Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d329329b-f7ff-3b8f-8929-9987c5fbb491.roa
File: d329329b-f7ff-3b8f-8929-9987c5fbb491.roa (raw, json)
Hash identifier: zuQYg1h0iryoBi719EQMK0oZ5AmUzdD2OkMUObyGM7s=
Subject key identifier: 62:0C:0C:F2:BA:4D:7C:2A:55:AF:DC:43:F7:F8:4A:2B:35:74:F9:CD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F53C5C79A2ECF6E312D340E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d329329b-f7ff-3b8f-8929-9987c5fbb491.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 40.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:53:c5:c7:9a:2e:cf:6e:31:2d:34:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=2ce75b3f-1aaf-4f3e-9dfe-110b6c023519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2e:61:81:d6:3a:90:28:ff:c4:a8:2b:fe:7b:
9b:1d:d7:20:b9:fc:53:cf:34:2e:b6:dc:e0:73:5d:
9f:5e:2d:c2:7c:88:a7:06:36:e1:92:ab:e0:8c:b7:
60:93:05:ef:f6:71:b0:5e:28:00:16:62:85:6c:ec:
1e:d8:2d:13:73:12:67:a7:3c:ce:a0:82:e6:db:09:
be:9e:6c:c0:72:8e:40:a5:45:66:d7:5a:11:bc:5a:
99:b5:6f:05:13:a7:26:9b:45:b1:14:28:01:82:c9:
0a:77:4e:72:0f:dd:d2:12:ee:49:80:e2:1c:d1:75:
3f:8f:0b:e5:ab:e4:5d:22:ec:8c:79:07:0f:0d:0a:
94:95:d7:42:89:d1:fd:1c:28:77:e0:7f:53:a1:b5:
cb:36:99:70:47:14:3e:cd:9f:a9:99:ec:31:f9:da:
89:93:03:f9:f6:38:c1:5c:3a:44:7c:65:0a:64:f6:
96:55:f0:c1:e2:9d:3e:b8:97:6b:e6:81:bd:57:8e:
55:e1:b2:53:05:7f:8b:a8:70:c1:6a:49:23:ec:5c:
3d:3d:3f:a4:d9:a3:16:2c:b4:6b:6f:f1:6c:db:a0:
4f:77:f2:34:ff:6a:90:71:60:fa:7d:18:be:10:7d:
39:67:8f:d6:25:8b:86:e3:02:bb:c8:0f:3f:d0:96:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0C:0C:F2:BA:4D:7C:2A:55:AF:DC:43:F7:F8:4A:2B:35:74:F9:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d329329b-f7ff-3b8f-8929-9987c5fbb491.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:a2:d7:7d:c4:02:68:86:c7:fb:9f:d8:9f:93:0f:d3:3e:36:
d5:2a:41:9f:92:37:ca:86:8c:a6:80:a6:10:50:17:5f:ac:b2:
4a:77:ee:a8:c0:d7:db:db:46:f1:83:59:58:41:da:6e:ab:0e:
1f:d2:4a:14:38:0a:d0:1f:7b:2f:44:2f:82:7e:1e:4b:cd:03:
87:12:52:a5:d7:e5:2c:2a:cf:72:64:65:83:fe:ae:b3:af:ee:
8d:8e:ac:40:db:a2:42:16:7e:47:e2:09:4b:9b:45:26:4c:c0:
50:4f:ee:12:2d:3d:89:6a:cb:03:02:af:01:8a:32:d8:41:18:
84:52:ae:40:46:f4:eb:ef:c2:7d:0a:af:47:ac:96:f6:76:0e:
27:eb:02:ac:bb:e2:4f:97:f9:3f:f0:81:8d:bf:ae:ff:b9:94:
a4:30:48:58:2d:b6:79:5a:1a:91:9e:9c:1e:5d:ca:98:eb:e7:
85:06:ca:c9:f5:df:76:51:90:54:07:67:68:f6:61:c0:09:05:
ef:2d:b0:ba:ab:09:61:d6:86:9a:a1:0d:24:23:b9:52:37:81:
29:8f:53:45:ef:5f:fb:e6:ac:77:65:a6:e0:3e:0a:67:6c:93:
f3:94:2d:92:55:f2:20:e4:03:80:ab:47:03:df:0e:a3:d4:e3:
74:2c:76:d6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9TxceaLs9uMS00DoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyMTEyMDAwMFoXDTIyMTAyNzA0MDAwMFowLzEtMCsGA1UEAxMk
MmNlNzViM2YtMWFhZi00ZjNlLTlkZmUtMTEwYjZjMDIzNTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi5hgdY6kCj/xKgr/nubHdcgufxTzzQuttzg
c12fXi3CfIinBjbhkqvgjLdgkwXv9nGwXigAFmKFbOwe2C0TcxJnpzzOoILm2wm+
nmzAco5ApUVm11oRvFqZtW8FE6cmm0WxFCgBgskKd05yD93SEu5JgOIc0XU/jwvl
q+RdIuyMeQcPDQqUlddCidH9HCh34H9TobXLNplwRxQ+zZ+pmewx+dqJkwP59jjB
XDpEfGUKZPaWVfDB4p0+uJdr5oG9V45V4bJTBX+LqHDBakkj7Fw9PT+k2aMWLLRr
b/Fs26BPd/I0/2qQcWD6fRi+EH05Z4/WJYuG4wK7yA8/0JYgvQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGIMDPK6TXwqVa/cQ/f4Sis1dPnNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDMyOTMyOWItZjdmZi0z
YjhmLTg5MjktOTk4N2M1ZmJiNDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHqLXfcQCaIbH+5/Yn5MP0z421SpBn5I3yoaMpoCmEFAXX6yySnfuqMDX
29tG8YNZWEHabqsOH9JKFDgK0B97L0Qvgn4eS80DhxJSpdflLCrPcmRlg/6us6/u
jY6sQNuiQhZ+R+IJS5tFJkzAUE/uEi09iWrLAwKvAYoy2EEYhFKuQEb06+/CfQqv
R6yW9nYOJ+sCrLviT5f5P/CBjb+u/7mUpDBIWC22eVoakZ6cHl3KmOvnhQbKyfXf
dlGQVAdnaPZhwAkF7y2wuqsJYdaGmqENJCO5UjeBKY9TRe9f++asd2Wm4D4KZ2yT
85QtklXyIOQDgKtHA98Oo9TjdCx21g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:23 2025 by rpki-client