Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9d0d3d6-e5c8-3e5c-aaa7-66244a6b782e.roa
File: c9d0d3d6-e5c8-3e5c-aaa7-66244a6b782e.roa (raw, json)
Hash identifier: FDiPbvPLmATmV+jrBJgVn7LBBWyKymTAvhcXB//oUyk=
Subject key identifier: AD:33:78:CD:09:4D:BD:76:91:BA:E5:39:C3:D0:59:F4:B5:64:EC:3B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CA5622F27F05E5952734660A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9d0d3d6-e5c8-3e5c-aaa7-66244a6b782e.roa
Signing time: Wed 19 Jan 2022 05:00:00 +0000
ROA not before: Wed 19 Jan 2022 05:00:00 +0000
ROA not after: Wed 23 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 40.172.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:a5:62:2f:27:f0:5e:59:52:73:46:60:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 19 05:00:00 2022 GMT
Not After : Feb 23 05:00:00 2022 GMT
Subject: CN=951d6fd8-6a91-4c3f-9379-55fb7aee404b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:57:ca:8d:25:1f:9d:10:c0:26:fc:b1:c4:15:
7a:0f:d6:b6:c2:24:5b:ed:99:9c:9f:7e:db:b6:1f:
c4:a7:44:83:d8:1b:02:a6:25:9d:0d:f4:d9:5e:4c:
9b:80:02:4e:e5:6b:08:c3:ae:49:50:88:e9:4b:d3:
b7:dc:b7:c4:bb:ab:3b:a2:6b:ea:00:0b:38:9e:69:
b6:0b:41:d6:81:a4:89:8a:06:f1:0f:86:cf:4e:ea:
2a:3a:6d:33:50:ac:25:e6:f7:ea:aa:e4:14:4f:e7:
61:2d:a3:13:de:46:6e:f4:9c:20:da:5b:4f:3f:c5:
7a:11:3e:77:58:44:1f:7f:96:77:a1:a9:7e:d4:53:
58:89:f7:90:84:21:a8:73:f8:12:59:e1:5d:da:0a:
03:d3:b3:21:a9:27:b4:8f:8d:bf:fa:be:21:90:3b:
62:d2:74:4a:70:ee:30:4b:ce:d0:ec:47:db:ba:28:
36:96:4c:12:d5:c1:5b:78:0c:8f:53:cf:9a:7f:08:
27:3f:e7:88:7f:8d:23:32:68:35:b0:d4:88:29:6a:
5c:07:ff:7f:12:92:c5:e4:ed:df:d7:15:1c:d5:13:
9e:0e:1c:0e:fe:2e:82:fe:26:f1:9e:26:d5:89:d9:
9d:27:5d:21:ae:87:43:2b:ce:3e:87:0b:42:11:4e:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:33:78:CD:09:4D:BD:76:91:BA:E5:39:C3:D0:59:F4:B5:64:EC:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9d0d3d6-e5c8-3e5c-aaa7-66244a6b782e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.172.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:ce:e1:1f:aa:a9:10:ce:28:9e:8a:7d:7e:a0:8c:1e:ba:90:
53:f0:11:e6:5b:4b:71:70:f7:f7:37:3c:69:82:c4:c2:d8:79:
42:a5:0c:ae:76:cc:27:ad:4f:b4:93:b9:63:8f:06:7b:87:d9:
1a:c2:f7:e3:19:08:5d:db:92:3e:eb:6f:25:d5:41:b0:31:2d:
40:1d:92:7b:ce:43:67:02:2c:5f:4e:c0:6c:a8:6f:1e:7f:71:
5d:7c:7c:ed:be:91:20:60:bb:73:c3:ac:df:57:fd:9f:de:12:
ea:37:f5:12:b6:b1:45:78:8a:31:08:46:1b:c6:16:f3:62:46:
b2:5a:cc:ff:9d:95:74:f8:97:73:b0:f6:06:29:13:b1:c4:9f:
fa:d4:2a:f9:dd:a7:78:28:4b:11:a5:18:56:05:19:13:ac:60:
7a:90:f1:03:2c:5c:c6:f1:94:f6:a0:26:8c:87:e1:60:1c:26:
95:ee:80:06:ac:3d:96:fc:57:61:c6:4e:6c:bc:7d:29:61:8f:
f7:b1:6a:65:0a:82:39:b0:49:85:09:21:b8:97:56:d7:2d:cb:
c9:36:84:34:17:62:52:97:b5:7b:a3:a2:bd:ab:75:1d:b0:04:
d8:6e:fe:a4:e1:88:01:01:dc:26:d4:c1:83:e5:cc:47:93:d1:
f0:a2:4a:2e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDylYi8n8F5ZUnNGYKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExOTA1MDAwMFoXDTIyMDIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
OTUxZDZmZDgtNmE5MS00YzNmLTkzNzktNTVmYjdhZWU0MDRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVfKjSUfnRDAJvyxxBV6D9a2wiRb7Zmcn37b
th/Ep0SD2BsCpiWdDfTZXkybgAJO5WsIw65JUIjpS9O33LfEu6s7omvqAAs4nmm2
C0HWgaSJigbxD4bPTuoqOm0zUKwl5vfqquQUT+dhLaMT3kZu9Jwg2ltPP8V6ET53
WEQff5Z3oal+1FNYifeQhCGoc/gSWeFd2goD07MhqSe0j42/+r4hkDti0nRKcO4w
S87Q7Efbuig2lkwS1cFbeAyPU8+afwgnP+eIf40jMmg1sNSIKWpcB/9/EpLF5O3f
1xUc1ROeDhwO/i6C/ibxnibVidmdJ10hrodDK84+hwtCEU7QGwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK0zeM0JTb12kbrlOcPQWfS1ZOw7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzlkMGQzZDYtZTVjOC0z
ZTVjLWFhYTctNjYyNDRhNmI3ODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCKKwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeM7hH6qpEM4onop9fqCMHrqQU/AR5ltLcXD39zc8aYLEwth5QqUMrnbM
J61PtJO5Y48Ge4fZGsL34xkIXduSPutvJdVBsDEtQB2Se85DZwIsX07AbKhvHn9x
XXx87b6RIGC7c8Os31f9n94S6jf1EraxRXiKMQhGG8YW82JGslrM/52VdPiXc7D2
BikTscSf+tQq+d2neChLEaUYVgUZE6xgepDxAyxcxvGU9qAmjIfhYBwmle6ABqw9
lvxXYcZObLx9KWGP97FqZQqCObBJhQkhuJdW1y3LyTaENBdiUpe1e6Oivat1HbAE
2G7+pOGIAQHcJtTBg+XMR5PR8KJKLg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:36 2025 by rpki-client