Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5e645ec-20ae-32ad-98d6-681966a9c794.roa
File: d5e645ec-20ae-32ad-98d6-681966a9c794.roa (raw, json)
Hash identifier: Vg1bupRM3HeM9mlTabU/8b8PGpfdcOMy05cwsfrgn4Y=
Subject key identifier: 55:41:A2:C3:E3:E6:F5:EC:A9:E2:FC:D6:A6:5A:66:94:35:8F:91:69
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584025183DFB3D38DB142F4ED1C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5e645ec-20ae-32ad-98d6-681966a9c794.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 132.223.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:25:18:3d:fb:3d:38:db:14:2f:4e:d1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=c66b8114-d7ab-42e8-a803-c451468a7312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:52:33:97:98:29:3b:16:f9:c2:68:03:60:
4c:b0:2b:62:45:9d:9a:78:86:35:d9:30:89:f2:46:
ea:f3:d2:90:9f:83:bd:2b:4d:ba:e9:22:32:1a:24:
43:e8:ca:12:0a:39:c6:c4:d9:97:28:bf:22:59:f0:
6a:a7:fb:01:b2:bb:cd:a9:4d:e3:a3:ec:8a:3c:ef:
08:9d:d6:5d:75:1a:31:c9:7e:cd:ea:1b:b4:ff:45:
40:3e:ff:51:4b:f7:d8:0d:c6:5c:6d:e6:68:f5:0f:
cf:48:2b:87:a4:07:68:5d:dc:32:1c:98:98:70:76:
f8:8b:e9:ae:00:c8:74:0f:ec:1b:a9:d9:01:8e:f8:
2b:14:d6:57:d2:5e:d2:3f:40:33:fb:b2:96:3c:89:
b4:70:b2:47:91:94:2b:a9:7b:29:21:61:cb:ba:c1:
8d:a9:39:22:fb:bb:e6:d5:54:25:c2:54:37:40:48:
5a:78:d8:de:12:71:a0:b6:d8:e4:3a:e2:2a:48:ba:
36:06:a2:d7:3a:df:31:f4:3a:e4:b7:eb:50:4f:76:
d1:5f:e3:13:16:e1:0d:0e:d1:ea:07:e6:c6:58:a4:
be:df:8e:05:7a:51:06:61:28:32:f0:fe:3f:b3:57:
39:11:9c:a9:f8:08:e4:85:81:a8:14:81:3b:f8:b7:
d8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:41:A2:C3:E3:E6:F5:EC:A9:E2:FC:D6:A6:5A:66:94:35:8F:91:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5e645ec-20ae-32ad-98d6-681966a9c794.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
132.223.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:67:a7:4a:85:c3:0e:f4:f1:6d:83:17:8e:72:8c:bd:ef:2b:
ba:49:56:5a:e2:bd:1c:22:01:a2:ae:d8:7a:d6:89:09:90:f6:
44:fd:9d:4a:b1:d0:9e:8a:54:01:ac:f1:5c:fa:e9:78:cb:48:
50:22:70:8f:41:7e:5a:26:be:22:f5:91:51:2f:46:79:e9:08:
61:12:9c:9d:f3:7a:c5:02:7f:bd:2d:2c:56:ed:3d:d9:25:16:
eb:68:59:89:ba:c5:82:ca:7d:8c:cf:52:32:42:8f:de:4f:39:
72:f1:a3:6b:1d:06:aa:32:65:5d:07:93:1d:c5:64:29:32:87:
af:22:a0:10:ae:08:fc:69:d7:60:1d:02:36:2f:4f:71:85:99:
ab:6b:b4:d6:fe:2d:0c:c1:46:73:9e:61:41:6f:56:c1:00:83:
b2:0f:b9:6c:19:b4:a9:35:5a:13:f5:7a:92:83:a6:de:3c:ad:
ed:b9:d4:45:6a:6f:3f:5b:67:a2:16:1c:9f:3a:39:3a:ee:24:
99:cb:e7:2c:6c:e9:6f:d4:fe:b9:17:65:f9:dc:40:72:a2:26:
32:9b:85:de:61:3d:7f:52:bd:95:ac:04:8c:05:28:ba:99:13:
ba:73:d5:8b:ae:01:08:9f:b2:81:32:33:66:75:8c:31:80:fa:
be:1a:c3:6e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAlGD37PTjbFC9O0cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwNTEyMDAwMFoXDTIzMDExMDA1MDAwMFowLzEtMCsGA1UEAxMk
YzY2YjgxMTQtZDdhYi00MmU4LWE4MDMtYzQ1MTQ2OGE3MzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixBSM5eYKTsW+cJoA2BMsCtiRZ2aeIY12TCJ
8kbq89KQn4O9K0266SIyGiRD6MoSCjnGxNmXKL8iWfBqp/sBsrvNqU3jo+yKPO8I
ndZddRoxyX7N6hu0/0VAPv9RS/fYDcZcbeZo9Q/PSCuHpAdoXdwyHJiYcHb4i+mu
AMh0D+wbqdkBjvgrFNZX0l7SP0Az+7KWPIm0cLJHkZQrqXspIWHLusGNqTki+7vm
1VQlwlQ3QEhaeNjeEnGgttjkOuIqSLo2BqLXOt8x9Drkt+tQT3bRX+MTFuENDtHq
B+bGWKS+344FelEGYSgy8P4/s1c5EZyp+AjkhYGoFIE7+LfYRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFVBosPj5vXsqeL81qZaZpQ1j5FpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDVlNjQ1ZWMtMjBhZS0z
MmFkLTk4ZDYtNjgxOTY2YTljNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhN8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAT2enSoXDDvTxbYMXjnKMve8ruklWWuK9HCIBoq7YetaJCZD2RP2dSrHQ
nopUAazxXPrpeMtIUCJwj0F+Wia+IvWRUS9GeekIYRKcnfN6xQJ/vS0sVu092SUW
62hZibrFgsp9jM9SMkKP3k85cvGjax0GqjJlXQeTHcVkKTKHryKgEK4I/GnXYB0C
Ni9PcYWZq2u01v4tDMFGc55hQW9WwQCDsg+5bBm0qTVaE/V6koOm3jyt7bnURWpv
P1tnohYcnzo5Ou4kmcvnLGzpb9T+uRdl+dxAcqImMpuF3mE9f1K9lawEjAUoupkT
unPVi64BCJ+ygTIzZnWMMYD6vhrDbg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:08 2025 by rpki-client