Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d95970b9-a010-38d0-a703-d7084dcc2da4.roa
File: d95970b9-a010-38d0-a703-d7084dcc2da4.roa (raw, json)
Hash identifier: NjuV1ZPxQNc3aJ/rINFaXViHrUAb96vJBjMjgL8lDrQ=
Subject key identifier: 2F:FF:5F:0B:71:68:22:49:E3:8B:C7:FE:79:1C:9F:6F:BA:50:91:80
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F75B94FDDF14E0D81D5895180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d95970b9-a010-38d0-a703-d7084dcc2da4.roa
Signing time: Mon 03 Oct 2022 12:00:00 +0000
ROA not before: Mon 03 Oct 2022 12:00:00 +0000
ROA not after: Tue 08 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 151.148.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:75:b9:4f:dd:f1:4e:0d:81:d5:89:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 3 12:00:00 2022 GMT
Not After : Nov 8 05:00:00 2022 GMT
Subject: CN=4b8a02ad-443a-4331-bb84-f4a717d90c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:24:9b:25:7a:d2:99:1b:86:a8:47:c9:60:7a:
dd:f5:bc:e7:fb:54:dd:23:09:21:e9:f1:09:a9:af:
7b:2b:87:d1:c0:0c:91:fd:d8:c3:19:95:3d:5b:66:
f6:3b:d9:a0:41:87:86:4b:33:69:59:34:63:3c:e8:
1d:79:69:9c:08:c3:77:45:88:1f:fb:4a:f1:bf:cb:
ec:9d:11:20:8d:ca:99:3b:cd:35:37:d7:ee:4a:d6:
ef:23:bd:3f:bb:cc:29:a1:31:4f:a2:95:5a:53:48:
35:97:98:0a:aa:a3:34:d6:9e:28:28:34:fd:13:5c:
56:53:5a:11:fe:a8:62:b4:df:5c:17:80:02:f4:b4:
9c:b7:ac:46:7b:48:e0:b7:e9:53:ee:ea:91:d0:37:
05:74:2a:d2:e0:a3:4f:5b:4d:45:e9:13:82:a9:3e:
a6:b0:88:ac:c6:5b:1e:70:94:53:22:84:3d:12:63:
e9:8b:03:ba:ba:08:bc:bc:00:33:26:6f:f1:9e:d7:
9f:48:9f:47:96:f8:e7:6e:c5:03:72:b1:15:b2:85:
e5:8e:66:b7:5d:38:dd:a8:30:95:d0:b6:1c:96:9b:
89:bf:03:17:e4:42:cd:56:d2:b1:9a:f7:cc:bb:e3:
da:1d:54:6a:55:f9:19:d2:1f:00:66:fb:7a:db:ad:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FF:5F:0B:71:68:22:49:E3:8B:C7:FE:79:1C:9F:6F:BA:50:91:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d95970b9-a010-38d0-a703-d7084dcc2da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.148.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:d8:80:d7:7f:42:97:5b:74:03:85:0f:ef:16:9f:56:bd:1d:
20:a0:a1:4a:bf:71:78:2f:c0:20:0c:ef:cd:0f:44:ca:98:6b:
93:a6:11:6b:db:84:e1:f2:e9:65:df:d8:b3:b6:3b:4d:51:b7:
41:ba:13:54:91:c1:db:54:e6:a6:dc:3d:ac:fa:05:2e:96:c1:
07:62:93:88:61:5e:b5:5d:02:ef:5f:08:c3:db:59:69:67:c5:
6f:82:f4:49:15:06:3c:dc:e8:f4:62:1b:c0:11:c3:c2:c9:51:
dd:c0:9e:11:15:6c:84:20:62:30:5b:b8:95:cc:fa:9b:b4:3e:
86:26:64:dc:be:f7:1b:8c:2d:ab:5d:1f:49:ad:d6:6a:fe:43:
97:4e:f8:83:35:e6:40:6f:87:b7:cd:85:35:25:93:de:82:a1:
8b:2b:aa:8a:74:47:a4:d6:3e:a9:e7:ab:b3:7b:85:4c:ce:8c:
54:0f:13:42:b8:9c:d6:b1:e5:50:41:71:30:7d:26:51:35:05:
fd:ef:bd:a3:05:de:bf:e1:3a:a8:a0:ed:c0:86:70:16:09:80:
be:f6:21:85:1c:19:0a:6b:30:b9:bb:a1:31:67:aa:b5:38:ae:
c2:99:e6:72:42:45:53:a6:93:c3:0e:1e:4a:a5:9e:ed:88:ee:
61:5e:c5:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD91uU/d8U4NgdWJUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAwMzEyMDAwMFoXDTIyMTEwODA1MDAwMFowLzEtMCsGA1UEAxMk
NGI4YTAyYWQtNDQzYS00MzMxLWJiODQtZjRhNzE3ZDkwYzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiSbJXrSmRuGqEfJYHrd9bzn+1TdIwkh6fEJ
qa97K4fRwAyR/djDGZU9W2b2O9mgQYeGSzNpWTRjPOgdeWmcCMN3RYgf+0rxv8vs
nREgjcqZO801N9fuStbvI70/u8wpoTFPopVaU0g1l5gKqqM01p4oKDT9E1xWU1oR
/qhitN9cF4AC9LSct6xGe0jgt+lT7uqR0DcFdCrS4KNPW01F6ROCqT6msIisxlse
cJRTIoQ9EmPpiwO6ugi8vAAzJm/xntefSJ9HlvjnbsUDcrEVsoXljma3XTjdqDCV
0LYclpuJvwMX5ELNVtKxmvfMu+PaHVRqVfkZ0h8AZvt6261CXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC//XwtxaCJJ44vH/nkcn2+6UJGAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDk1OTcwYjktYTAxMC0z
OGQwLWE3MDMtZDcwODRkY2MyZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl5QQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALTYgNd/QpdbdAOFD+8Wn1a9HSCgoUq/cXgvwCAM780PRMqYa5OmEWvb
hOHy6WXf2LO2O01Rt0G6E1SRwdtU5qbcPaz6BS6WwQdik4hhXrVdAu9fCMPbWWln
xW+C9EkVBjzc6PRiG8ARw8LJUd3AnhEVbIQgYjBbuJXM+pu0PoYmZNy+9xuMLatd
H0mt1mr+Q5dO+IM15kBvh7fNhTUlk96CoYsrqop0R6TWPqnnq7N7hUzOjFQPE0K4
nNax5VBBcTB9JlE1Bf3vvaMF3r/hOqig7cCGcBYJgL72IYUcGQprMLm7oTFnqrU4
rsKZ5nJCRVOmk8MOHkqlnu2I7mFexXY=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:16 2025 by rpki-client