06:78:48:53:bf:37:d2:d0:57:b0:e9:83:0c:32:01:df:56:
bf:99:00:52:52:bb:81:81:82:06:9f:83:6a:b0:3c:07:4f:9f:
cf:8c:9b:48:da:6a:1b:a0:f8:04:23:b6:94:f9:9b:66:de:8e:
57:f7:1c:d2:ea:e2:8b:56:9b:c7:25:1d:a3:b1:52:dd:b6:96:
24:a7:00:8b:fa:35:0f:63:39:61:f8:df:25:e9:40:5a:a9:c1:
90:b7:41:fd:58:22:79:33:c2:f8:48:9f:f4:59:52:0f:10:2a:
b2:95:67:b1:4d:21:20:19:da:b7:6b:61:b7:ca:38:a3:97:d3:
4d:91:9a:f7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5uCUIYffnTedFCD0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcwMTEyMDAwMFoXDTIyMDgwNjA0MDAwMFowLzEtMCsGA1UEAxMk
ZGE5NGZkMjEtMzE2OS00ZmRjLWE3MDUtMjQxNDk4N2FlYWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjwL4vBrBLsg1+f/trO5hjmOO4SD58ApYpjO
bf9p1F0f7tJgua5Aqvq1oA9xpU7eSpAflqciValimj4PrJ8gdGblOk1ks9p8gF+2
kSHe+d6cokrgU9hFm4DCEZtOwdT7eatmfVD1yVk/JYf5Fhhr7mWhOYET5vIQw+4G
8s6W86dOy25KvGF0sKqhZgd/ajVb33LGDJv2TKuo5c2JarE01i54Cuq5kRU0aGXk
xQ3fvwI0qA/VukGc9dcT9213UxQqjlDWLUzzN5rF1ioHY1HeiGetk8cC5/QATBoE
Hlsma3QI0De249Cq8Pc5uf7na1xS4XdP5rLDpRZfAxLZSGa4pwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDuLQSygYlSQuh/H0DA32KG07gw7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmE3YjU2YzAtYzM5My0z
MzcxLThhYTgtM2QyZmQ4NGM5MzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDbIAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAZSix5vDtOT+ZzXh4j7wk1Mqhw93xH/mNFsWylIpZoEwDQMltU147PkTW
3Ykuu8ELmG5ODEaRtkkyGJ8jUOhR/PHtInJ0xOmL5g4Js/PoBT8YvM5ZtSgIIynW
pP7f+H29NvjX7mRrG7bSl78+5/JHRzyZvtzPmy0huAZ4am6KFQZ4SFO/N9LQV7Dp
gwwyAd9Wv5kAUlK7gYGCBp+DarA8B0+fz4ybSNpqG6D4BCO2lPmbZt6OV/cc0uri
i1abxyUdo7FS3baWJKcAi/o1D2M5YfjfJelAWqnBkLdB/VgieTPC+Eif9FlSDxAq
spVnsU0hIBnat2tht8o4o5fTTZGa9w==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:40:27 2025 by rpki-client