Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da516a49-85e5-3841-954f-be44837590b9.roa
File: da516a49-85e5-3841-954f-be44837590b9.roa (raw, json)
Hash identifier: zk2EBKdwYS2/pD1H7rJlLBa3h5M77Yt0qxNvx//I+fw=
Subject key identifier: 3C:F6:F9:D7:03:D8:C2:0D:53:A7:75:D4:C8:5A:BC:0A:1F:98:48:68
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D81D859F593F52EA671846180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da516a49-85e5-3841-954f-be44837590b9.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 100.20.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:d8:59:f5:93:f5:2e:a6:71:84:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=ba5b2816-5d34-4912-b693-6bbe3b54a96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:b4:42:4a:41:f9:00:10:79:4b:e4:c0:40:
f1:3d:c1:c1:d7:13:c4:c8:7b:a9:fa:0e:67:76:e8:
65:c0:8e:75:5f:ab:6f:0f:ca:80:01:cb:23:07:b3:
d4:02:6e:3f:7d:b2:c3:2b:ba:92:b2:3d:a1:fb:b4:
db:8b:79:f1:1e:3d:6d:e1:61:7d:57:9f:63:74:66:
a7:a5:2e:dd:b4:e1:9b:65:40:91:5f:d3:e2:18:68:
90:cf:ac:c8:88:3e:2b:64:14:7d:9c:4b:73:35:e7:
ec:08:7d:31:7a:99:99:71:b1:51:29:3d:b0:86:3a:
75:ae:8d:c3:e2:e8:c6:08:05:aa:d0:f1:fb:b9:31:
72:8f:b2:54:ff:cb:51:fe:e9:28:11:e8:e2:32:02:
89:da:dc:02:7d:d6:d6:55:cb:1d:68:4a:74:00:6c:
17:b3:7d:2d:34:00:b7:04:9d:37:3e:5f:5c:70:68:
eb:98:a9:eb:75:b7:00:7e:2d:93:dd:b8:dc:c9:5a:
03:71:ac:eb:44:42:4b:d1:5b:8b:f1:f8:1c:50:e9:
85:31:f9:85:d0:bb:94:96:de:3b:7a:9c:78:a3:18:
c7:0d:6c:e5:51:19:49:d5:ef:29:5c:5c:93:77:15:
dd:73:2f:fb:dd:ac:4e:7e:31:aa:52:06:ee:a4:3a:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F6:F9:D7:03:D8:C2:0D:53:A7:75:D4:C8:5A:BC:0A:1F:98:48:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/da516a49-85e5-3841-954f-be44837590b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
100.20.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:5d:96:ff:fc:c2:cb:4b:80:6c:1e:f9:f4:fb:c3:d3:7e:0c:
05:31:24:62:4d:ed:81:4f:74:4b:2b:c7:93:9a:4c:54:32:85:
f6:01:f5:50:28:95:76:75:a2:a3:fa:98:bb:ad:0c:ae:eb:f1:
93:e7:55:a6:e8:2c:fa:a1:c2:fd:00:34:2a:e0:ec:45:39:89:
ec:a3:aa:db:db:24:d9:68:86:0a:8e:d6:a6:9a:75:62:2f:a3:
74:93:7d:af:72:39:6d:02:bc:3c:9a:2d:f2:bc:06:14:f5:85:
17:25:04:f3:a6:db:20:eb:84:a5:93:8e:19:d9:ec:3b:b2:2f:
e5:35:79:e5:33:ed:ce:cc:da:0d:94:20:58:ae:b3:a9:22:d2:
0d:a4:7b:26:64:e1:a9:52:a8:5c:8f:ce:1f:16:fe:f1:c8:d9:
85:75:93:07:64:39:9b:b6:b1:b1:b1:9c:d6:34:05:c2:6d:0d:
c0:c2:92:e4:e8:6a:a4:04:19:62:b3:93:ba:70:50:38:b2:d8:
75:75:b9:84:1c:d7:b2:29:f7:85:6e:10:d2:59:fd:85:81:52:
dc:ce:ca:cc:10:af:47:f1:96:89:6d:d8:2f:76:30:4b:88:78:
7c:a2:60:29:c4:2a:a9:0c:57:3a:a2:4b:87:d1:18:22:ae:f9:
43:f9:9d:aa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2B2Fn1k/UupnGEYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
YmE1YjI4MTYtNWQzNC00OTEyLWI2OTMtNmJiZTNiNTRhOTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG+0QkpB+QAQeUvkwEDxPcHB1xPEyHup+g5n
duhlwI51X6tvD8qAAcsjB7PUAm4/fbLDK7qSsj2h+7Tbi3nxHj1t4WF9V59jdGan
pS7dtOGbZUCRX9PiGGiQz6zIiD4rZBR9nEtzNefsCH0xepmZcbFRKT2whjp1ro3D
4ujGCAWq0PH7uTFyj7JU/8tR/ukoEejiMgKJ2twCfdbWVcsdaEp0AGwXs30tNAC3
BJ03Pl9ccGjrmKnrdbcAfi2T3bjcyVoDcazrREJL0VuL8fgcUOmFMfmF0LuUlt47
epx4oxjHDWzlURlJ1e8pXFyTdxXdcy/73axOfjGqUgbupDquawIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDz2+dcD2MINU6d11MhavAofmEhoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGE1MTZhNDktODVlNS0z
ODQxLTk1NGYtYmU0NDgzNzU5MGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCZBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoF2W//zCy0uAbB759PvD034MBTEkYk3tgU90SyvHk5pMVDKF9gH1UCiV
dnWio/qYu60Mruvxk+dVpugs+qHC/QA0KuDsRTmJ7KOq29sk2WiGCo7Wppp1Yi+j
dJN9r3I5bQK8PJot8rwGFPWFFyUE86bbIOuEpZOOGdnsO7Iv5TV55TPtzszaDZQg
WK6zqSLSDaR7JmThqVKoXI/OHxb+8cjZhXWTB2Q5m7axsbGc1jQFwm0NwMKS5Ohq
pAQZYrOTunBQOLLYdXW5hBzXsin3hW4Q0ln9hYFS3M7KzBCvR/GWiW3YL3YwS4h4
fKJgKcQqqQxXOqJLh9EYIq75Q/mdqg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:12 2025 by rpki-client