Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c10e849b-c2af-3f9f-b2b4-a01b2484a8ec.roa
File: c10e849b-c2af-3f9f-b2b4-a01b2484a8ec.roa (raw, json)
Hash identifier: 4bq1vaydzxUGU9az2b5jxrL73/bAXvymj/85aektzCc=
Subject key identifier: AD:F8:72:E6:A0:F8:2B:5E:D8:36:C5:EA:F8:9E:0E:B1:B0:53:60:58
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401BE04B1ADF9D1992251E0F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c10e849b-c2af-3f9f-b2b4-a01b2484a8ec.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 68.66.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:e0:4b:1a:df:9d:19:92:25:1e:0f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=ba32080d-e856-4f40-acf3-5e8596be5fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:24:93:aa:6f:a4:d6:a2:52:9c:16:7d:1e:
6c:7e:6c:04:a2:ac:84:f1:8d:d2:b7:0f:75:0c:57:
b8:0e:3e:0d:1b:93:27:72:9a:e4:62:3a:49:de:51:
ff:c2:ba:8b:da:59:c8:fe:a8:82:31:da:c5:0e:5d:
73:82:21:93:9e:56:56:05:00:82:06:c2:ab:b2:30:
8c:cf:ca:d1:12:b1:95:bf:39:c7:b3:38:5c:36:20:
85:a0:ae:1d:c0:21:e4:a9:11:e6:a0:54:7a:d6:76:
e7:7e:e9:93:53:11:bc:ed:da:ca:f2:32:c0:21:51:
53:08:3e:2d:b5:4d:e9:e2:02:24:00:98:e5:e8:c7:
68:67:02:eb:e1:56:94:67:8b:ca:15:b8:70:b3:99:
d8:47:46:26:4e:8e:f0:a8:28:23:e4:d0:df:69:a5:
79:7b:f5:65:46:46:fd:f2:72:24:e5:48:81:c3:b8:
d0:ec:af:f9:f3:02:01:aa:af:46:30:92:02:ba:84:
81:a0:2c:4c:74:c9:ca:63:f7:ca:10:77:81:39:48:
59:9d:f3:88:4e:31:e2:ab:bb:f6:3b:d3:86:49:af:
43:dd:83:7e:25:54:4f:cc:86:22:c6:df:38:54:53:
09:9e:9d:25:3f:be:12:7d:8c:95:15:02:16:19:db:
22:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F8:72:E6:A0:F8:2B:5E:D8:36:C5:EA:F8:9E:0E:B1:B0:53:60:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c10e849b-c2af-3f9f-b2b4-a01b2484a8ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
68.66.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:b3:74:ba:e7:46:fc:66:cd:dc:4c:ad:c0:bf:05:bf:8e:78:
20:88:84:b9:91:ad:f0:67:24:d4:d6:dc:f8:76:c1:a7:40:38:
02:38:12:9f:2d:52:c9:43:a1:fc:8e:7e:1b:67:b2:3c:a4:09:
72:a9:08:19:22:90:90:7c:74:8f:32:85:2e:4b:61:9f:32:cc:
9f:e2:7b:ab:ec:08:20:a5:02:35:25:37:b4:31:42:26:0c:42:
b1:89:64:27:b9:85:77:6f:58:e3:74:52:29:d1:18:ce:f9:e8:
f3:83:a9:c2:8f:c2:1c:12:4c:00:5a:58:f0:16:11:cb:ef:4d:
a3:de:69:8e:0d:77:93:5a:3d:a0:03:e8:bb:4e:36:0c:05:bc:
a9:c6:c2:bc:d1:39:85:b1:25:e0:fd:0c:72:06:40:de:72:47:
e3:1f:ce:b7:d0:8c:f0:71:f3:55:75:49:17:80:fa:8a:f8:0e:
29:39:5e:d1:b8:ae:46:91:bb:44:53:76:f4:fe:00:2e:0c:b6:
e3:7a:f9:8c:05:81:be:e6:60:bc:55:78:66:98:0b:da:28:cb:
68:c1:1d:28:77:d9:c7:ea:c1:1a:35:59:cd:a5:bd:7b:98:25:
84:07:3c:50:31:7b:91:36:a9:b1:48:fc:3e:f6:3e:50:85:36:
a7:26:c0:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAb4Esa350ZkiUeD0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMjEyMDAwMFoXDTIzMDEwNzA1MDAwMFowLzEtMCsGA1UEAxMk
YmEzMjA4MGQtZTg1Ni00ZjQwLWFjZjMtNWU4NTk2YmU1ZmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoEkk6pvpNaiUpwWfR5sfmwEoqyE8Y3Stw91
DFe4Dj4NG5MncprkYjpJ3lH/wrqL2lnI/qiCMdrFDl1zgiGTnlZWBQCCBsKrsjCM
z8rRErGVvznHszhcNiCFoK4dwCHkqRHmoFR61nbnfumTUxG87drK8jLAIVFTCD4t
tU3p4gIkAJjl6MdoZwLr4VaUZ4vKFbhws5nYR0YmTo7wqCgj5NDfaaV5e/VlRkb9
8nIk5UiBw7jQ7K/58wIBqq9GMJICuoSBoCxMdMnKY/fKEHeBOUhZnfOITjHiq7v2
O9OGSa9D3YN+JVRPzIYixt84VFMJnp0lP74SfYyVFQIWGdsi0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK34cuag+Cte2DbF6vieDrGwU2BYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzEwZTg0OWItYzJhZi0z
ZjlmLWIyYjQtYTAxYjI0ODRhOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREJwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKzdLrnRvxmzdxMrcC/Bb+OeCCIhLmRrfBnJNTW3Ph2wadAOAI4Ep8t
UslDofyOfhtnsjykCXKpCBkikJB8dI8yhS5LYZ8yzJ/ie6vsCCClAjUlN7QxQiYM
QrGJZCe5hXdvWON0UinRGM756PODqcKPwhwSTABaWPAWEcvvTaPeaY4Nd5NaPaAD
6LtONgwFvKnGwrzROYWxJeD9DHIGQN5yR+MfzrfQjPBx81V1SReA+or4Dik5XtG4
rkaRu0RTdvT+AC4MtuN6+YwFgb7mYLxVeGaYC9ooy2jBHSh32cfqwRo1Wc2lvXuY
JYQHPFAxe5E2qbFI/D72PlCFNqcmwOI=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:08:20 2025 by rpki-client