Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db0bd544-dcc3-3cd1-a618-3af965432529.roa
File: db0bd544-dcc3-3cd1-a618-3af965432529.roa (raw, json)
Hash identifier: gAbLwTFzus/aSecvOA5COmwaJEy/JALnnr88hd8EeTk=
Subject key identifier: 70:67:BE:D8:17:7B:80:B7:5F:A5:6C:31:1C:E0:16:6A:23:84:79:56
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403E64CEEFD2846B7448A4E500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db0bd544-dcc3-3cd1-a618-3af965432529.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 40.165.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:64:ce:ef:d2:84:6b:74:48:a4:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=9fcb9f7f-39c4-4510-909c-5e1c45f3af71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:f6:2c:e5:ec:0c:b8:a4:c0:07:3a:54:ac:
7a:8a:a8:cd:fe:46:79:fb:2c:cc:17:91:01:5e:59:
d7:61:11:b2:3a:3b:5a:56:5e:d2:4a:8e:85:bd:82:
f8:5d:7f:f7:51:fd:29:ae:d1:8c:74:66:0b:8a:50:
3f:2b:ea:86:e9:1d:7b:85:3c:d2:59:34:a8:d3:6e:
7e:a1:af:91:64:e4:f6:4c:a1:1f:5b:bc:2f:4f:f7:
c4:d5:08:0e:62:66:86:fe:5f:cc:67:b3:66:d1:32:
90:66:5c:fb:92:6e:a3:e2:81:df:d1:86:d1:d0:ff:
8e:6e:79:2b:63:60:bb:1b:e2:53:d3:39:a1:da:5d:
04:a9:30:60:b0:ae:eb:5f:29:96:d5:31:1d:88:f2:
02:21:c9:53:c3:1c:55:b5:e4:41:53:10:aa:ab:68:
76:62:f9:b9:ac:fd:7e:9e:de:96:77:bb:2e:d0:a7:
be:bb:38:91:9a:f1:1a:31:6b:fa:21:b7:01:e0:b0:
79:84:e3:54:6f:54:ef:50:f0:04:f7:ca:2c:37:a9:
9a:11:2e:83:4f:f8:a5:01:b9:23:8c:02:19:33:57:
39:39:8d:8a:7f:ea:67:e1:e1:26:b5:2e:9f:18:93:
23:ec:01:a3:cc:89:11:5f:52:80:8d:c2:6a:1b:09:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:67:BE:D8:17:7B:80:B7:5F:A5:6C:31:1C:E0:16:6A:23:84:79:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/db0bd544-dcc3-3cd1-a618-3af965432529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.165.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:5a:e7:b9:48:e4:af:fe:e2:76:8a:ce:51:7e:a5:99:19:5a:
a2:ca:fd:c4:bc:11:ae:33:ba:c4:86:65:77:31:c8:79:4e:c9:
e3:80:d1:45:77:8f:ee:2c:8d:03:2c:a0:80:78:18:5e:87:17:
5d:c0:fe:23:b5:8a:a0:0f:9c:5b:83:01:3b:bc:33:46:da:44:
21:24:95:0f:02:49:ac:b5:3f:d6:c3:9b:78:19:36:8b:a1:e1:
3b:84:e7:d8:bb:d6:34:05:38:95:6b:61:91:94:37:a9:49:66:
25:36:c0:44:f9:a9:1a:c9:46:fc:db:26:74:48:a0:44:55:84:
1d:56:72:45:c9:39:56:90:0b:bb:2f:11:e0:79:72:39:9d:c8:
48:0c:6b:c5:11:66:5c:4c:52:f7:04:ae:c2:5e:d4:ca:ba:bd:
eb:ce:1b:7a:42:32:8a:a4:53:dc:5e:fa:6c:cb:65:5f:e6:e8:
96:ef:c2:fd:0f:5c:2a:28:a3:d3:47:a4:53:90:1f:3b:c0:01:
86:d4:3b:d4:f0:a0:56:65:0d:e7:40:cf:0e:2c:01:e8:f8:27:
5f:17:01:68:21:37:c7:78:c0:88:9f:be:72:d9:d8:50:4f:f4:
42:ea:a2:0e:ba:98:08:c4:92:ce:83:49:7d:7e:be:c4:e4:93:
84:c9:fa:8c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA+ZM7v0oRrdEik5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
OWZjYjlmN2YtMzljNC00NTEwLTkwOWMtNWUxYzQ1ZjNhZjcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9f2LOXsDLikwAc6VKx6iqjN/kZ5+yzMF5EB
XlnXYRGyOjtaVl7SSo6FvYL4XX/3Uf0prtGMdGYLilA/K+qG6R17hTzSWTSo025+
oa+RZOT2TKEfW7wvT/fE1QgOYmaG/l/MZ7Nm0TKQZlz7km6j4oHf0YbR0P+Obnkr
Y2C7G+JT0zmh2l0EqTBgsK7rXymW1TEdiPICIclTwxxVteRBUxCqq2h2Yvm5rP1+
nt6Wd7su0Ke+uziRmvEaMWv6IbcB4LB5hONUb1TvUPAE98osN6maES6DT/ilAbkj
jAIZM1c5OY2Kf+pn4eEmtS6fGJMj7AGjzIkRX1KAjcJqGwmmzQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHBnvtgXe4C3X6VsMRzgFmojhHlWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGIwYmQ1NDQtZGNjMy0z
Y2QxLWE2MTgtM2FmOTY1NDMyNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAE1rnuUjkr/7idorOUX6lmRlaosr9xLwRrjO6xIZldzHIeU7J44DRRXeP
7iyNAyyggHgYXocXXcD+I7WKoA+cW4MBO7wzRtpEISSVDwJJrLU/1sObeBk2i6Hh
O4Tn2LvWNAU4lWthkZQ3qUlmJTbARPmpGslG/NsmdEigRFWEHVZyRck5VpALuy8R
4HlyOZ3ISAxrxRFmXExS9wSuwl7Uyrq9684bekIyiqRT3F76bMtlX+bolu/C/Q9c
Kiij00ekU5AfO8ABhtQ71PCgVmUN50DPDiwB6PgnXxcBaCE3x3jAiJ++ctnYUE/0
QuqiDrqYCMSSzoNJfX6+xOSThMn6jA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:52:32 2025 by rpki-client