Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf68dab2-eb15-3cc3-8fbe-304c3820e1db.roa
File: cf68dab2-eb15-3cc3-8fbe-304c3820e1db.roa (raw, json)
Hash identifier: zDqkWvLO/4TlDPX7wO4Hgd4ZiN4q6xGMNMwX3kj6c7o=
Subject key identifier: 7B:99:E0:03:7F:76:61:D5:CC:D4:A3:62:29:DC:4E:6C:04:39:A3:3C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0BE4E51C118B51A6275E9900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf68dab2-eb15-3cc3-8fbe-304c3820e1db.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 76.223.168.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:e4:e5:1c:11:8b:51:a6:27:5e:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=a0cfbbc9-8dc8-466a-96f6-1fc1668fe9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6e:76:fa:bf:51:0f:2d:f6:b7:87:8d:cf:d9:
d7:a4:25:0e:e1:e5:57:25:c1:63:0a:3a:64:5f:60:
26:41:be:07:fd:40:06:f1:a5:a6:49:45:ad:a8:34:
b3:12:d6:36:21:98:d7:39:11:76:97:b6:08:f8:c3:
48:ee:62:ce:b2:10:ea:44:18:c8:ab:02:41:24:e4:
b9:43:70:75:55:fc:84:1d:ad:97:a1:65:7f:81:d4:
36:fc:ef:0c:63:ad:79:63:cc:8e:a3:57:6b:b8:d2:
21:d7:5f:4f:0a:e1:1e:ec:f0:ae:b5:01:88:df:0a:
5e:59:66:84:4f:15:b2:0c:18:cf:a4:aa:49:95:28:
20:fb:8f:12:9e:73:1a:f2:5f:3c:03:ce:4b:db:cf:
dc:db:35:b7:14:d3:6e:4f:81:ad:e5:5e:9f:d1:96:
48:5e:1e:55:1d:63:dd:78:d6:8d:fc:ba:a6:da:3d:
17:51:38:48:31:e4:cd:23:de:21:3d:97:c0:8a:ac:
6a:e5:1d:72:68:da:f8:62:ed:a0:77:68:da:68:7d:
47:e1:6e:0f:7c:e2:fc:50:20:6c:47:1c:84:3e:7a:
84:d9:60:23:22:01:c3:d1:82:8d:0f:08:12:1a:03:
9f:47:8a:56:8e:d0:44:bb:dd:c3:d0:b4:f6:91:49:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:E0:03:7F:76:61:D5:CC:D4:A3:62:29:DC:4E:6C:04:39:A3:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf68dab2-eb15-3cc3-8fbe-304c3820e1db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
76.223.168.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:57:7d:cc:6b:1a:8d:8f:01:d9:29:5c:53:8e:ba:7a:3d:15:
ce:e0:80:1b:d0:f9:26:9e:a0:b7:6a:b0:c4:61:8f:7c:a6:0a:
3b:03:bd:24:2c:e2:e3:c8:4c:4e:db:1e:ff:05:73:34:9e:f3:
13:77:23:b1:ec:17:fd:43:64:ac:ef:08:79:35:82:db:6e:38:
a3:53:e3:39:08:da:46:34:9f:a9:d3:ed:50:8d:67:56:4d:7b:
1e:72:6a:07:0c:ac:9b:4f:c4:0f:09:a3:9d:5d:92:62:4a:ca:
e3:f8:4b:66:ea:63:8e:f3:09:14:3b:30:49:ae:e8:a1:47:1e:
6b:85:de:6a:b2:1a:d2:0d:5a:2e:24:d0:59:35:22:64:81:f3:
bc:a5:e8:0d:5a:aa:6c:bb:6a:f5:3c:1a:58:c1:4a:8b:fa:7e:
b6:a1:a6:5f:a3:44:a9:af:9a:a2:9a:32:84:26:23:d2:24:72:
92:72:9e:94:44:f9:a1:02:1b:54:ac:ec:cb:98:de:17:bd:e3:
1e:8b:cc:54:7a:0d:f0:84:f0:46:13:4d:a7:78:10:fc:2c:91:
c7:17:6f:49:0c:eb:3a:c3:f6:ac:68:f3:9a:7d:90:06:26:f8:
f7:9f:19:11:47:3c:3e:09:a5:73:80:be:71:5e:62:2b:b1:06:
21:27:50:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0L5OUcEYtRpidemQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
YTBjZmJiYzktOGRjOC00NjZhLTk2ZjYtMWZjMTY2OGZlOWZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG52+r9RDy32t4eNz9nXpCUO4eVXJcFjCjpk
X2AmQb4H/UAG8aWmSUWtqDSzEtY2IZjXORF2l7YI+MNI7mLOshDqRBjIqwJBJOS5
Q3B1VfyEHa2XoWV/gdQ2/O8MY615Y8yOo1druNIh119PCuEe7PCutQGI3wpeWWaE
TxWyDBjPpKpJlSgg+48SnnMa8l88A85L28/c2zW3FNNuT4Gt5V6f0ZZIXh5VHWPd
eNaN/Lqm2j0XUThIMeTNI94hPZfAiqxq5R1yaNr4Yu2gd2jaaH1H4W4PfOL8UCBs
RxyEPnqE2WAjIgHD0YKNDwgSGgOfR4pWjtBEu93D0LT2kUkPYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHuZ4AN/dmHVzNSjYincTmwEOaM8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2Y2OGRhYjItZWIxNS0z
Y2MzLThmYmUtMzA0YzM4MjBlMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTN+oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALBXfcxrGo2PAdkpXFOOuno9Fc7ggBvQ+SaeoLdqsMRhj3ymCjsDvSQs
4uPITE7bHv8FczSe8xN3I7HsF/1DZKzvCHk1gttuOKNT4zkI2kY0n6nT7VCNZ1ZN
ex5yagcMrJtPxA8Jo51dkmJKyuP4S2bqY47zCRQ7MEmu6KFHHmuF3mqyGtINWi4k
0Fk1ImSB87yl6A1aqmy7avU8GljBSov6frahpl+jRKmvmqKaMoQmI9IkcpJynpRE
+aECG1Ss7MuY3he94x6LzFR6DfCE8EYTTad4EPwskccXb0kM6zrD9qxo85p9kAYm
+PefGRFHPD4JpXOAvnFeYiuxBiEnUCc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:58 2025 by rpki-client