Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5af1467-9e56-3737-a511-acc3ea25d1ae.roa
File: d5af1467-9e56-3737-a511-acc3ea25d1ae.roa (raw, json)
Hash identifier: lN12NS3XJ6KqYXaaIXJvHsKYXVOByNSp8vr8Pybant0=
Subject key identifier: CD:9E:4B:D7:04:EE:D0:BD:82:A2:2C:5C:9C:52:58:A0:EE:94:61:BB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F56A69D41CE63218208AF42C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5af1467-9e56-3737-a511-acc3ea25d1ae.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 98.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:56:a6:9d:41:ce:63:21:82:08:af:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=209be9b9-b139-47c8-8885-d85f6c073db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:27:2b:b9:1d:73:33:15:f4:a2:33:17:e5:33:
46:94:6b:eb:58:12:34:31:78:f9:f8:cc:5e:ac:f2:
96:fe:ea:31:98:51:85:35:38:02:10:65:f2:a1:7d:
be:5b:b9:51:0d:4e:50:e1:e8:88:3c:56:68:9b:83:
62:8d:05:a7:0e:97:f3:b5:72:55:2b:24:56:f1:47:
0b:34:af:fb:85:86:2b:7b:f8:ac:7e:7e:4b:ed:ce:
03:4c:09:9d:93:87:fe:45:a3:e3:e3:d1:ac:46:e8:
4e:bf:43:e8:6b:99:8e:f4:09:d1:ee:43:d3:46:6e:
fb:68:e0:ff:41:87:11:f2:f6:98:b9:b8:69:0a:26:
a6:f0:c2:c4:87:ad:a9:62:28:1f:c1:44:2e:f3:f8:
52:6e:57:14:9e:b5:f0:90:c6:ca:68:ce:87:9c:b8:
d1:e1:f4:ac:4c:e2:79:e6:59:19:ff:7d:fd:20:41:
9d:a0:7e:9f:09:84:93:fa:c3:ae:1b:7b:fc:55:a4:
d6:c8:6f:f4:6d:7e:d0:ab:d7:04:42:7a:13:8c:e4:
c7:11:13:43:29:a5:f5:01:27:a4:66:51:a7:6e:12:
2a:cd:51:b9:b4:d6:97:ae:a6:d8:fc:48:74:38:51:
67:80:69:90:c4:82:40:d6:a0:19:5f:4f:0d:99:97:
a2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9E:4B:D7:04:EE:D0:BD:82:A2:2C:5C:9C:52:58:A0:EE:94:61:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5af1467-9e56-3737-a511-acc3ea25d1ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
98.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:80:c6:f2:84:a4:d4:65:a4:e9:71:9b:a5:f6:ed:19:12:8f:
fa:a9:7a:d1:f1:0b:82:f6:91:3e:62:15:f3:98:96:a0:32:ec:
a4:93:cd:36:42:74:92:cf:24:82:05:ff:a6:0b:48:13:02:87:
37:60:a9:b3:71:ae:72:b3:69:5c:2d:4c:01:2e:6f:01:c6:be:
ef:40:4f:ae:c0:6c:f1:0d:18:07:57:e5:ef:ed:62:81:36:0f:
81:5e:81:23:63:ea:3a:f1:88:b7:0b:23:eb:9c:a3:3a:af:7f:
77:56:80:aa:db:00:35:b3:1e:d6:b0:b6:dc:d6:6b:11:64:4c:
38:ae:19:0a:b0:34:52:b5:fc:3a:38:ec:b9:6c:1f:7d:67:0f:
3c:c8:66:e1:85:a6:12:59:1a:0d:80:b2:54:ab:79:cf:81:5a:
17:8b:65:c8:7c:55:ae:5f:39:43:05:93:ac:1a:e6:39:76:e1:
47:44:79:5c:d1:7a:93:d3:7a:c4:35:77:85:ce:f7:8c:4d:b0:
62:47:13:fb:5f:fb:02:9b:fc:a5:c8:32:b6:0b:5f:71:91:c4:
58:f0:dc:d4:45:d2:56:35:ea:12:5d:3c:61:b0:4c:b3:d9:3a:
67:03:48:4e:a8:23:0c:40:99:2f:33:c1:fe:a1:b6:59:88:e9:
67:6c:14:46
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9Wpp1BzmMhggivQsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyMjEyMDAwMFoXDTIyMTAyODA0MDAwMFowLzEtMCsGA1UEAxMk
MjA5YmU5YjktYjEzOS00N2M4LTg4ODUtZDg1ZjZjMDczZGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzicruR1zMxX0ojMX5TNGlGvrWBI0MXj5+Mxe
rPKW/uoxmFGFNTgCEGXyoX2+W7lRDU5Q4eiIPFZom4NijQWnDpfztXJVKyRW8UcL
NK/7hYYre/isfn5L7c4DTAmdk4f+RaPj49GsRuhOv0Poa5mO9AnR7kPTRm77aOD/
QYcR8vaYubhpCiam8MLEh62pYigfwUQu8/hSblcUnrXwkMbKaM6HnLjR4fSsTOJ5
5lkZ/339IEGdoH6fCYST+sOuG3v8VaTWyG/0bX7Qq9cEQnoTjOTHERNDKaX1ASek
ZlGnbhIqzVG5tNaXrqbY/Eh0OFFngGmQxIJA1qAZX08NmZeiaQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM2eS9cE7tC9gqIsXJxSWKDulGG7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDVhZjE0NjctOWU1Ni0z
NzM3LWE1MTEtYWNjM2VhMjVkMWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEYlAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJIDG8oSk1GWk6XGbpfbtGRKP+ql60fELgvaRPmIV85iWoDLspJPNNkJ0
ks8kggX/pgtIEwKHN2Cps3GucrNpXC1MAS5vAca+70BPrsBs8Q0YB1fl7+1igTYP
gV6BI2PqOvGItwsj65yjOq9/d1aAqtsANbMe1rC23NZrEWRMOK4ZCrA0UrX8Ojjs
uWwffWcPPMhm4YWmElkaDYCyVKt5z4FaF4tlyHxVrl85QwWTrBrmOXbhR0R5XNF6
k9N6xDV3hc73jE2wYkcT+1/7Apv8pcgytgtfcZHEWPDc1EXSVjXqEl08YbBMs9k6
ZwNITqgjDECZLzPB/qG2WYjpZ2wURg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:17:07 2025 by rpki-client