Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd11a69e-4aa6-38f3-8eb2-d8ad8768f1b4.roa
File: cd11a69e-4aa6-38f3-8eb2-d8ad8768f1b4.roa (raw, json)
Hash identifier: qjS7q4DwbDeU59IKEFJxsXVBamYZDPzi65otC989C9s=
Subject key identifier: 70:85:8D:21:54:04:73:CC:8B:F4:B1:56:FE:BB:38:F3:61:4A:A0:36
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403E5D97B88DD26728CB642F20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd11a69e-4aa6-38f3-8eb2-d8ad8768f1b4.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 40.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:5d:97:b8:8d:d2:67:28:cb:64:2f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=f7d88504-5632-423d-911e-54de1d56e66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:41:b7:9c:51:a9:0a:a2:76:50:69:e4:fc:
db:61:73:56:30:79:6f:72:a6:e6:cc:aa:1d:4a:21:
f5:f2:e7:ac:13:61:03:c2:fb:10:26:0c:80:b9:f6:
bd:59:52:d7:5b:c0:97:f6:ff:ef:c2:81:3c:1d:27:
2d:1c:bb:c1:85:82:17:6a:40:0e:d9:b0:08:01:84:
17:80:0c:fd:ad:0b:79:ba:df:b2:34:5d:8e:be:bf:
dc:f7:f1:87:0f:bd:a8:80:bf:0a:8e:43:6e:fb:77:
79:8a:0a:f6:6b:92:52:74:09:c0:2d:6b:7a:81:15:
ea:9e:b9:a2:90:9c:5a:05:ac:d6:16:8e:a3:58:da:
6f:7b:38:53:96:22:47:9e:f8:11:4a:ee:70:c1:21:
55:f7:4f:68:c5:c1:34:55:89:c4:74:c4:1a:b2:67:
09:93:b1:5a:93:5f:b9:54:20:73:d9:2a:a6:b1:5b:
c8:5a:58:fa:cf:6c:2f:2e:13:d8:35:a6:f1:a1:df:
1e:57:1a:97:49:74:42:9f:74:74:82:50:c3:f7:82:
e3:0a:63:d3:27:89:6e:a6:f2:4f:27:99:89:02:9d:
fe:68:54:d2:cb:8a:bf:9a:3a:10:7a:76:3d:b5:bd:
c2:87:85:b7:20:35:46:f1:fa:de:f4:ec:17:8d:a4:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:85:8D:21:54:04:73:CC:8B:F4:B1:56:FE:BB:38:F3:61:4A:A0:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cd11a69e-4aa6-38f3-8eb2-d8ad8768f1b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:aa:f5:33:69:3a:6a:31:b7:9a:d9:82:51:2e:f9:a3:84:31:
08:88:d4:07:81:c3:5f:5f:a2:cf:11:5d:a8:16:6e:7b:af:c7:
f4:c0:8f:5a:98:5c:18:60:50:06:f5:19:94:eb:11:0b:e2:5e:
f6:ca:b2:9d:bc:34:7d:e6:d1:bb:09:e4:79:c0:cf:6a:27:54:
87:25:29:54:22:8a:4d:38:4c:a7:2e:77:f1:6d:03:38:57:19:
99:fc:6d:bd:73:6c:fa:4a:e2:c6:ba:b1:71:81:a3:29:53:e7:
b3:2b:a0:49:c1:1c:3b:50:32:48:ca:2a:6c:a0:b4:98:e7:86:
5f:e9:f6:3a:1a:d5:45:30:4c:8e:28:f2:7f:8d:a8:a2:04:77:
d7:ee:af:e2:09:19:6d:66:69:54:23:ee:77:de:10:ce:34:00:
fa:5a:2d:49:72:7b:3a:05:b0:77:ce:b1:55:8e:80:13:04:e2:
8d:bc:07:b0:19:11:05:2f:2b:d7:24:17:53:e4:b7:f3:87:f2:
f2:3c:b4:41:2e:49:19:a9:c6:a0:8b:bd:0a:c5:34:0b:38:a3:
8a:cf:94:0d:f1:a9:3d:d7:86:46:ff:7c:fd:af:4e:b0:9a:08:
11:ba:05:87:3d:c9:06:bd:cf:16:48:f8:f2:33:e3:c2:36:a7:
c8:97:64:fb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA+XZe4jdJnKMtkLyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZjdkODg1MDQtNTYzMi00MjNkLTkxMWUtNTRkZTFkNTZlNjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiRBt5xRqQqidlBp5PzbYXNWMHlvcqbmzKod
SiH18uesE2EDwvsQJgyAufa9WVLXW8CX9v/vwoE8HSctHLvBhYIXakAO2bAIAYQX
gAz9rQt5ut+yNF2Ovr/c9/GHD72ogL8KjkNu+3d5igr2a5JSdAnALWt6gRXqnrmi
kJxaBazWFo6jWNpvezhTliJHnvgRSu5wwSFV909oxcE0VYnEdMQasmcJk7Fak1+5
VCBz2SqmsVvIWlj6z2wvLhPYNabxod8eVxqXSXRCn3R0glDD94LjCmPTJ4lupvJP
J5mJAp3+aFTSy4q/mjoQenY9tb3Ch4W3IDVG8fre9OwXjaS07QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHCFjSFUBHPMi/SxVv67OPNhSqA2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2QxMWE2OWUtNGFhNi0z
OGYzLThlYjItZDhhZDg3NjhmMWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKKr1M2k6ajG3mtmCUS75o4QxCIjUB4HDX1+izxFdqBZue6/H9MCPWphc
GGBQBvUZlOsRC+Je9sqynbw0febRuwnkecDPaidUhyUpVCKKTThMpy538W0DOFcZ
mfxtvXNs+krixrqxcYGjKVPnsyugScEcO1AySMoqbKC0mOeGX+n2OhrVRTBMjijy
f42oogR31+6v4gkZbWZpVCPud94QzjQA+lotSXJ7OgWwd86xVY6AEwTijbwHsBkR
BS8r1yQXU+S384fy8jy0QS5JGanGoIu9CsU0Czijis+UDfGpPdeGRv98/a9OsJoI
EboFhz3JBr3PFkj48jPjwjanyJdk+w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:39 2025 by rpki-client