Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2a1ca22-a56f-3cc0-817d-c3474a94eee1.roa
File: d2a1ca22-a56f-3cc0-817d-c3474a94eee1.roa (raw, json)
Hash identifier: KAjRIKkZi/OD17OCkQeWGKj+ssQ7YsV3+yeJFECjEuQ=
Subject key identifier: 28:DE:19:8D:BE:98:63:A8:0C:90:FF:8B:2E:BE:FA:61:4D:FC:AD:72
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406880ED83FC0405EB69078620
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2a1ca22-a56f-3cc0-817d-c3474a94eee1.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 108.166.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:80:ed:83:fc:04:05:eb:69:07:86:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=a4fb5d96-e19b-41bd-8fd3-7c3b6ac976ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:84:62:c3:68:0a:24:a1:b8:0d:1b:e7:72:
f6:b5:74:3f:f5:c9:77:a7:6a:d3:c1:14:72:37:3f:
f2:18:fe:dd:c0:82:17:8f:28:9a:a1:88:16:f4:a6:
a3:f0:7a:34:fe:4b:b6:3c:ed:0f:34:97:82:22:c9:
81:07:31:30:18:12:3a:9f:93:4b:b6:f4:1e:f7:18:
bc:ab:06:ff:a4:68:c6:07:97:dd:bf:8c:e1:b2:01:
a4:49:e3:55:41:18:25:b7:7c:f1:57:35:10:e4:31:
d2:33:8e:c6:36:93:b6:45:6e:17:0e:c5:69:89:68:
51:39:ee:bb:59:6c:6b:4a:8c:91:f9:ac:ce:fc:8f:
77:13:ac:2a:c8:26:fc:f4:26:93:22:3d:70:97:71:
89:ea:91:2c:7f:83:97:a1:79:10:b9:d4:39:28:97:
dd:79:a0:cd:9e:90:32:0d:3a:c6:70:9b:1a:dd:21:
3b:bc:2d:a4:dd:79:76:e9:f8:a9:72:a3:2b:ee:8b:
80:15:0e:82:40:01:95:13:62:87:9b:b4:ef:71:98:
de:0f:47:52:f9:d5:3e:00:56:68:79:28:db:f8:b2:
76:1c:25:f9:80:8e:75:a7:81:99:7c:78:88:e8:06:
ab:7e:6d:51:9f:0d:94:c1:cd:62:79:91:fe:6a:53:
ae:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:19:8D:BE:98:63:A8:0C:90:FF:8B:2E:BE:FA:61:4D:FC:AD:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2a1ca22-a56f-3cc0-817d-c3474a94eee1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.166.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:7d:19:1e:5f:d9:5d:5b:e9:45:8f:a2:dd:24:37:27:28:50:
ad:aa:6c:a9:9e:7c:96:8c:d7:45:20:04:79:b2:cb:f3:d7:b1:
0f:7f:07:b9:09:d4:e1:1a:98:ce:6e:63:29:85:93:53:20:e2:
ed:b1:68:b2:97:3a:87:31:54:f0:1f:bb:be:5e:ad:bb:68:09:
30:70:2b:e8:ac:05:48:d8:3c:25:1f:61:5b:77:ea:62:04:fa:
be:c7:a3:46:24:3b:c5:ea:93:14:76:21:bd:e6:c4:d0:a3:62:
a0:bf:51:c8:fb:1a:3c:7c:43:c9:0a:85:6e:c7:3d:36:75:c1:
a7:e5:44:c0:02:bd:23:48:08:51:47:8d:04:f9:0c:95:dc:3e:
ea:e2:9d:7f:29:20:5d:8f:7b:24:58:e4:b0:34:57:7d:74:f6:
16:0b:99:7d:df:47:ce:4c:41:5d:f4:08:41:8d:ef:af:f1:ec:
82:1c:ce:e7:2f:4e:f2:93:ca:bf:0e:40:6e:29:78:68:df:99:
ad:c8:d0:0c:db:e1:55:0e:f0:42:5c:7e:b1:7b:97:5e:f3:59:
12:3e:c0:91:03:24:b2:38:2a:cd:e1:f5:d4:98:84:59:82:1e:
ed:29:c8:1c:12:18:8e:5b:4b:f4:80:8e:f7:8e:7d:1f:4c:d5:
50:20:46:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBogO2D/AQF62kHhiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyOTEyMDAwMFoXDTIzMDIwMzA1MDAwMFowLzEtMCsGA1UEAxMk
YTRmYjVkOTYtZTE5Yi00MWJkLThmZDMtN2MzYjZhYzk3NmJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH6EYsNoCiShuA0b53L2tXQ/9cl3p2rTwRRy
Nz/yGP7dwIIXjyiaoYgW9Kaj8Ho0/ku2PO0PNJeCIsmBBzEwGBI6n5NLtvQe9xi8
qwb/pGjGB5fdv4zhsgGkSeNVQRglt3zxVzUQ5DHSM47GNpO2RW4XDsVpiWhROe67
WWxrSoyR+azO/I93E6wqyCb89CaTIj1wl3GJ6pEsf4OXoXkQudQ5KJfdeaDNnpAy
DTrGcJsa3SE7vC2k3Xl26fipcqMr7ouAFQ6CQAGVE2KHm7TvcZjeD0dS+dU+AFZo
eSjb+LJ2HCX5gI51p4GZfHiI6Aarfm1Rnw2Uwc1ieZH+alOudwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCjeGY2+mGOoDJD/iy6++mFN/K1yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDJhMWNhMjItYTU2Zi0z
Y2MwLTgxN2QtYzM0NzRhOTRlZWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbKbgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ59GR5f2V1b6UWPot0kNycoUK2qbKmefJaM10UgBHmyy/PXsQ9/B7kJ
1OEamM5uYymFk1Mg4u2xaLKXOocxVPAfu75erbtoCTBwK+isBUjYPCUfYVt36mIE
+r7Ho0YkO8XqkxR2Ib3mxNCjYqC/Ucj7Gjx8Q8kKhW7HPTZ1waflRMACvSNICFFH
jQT5DJXcPurinX8pIF2PeyRY5LA0V3109hYLmX3fR85MQV30CEGN76/x7IIczucv
TvKTyr8OQG4peGjfma3I0Azb4VUO8EJcfrF7l17zWRI+wJEDJLI4Ks3h9dSYhFmC
Hu0pyBwSGI5bS/SAjveOfR9M1VAgRiY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:49:37 2025 by rpki-client