Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc987ace-8c4a-32c3-83bf-a60ca1c7ef41.roa
File: dc987ace-8c4a-32c3-83bf-a60ca1c7ef41.roa (raw, json)
Hash identifier: KGRhbrlCh0yTugya1b0oDdtV8HzXJB5dBdZcFpZhrtA=
Subject key identifier: 5D:4E:77:3D:76:F5:2C:92:12:49:71:98:45:7F:CA:76:CD:25:A4:1F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E952DA5EFE02C9628CBF13D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc987ace-8c4a-32c3-83bf-a60ca1c7ef41.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 128.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:95:2d:a5:ef:e0:2c:96:28:cb:f1:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=6156953e-9ba4-4884-bac8-0e77a18fba77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:05:09:f8:80:b6:8a:8e:68:5b:54:14:9f:
a0:a0:52:22:e0:53:17:dd:2c:6f:ff:43:00:4a:b4:
c9:71:cd:3a:00:39:f4:68:03:4e:4b:a5:8c:ce:91:
00:e7:d7:62:2d:5b:cf:79:62:23:61:74:f0:bf:05:
12:c9:37:2a:e5:96:91:67:cd:d1:b4:b4:13:54:e8:
77:3f:ae:6e:19:d0:2c:9b:59:c6:1d:96:a2:be:ed:
39:42:90:1a:69:f7:22:62:51:87:24:93:52:f7:3a:
be:43:76:55:cb:64:a4:6a:f2:6c:e9:ec:10:5e:fc:
86:b5:38:43:1f:41:96:90:a2:25:a3:6d:85:12:05:
ce:a2:b2:a8:3d:b6:71:41:6d:42:da:0a:bf:1c:d7:
2b:af:e6:39:36:f1:62:0e:b3:4e:36:53:af:1c:23:
39:5f:48:75:32:9f:35:a2:e4:35:09:46:f9:a8:a1:
ee:d7:d2:53:65:a6:0f:2d:e8:42:0e:93:1f:7f:bc:
47:3d:d3:7c:35:66:0b:f0:02:85:6a:1b:f0:e6:31:
fc:2c:eb:4e:ba:75:ec:0b:ba:7b:7c:08:2e:89:12:
46:4c:5e:ba:c1:21:96:cd:be:cf:0e:12:84:7a:ed:
50:9e:cf:5f:ae:da:43:1b:c0:c4:96:1f:4e:02:51:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4E:77:3D:76:F5:2C:92:12:49:71:98:45:7F:CA:76:CD:25:A4:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dc987ace-8c4a-32c3-83bf-a60ca1c7ef41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
128.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:5a:46:c3:cd:78:8d:30:29:89:87:d1:80:1b:d9:65:bc:8d:
99:97:2c:53:54:4f:94:db:d9:35:4b:9d:18:36:a6:44:70:a8:
38:45:87:3c:a6:b2:c5:f2:72:e3:92:fb:2a:76:c8:23:e2:13:
3d:a9:ab:c6:d5:bc:cc:57:ac:40:e5:02:8c:46:97:d3:28:7c:
b0:de:d6:ea:a4:7c:e7:34:f1:c7:20:2d:45:4a:aa:8c:3b:7f:
9a:57:11:f5:3e:01:89:6f:9c:0f:f0:0c:82:a4:d0:39:a9:fa:
5c:ea:de:f5:c3:d9:56:b0:0e:bc:97:f0:9e:ea:a6:cb:20:95:
78:d9:fe:6f:fd:54:71:04:6c:e5:fd:2c:25:0e:6a:0b:94:9a:
26:50:47:78:f1:f0:a2:6d:c3:61:36:68:55:00:35:ad:e8:66:
d9:09:38:b5:5a:21:97:d5:0c:81:c7:bf:bd:b8:94:0a:3c:49:
c9:67:cc:51:3c:69:98:7e:19:fa:55:9a:2c:9d:a6:84:29:dd:
eb:d8:3c:44:01:f6:18:da:41:23:1f:66:1e:b4:f5:7c:da:5e:
a4:3a:44:22:63:e4:d6:05:2b:48:27:a6:44:0e:3a:95:01:47:
85:05:8f:e5:06:20:f6:e1:61:f6:a1:f5:a1:58:57:44:f4:b6:
e1:d2:32:77
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6VLaXv4CyWKMvxPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxNTEyMDAwMFoXDTIyMDgyMDA0MDAwMFowLzEtMCsGA1UEAxMk
NjE1Njk1M2UtOWJhNC00ODg0LWJhYzgtMGU3N2ExOGZiYTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwoFCfiAtoqOaFtUFJ+goFIi4FMX3Sxv/0MA
SrTJcc06ADn0aANOS6WMzpEA59diLVvPeWIjYXTwvwUSyTcq5ZaRZ83RtLQTVOh3
P65uGdAsm1nGHZaivu05QpAaafciYlGHJJNS9zq+Q3ZVy2SkavJs6ewQXvyGtThD
H0GWkKIlo22FEgXOorKoPbZxQW1C2gq/HNcrr+Y5NvFiDrNONlOvHCM5X0h1Mp81
ouQ1CUb5qKHu19JTZaYPLehCDpMff7xHPdN8NWYL8AKFahvw5jH8LOtOunXsC7p7
fAguiRJGTF66wSGWzb7PDhKEeu1Qns9frtpDG8DElh9OAlECLwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF1Odz129SySEklxmEV/ynbNJaQfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGM5ODdhY2UtOGM0YS0z
MmMzLTgzYmYtYTYwY2ExYzdlZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgBUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjFpGw814jTApiYfRgBvZZbyNmZcsU1RPlNvZNUudGDamRHCoOEWHPKay
xfJy45L7KnbII+ITPamrxtW8zFesQOUCjEaX0yh8sN7W6qR85zTxxyAtRUqqjDt/
mlcR9T4BiW+cD/AMgqTQOan6XOre9cPZVrAOvJfwnuqmyyCVeNn+b/1UcQRs5f0s
JQ5qC5SaJlBHePHwom3DYTZoVQA1rehm2Qk4tVohl9UMgce/vbiUCjxJyWfMUTxp
mH4Z+lWaLJ2mhCnd69g8RAH2GNpBIx9mHrT1fNpepDpEImPk1gUrSCemRA46lQFH
hQWP5QYg9uFh9qH1oVhXRPS24dIydw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:42 2025 by rpki-client