Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca4f2709-6c93-36cb-b029-9d9526a754f1.roa
File: ca4f2709-6c93-36cb-b029-9d9526a754f1.roa (raw, json)
Hash identifier: VGQBiCtSOw82cKwnLa9//vOYsL1ELEXwxTjWbxtOEHM=
Subject key identifier: A7:58:D0:93:2E:D9:7A:5D:BA:C6:E5:21:76:A8:13:6B:53:6B:C1:99
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404304AD71618C3A1B979FFD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca4f2709-6c93-36cb-b029-9d9526a754f1.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 64.187.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:04:ad:71:61:8c:3a:1b:97:9f:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=6230acd6-7ab9-4b4e-9eff-91b1d2fd7862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:76:63:9c:2c:45:19:6c:ab:d8:84:0f:d2:75:
b8:18:98:9e:9c:aa:56:4e:e3:ef:cc:3f:80:1e:50:
ad:10:e2:ae:ba:37:aa:46:0b:65:87:4b:45:83:0d:
02:82:3c:6f:50:86:63:dc:c9:7e:e2:34:db:57:4f:
de:b3:9f:26:4f:09:38:9e:fb:33:d8:6c:73:4e:2f:
c5:5f:16:c0:8e:5f:67:75:f0:64:77:6e:99:d0:6d:
4e:27:c7:8d:80:98:41:6c:2e:d5:21:2b:c7:14:ae:
53:66:52:a9:59:6b:a0:a9:1d:d4:de:c6:a3:88:b7:
81:29:8a:2e:3e:cc:71:c4:ea:5d:3a:ae:41:d8:b3:
0b:3d:99:50:09:ec:fc:f7:3b:cd:96:29:a4:c5:51:
fc:fc:e2:8e:7b:77:8c:32:58:75:ac:ad:ef:4b:fd:
6b:43:ef:fd:02:f9:36:35:56:34:fc:84:33:64:59:
4d:88:cb:a3:cd:1d:d6:31:13:ad:09:88:21:54:b4:
af:00:1f:67:77:48:d0:6a:df:09:03:24:9d:41:13:
17:c6:e5:59:c8:46:3b:f4:41:8d:e8:81:68:55:4e:
5c:4e:65:4d:21:12:4b:f3:7c:0c:06:ef:41:9b:7d:
e0:16:fb:a1:2c:d0:27:9b:25:dd:89:a0:85:92:82:
f1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:58:D0:93:2E:D9:7A:5D:BA:C6:E5:21:76:A8:13:6B:53:6B:C1:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca4f2709-6c93-36cb-b029-9d9526a754f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
64.187.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:33:35:43:27:59:16:f1:93:68:a7:8e:78:61:94:a3:77:1b:
72:cd:8a:c4:25:4c:1d:e8:98:75:d8:f6:d8:43:21:fb:05:09:
e4:5b:ea:a0:2a:67:fc:d8:22:37:f1:c1:ae:33:4d:f1:91:57:
25:0b:fb:0c:0c:48:a3:c5:76:9f:eb:6d:29:69:77:39:6c:ad:
3e:d2:b6:36:9a:b5:01:cb:3c:91:ea:ad:15:a8:d5:34:1c:d0:
a5:c3:80:98:08:de:f0:34:0f:92:a8:4a:bf:66:4b:0e:bd:82:
81:e4:b8:97:eb:4d:14:2f:75:b2:9c:70:36:1a:40:49:79:e5:
ec:fa:50:22:09:45:aa:c7:e3:7b:26:72:5f:98:39:16:c2:96:
c6:7a:c6:2e:08:17:b3:7a:4e:e1:65:7f:0e:bc:ca:7d:22:80:
0a:b3:ee:6d:80:a9:bb:46:a3:1b:d0:67:de:42:23:18:ca:f8:
34:ac:e8:ba:46:6a:95:40:e9:4a:33:da:f6:2a:76:b5:e8:a8:
69:34:44:4f:96:23:4a:b2:1c:d3:78:5e:93:9f:f1:24:4a:3a:
43:2b:77:c4:95:c8:1c:4f:49:a1:ec:78:39:33:1c:eb:b4:f2:
51:2b:93:c2:bb:75:4e:6c:cd:2e:14:55:a6:26:0c:62:88:b7:
f9:db:f4:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBDBK1xYYw6G5ef/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNjEyMDAwMFoXDTIzMDEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
NjIzMGFjZDYtN2FiOS00YjRlLTllZmYtOTFiMWQyZmQ3ODYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnZjnCxFGWyr2IQP0nW4GJienKpWTuPvzD+A
HlCtEOKuujeqRgtlh0tFgw0CgjxvUIZj3Ml+4jTbV0/es58mTwk4nvsz2GxzTi/F
XxbAjl9ndfBkd26Z0G1OJ8eNgJhBbC7VISvHFK5TZlKpWWugqR3U3sajiLeBKYou
PsxxxOpdOq5B2LMLPZlQCez89zvNlimkxVH8/OKOe3eMMlh1rK3vS/1rQ+/9Avk2
NVY0/IQzZFlNiMujzR3WMROtCYghVLSvAB9nd0jQat8JAySdQRMXxuVZyEY79EGN
6IFoVU5cTmVNIRJL83wMBu9Bm33gFvuhLNAnmyXdiaCFkoLxXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKdY0JMu2XpdusblIXaoE2tTa8GZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2E0ZjI3MDktNmM5My0z
NmNiLWIwMjktOWQ5NTI2YTc1NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQLuAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFszNUMnWRbxk2injnhhlKN3G3LNisQlTB3omHXY9thDIfsFCeRb6qAq
Z/zYIjfxwa4zTfGRVyUL+wwMSKPFdp/rbSlpdzlsrT7StjaatQHLPJHqrRWo1TQc
0KXDgJgI3vA0D5KoSr9mSw69goHkuJfrTRQvdbKccDYaQEl55ez6UCIJRarH43sm
cl+YORbClsZ6xi4IF7N6TuFlfw68yn0igAqz7m2AqbtGoxvQZ95CIxjK+DSs6LpG
apVA6Uoz2vYqdrXoqGk0RE+WI0qyHNN4XpOf8SRKOkMrd8SVyBxPSaHseDkzHOu0
8lErk8K7dU5szS4UVaYmDGKIt/nb9Ow=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:46 2025 by rpki-client