Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc409670-dddf-32da-a27f-bfdd2a1c7f9e.roa
File: bc409670-dddf-32da-a27f-bfdd2a1c7f9e.roa (raw, json)
Hash identifier: 803LwZDtSM+jNP/VHhWVnKJZ/bd7R15F5/GoUSY5Cw0=
Subject key identifier: 4B:7B:08:11:F6:5B:E7:38:CE:3F:00:74:05:84:0A:9D:E6:DE:5D:D1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400354EF91BAD82485BC804980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc409670-dddf-32da-a27f-bfdd2a1c7f9e.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 13.184.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:54:ef:91:ba:d8:24:85:bc:80:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=f96f620a-199d-4795-96bf-f7e4f0e8dc34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e6:c7:76:0a:04:ce:28:a7:a7:30:94:c9:31:
fd:08:52:7d:b3:8c:2d:1b:e8:f3:3b:bd:ec:96:a7:
76:77:5f:8f:bc:3f:d4:8b:f5:dc:25:1c:37:89:f3:
7a:ae:31:88:2c:da:c4:8d:e7:a6:6f:87:4f:21:8c:
4c:57:c1:e0:ef:f9:23:18:79:7c:5d:52:e7:9b:64:
92:9f:2d:1e:02:60:9e:8e:82:02:ab:27:f9:f4:87:
ce:29:73:68:20:23:0a:50:8f:8f:1b:6a:28:cf:17:
3f:98:a7:73:86:36:c6:37:7f:40:75:e6:8a:74:bc:
4b:1d:51:94:69:4e:74:c3:8c:57:96:e3:8a:1d:f2:
00:c9:f2:03:e2:5f:b4:21:9e:69:04:49:86:06:ab:
3e:18:a7:ae:3c:44:f6:fa:25:ec:2f:16:80:89:12:
e3:07:a0:b3:62:53:bb:49:7c:06:cc:81:7d:88:04:
49:41:d4:b6:9d:c5:3b:14:68:2e:fa:38:61:09:eb:
5d:29:8a:84:cb:6d:95:37:56:34:c0:99:c6:af:4d:
86:9e:c2:1a:87:44:16:4d:2e:5a:7d:3d:3d:c2:5d:
ff:58:2c:f6:89:da:44:dc:66:c6:3e:b4:04:4a:9e:
9b:06:bb:fa:01:d9:f7:33:06:54:93:a4:a9:84:05:
50:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7B:08:11:F6:5B:E7:38:CE:3F:00:74:05:84:0A:9D:E6:DE:5D:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bc409670-dddf-32da-a27f-bfdd2a1c7f9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
13.184.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:8f:54:41:bc:5e:f5:b4:20:49:06:30:b1:1e:00:4a:6b:91:
61:78:df:c6:83:dd:ea:7e:13:08:e5:9b:a9:00:3d:4a:24:b8:
fd:ee:4f:81:7c:9c:e7:9e:c1:9f:15:43:68:c7:93:42:5b:54:
14:b0:a3:8f:8d:09:b1:cb:60:fb:c0:e8:07:84:6d:b1:2a:d6:
82:76:9c:13:1e:40:f5:2b:09:95:c9:cb:d9:cf:67:f4:cf:d8:
82:78:20:1c:db:fb:16:cc:d0:df:20:9b:4d:67:f3:94:c1:96:
70:4c:96:1e:98:c9:89:02:26:07:cc:03:77:6b:dc:87:c4:64:
b7:02:5b:12:8c:6c:3c:72:3b:cf:80:8f:78:88:a2:b2:2b:a7:
25:97:be:3f:dd:5f:6c:e5:a3:52:99:ac:2d:9b:a7:5d:14:b2:
a7:24:8c:20:b0:aa:ed:6f:4a:61:39:04:71:c4:22:48:5d:10:
3d:68:b1:e9:e4:44:d5:d8:39:f7:d0:02:99:24:fe:43:ce:1a:
f5:0c:c4:43:cd:1f:1c:2e:94:0f:35:1c:71:14:ac:52:e1:d2:
fa:ac:53:5f:3b:72:f6:32:64:e6:3e:7d:a2:8d:0a:b8:e6:db:
c9:d2:9d:db:53:d2:88:b2:7d:89:69:28:4d:b7:a7:15:e5:71:
bf:e7:e7:99
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEADVO+RutgkhbyASYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyMzEyMDAwMFoXDTIyMTIyOTA1MDAwMFowLzEtMCsGA1UEAxMk
Zjk2ZjYyMGEtMTk5ZC00Nzk1LTk2YmYtZjdlNGYwZThkYzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+bHdgoEziinpzCUyTH9CFJ9s4wtG+jzO73s
lqd2d1+PvD/Ui/XcJRw3ifN6rjGILNrEjeemb4dPIYxMV8Hg7/kjGHl8XVLnm2SS
ny0eAmCejoICqyf59IfOKXNoICMKUI+PG2oozxc/mKdzhjbGN39AdeaKdLxLHVGU
aU50w4xXluOKHfIAyfID4l+0IZ5pBEmGBqs+GKeuPET2+iXsLxaAiRLjB6CzYlO7
SXwGzIF9iARJQdS2ncU7FGgu+jhhCetdKYqEy22VN1Y0wJnGr02GnsIah0QWTS5a
fT09wl3/WCz2idpE3GbGPrQESp6bBrv6Adn3MwZUk6SphAVQ0QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEt7CBH2W+c4zj8AdAWECp3m3l3RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmM0MDk2NzAtZGRkZi0z
MmRhLWEyN2YtYmZkZDJhMWM3ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDDbgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJI9UQbxe9bQgSQYwsR4ASmuRYXjfxoPd6n4TCOWbqQA9SiS4/e5PgXyc
557BnxVDaMeTQltUFLCjj40Jsctg+8DoB4RtsSrWgnacEx5A9SsJlcnL2c9n9M/Y
gnggHNv7FszQ3yCbTWfzlMGWcEyWHpjJiQImB8wDd2vch8RktwJbEoxsPHI7z4CP
eIiisiunJZe+P91fbOWjUpmsLZunXRSypySMILCq7W9KYTkEccQiSF0QPWix6eRE
1dg599ACmST+Q84a9QzEQ80fHC6UDzUccRSsUuHS+qxTXzty9jJk5j59oo0KuObb
ydKd21PSiLJ9iWkoTbenFeVxv+fnmQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:06:43 2025 by rpki-client