Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c041a2aa-6d70-3363-aa94-8864ab6428c1.roa
File: c041a2aa-6d70-3363-aa94-8864ab6428c1.roa (raw, json)
Hash identifier: c+FA1QCAMJa8Q/eof393Q8tKxHmYUhZTesv+mMmxzlM=
Subject key identifier: 23:09:C9:99:E1:2F:DA:14:F2:60:38:2D:D1:0E:6B:5C:27:15:7C:15
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E465E98FAC6B44CE554E36A48
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c041a2aa-6d70-3363-aa94-8864ab6428c1.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 208.86.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:46:5e:98:fa:c6:b4:4c:e5:54:e3:6a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=3a90b71c-9a21-4a48-8161-84023cfff1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:16:87:49:f4:f9:f6:f6:78:00:f2:20:29:
03:f5:4f:82:f2:5c:2d:ff:92:df:f7:51:e8:b6:f7:
93:c7:ae:ff:79:cc:2a:a0:aa:de:e9:8b:ac:db:9e:
de:60:86:0e:b8:a0:9c:12:62:ee:ce:88:26:ef:ae:
18:6e:5b:bc:08:ba:29:08:33:1d:8c:40:95:b9:08:
a5:14:00:31:61:fa:1f:e2:25:11:3e:b0:68:13:e7:
2e:57:0c:06:bd:85:09:6a:8f:4c:58:4d:a3:8d:c4:
fd:00:8f:a9:1e:85:b3:24:fa:2c:40:b0:b2:b2:c2:
ea:77:88:11:c7:9a:dc:db:15:84:53:5c:c1:c5:20:
38:80:79:ef:98:6a:1b:8e:99:e4:1d:f2:da:2c:1d:
28:55:5d:88:29:55:27:94:bd:d4:13:9f:ac:f2:19:
ae:e1:a6:18:dd:48:47:d2:54:4c:47:a7:e5:91:92:
d0:58:5d:59:9f:5c:a6:5c:2b:b2:4f:bd:34:48:90:
36:7a:78:77:24:0c:57:3c:3b:eb:8d:97:1f:68:46:
62:55:d7:fb:ef:c0:4e:ad:28:cb:ab:65:d4:92:6c:
df:9b:1b:50:91:fb:8a:19:ff:a9:2a:e6:2a:4a:b1:
e6:8a:66:d7:e8:30:be:43:a2:4a:a4:c4:46:44:cb:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:09:C9:99:E1:2F:DA:14:F2:60:38:2D:D1:0E:6B:5C:27:15:7C:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c041a2aa-6d70-3363-aa94-8864ab6428c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:ad:03:47:ef:87:f0:83:9b:37:78:85:4b:98:ae:78:eb:1d:
32:ad:79:52:fb:93:6e:6b:8f:01:4c:85:b9:67:68:78:38:93:
5d:3d:03:e1:85:e9:f4:09:c0:18:d4:69:f6:d6:03:df:9d:1e:
20:71:41:4c:14:d2:cf:99:f6:57:6c:3f:c6:ad:b2:ed:b1:86:
7b:1b:4e:81:bc:d1:8b:d7:36:3e:fe:47:66:d7:da:6f:43:eb:
42:46:bf:1c:1b:c1:59:c4:76:a0:f5:e7:a4:3d:65:15:cb:7d:
14:f5:84:f6:07:be:03:b0:27:7e:49:83:84:c3:d1:46:99:bb:
7e:a7:b1:99:ff:83:0a:5c:a9:70:51:ce:b7:dd:12:4f:d4:bd:
52:1d:25:77:b9:02:02:34:27:7b:c4:10:f1:82:31:18:2e:ec:
5b:de:6d:b3:f5:22:55:5d:5f:8c:08:5a:1b:9c:a9:cf:8e:32:
e2:cf:31:ee:e2:b9:ac:75:09:4a:10:1e:f4:0d:aa:8d:6c:bf:
7a:54:de:3b:ea:2c:a7:37:53:f7:82:a9:a2:ae:2f:09:68:13:
1e:42:3b:93:b1:40:7a:4d:6d:1c:30:37:1d:d9:c1:5b:b0:57:
b2:fe:af:3b:5c:7d:cc:a6:b3:56:da:9c:fc:3b:c3:cf:38:1c:
e5:28:3f:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5GXpj6xrRM5VTjakgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxNzEyMDAwMFoXDTIyMDcyMzA0MDAwMFowLzEtMCsGA1UEAxMk
M2E5MGI3MWMtOWEyMS00YTQ4LTgxNjEtODQwMjNjZmZmMWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwMWh0n0+fb2eADyICkD9U+C8lwt/5Lf91Ho
tveTx67/ecwqoKre6Yus257eYIYOuKCcEmLuzogm764Yblu8CLopCDMdjECVuQil
FAAxYfof4iURPrBoE+cuVwwGvYUJao9MWE2jjcT9AI+pHoWzJPosQLCyssLqd4gR
x5rc2xWEU1zBxSA4gHnvmGobjpnkHfLaLB0oVV2IKVUnlL3UE5+s8hmu4aYY3UhH
0lRMR6flkZLQWF1Zn1ymXCuyT700SJA2enh3JAxXPDvrjZcfaEZiVdf778BOrSjL
q2XUkmzfmxtQkfuKGf+pKuYqSrHmimbX6DC+Q6JKpMRGRMvgYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMJyZnhL9oU8mA4LdEOa1wnFXwVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzA0MWEyYWEtNmQ3MC0z
MzYzLWFhOTQtODg2NGFiNjQyOGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACtA0fvh/CDmzd4hUuYrnjrHTKteVL7k25rjwFMhblnaHg4k109A+GF
6fQJwBjUafbWA9+dHiBxQUwU0s+Z9ldsP8atsu2xhnsbToG80YvXNj7+R2bX2m9D
60JGvxwbwVnEdqD156Q9ZRXLfRT1hPYHvgOwJ35Jg4TD0UaZu36nsZn/gwpcqXBR
zrfdEk/UvVIdJXe5AgI0J3vEEPGCMRgu7FvebbP1IlVdX4wIWhucqc+OMuLPMe7i
uax1CUoQHvQNqo1sv3pU3jvqLKc3U/eCqaKuLwloEx5CO5OxQHpNbRwwNx3ZwVuw
V7L+rztcfcyms1banPw7w884HOUoPw8=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:56 2025 by rpki-client