Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd0540e5-77a9-3e2d-9e71-01763401598c.roa
File: dd0540e5-77a9-3e2d-9e71-01763401598c.roa (raw, json)
Hash identifier: yPEIZvE44s9a3nScDQW3oet/nGJLOOEYr0gqST2dAoM=
Subject key identifier: B3:1C:65:F0:F1:71:41:CB:A7:D1:47:F5:99:3D:1F:4C:6A:90:D6:27
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584075540363949AED31B1DD57C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd0540e5-77a9-3e2d-9e71-01763401598c.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 152.227.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:54:03:63:94:9a:ed:31:b1:dd:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=244f9ea7-20e3-4920-9009-e05304757e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:45:02:34:43:4f:20:0a:f8:af:4c:00:37:
0c:a2:13:b8:28:4a:b4:86:a6:31:aa:3a:73:a9:8a:
6d:79:76:4f:88:b7:32:df:6f:f9:f5:d7:62:14:b7:
61:e4:c2:0c:2e:a0:33:4e:5c:e3:a7:16:e8:0c:e7:
ef:3a:07:dd:34:a1:ec:31:f5:58:02:d4:3f:05:df:
b0:3d:89:a0:b3:cd:ac:99:0f:5f:d0:13:9c:9a:d3:
d5:96:d0:26:9d:19:58:7f:32:56:0f:c9:71:cf:14:
51:12:1f:b1:23:b5:b2:07:3b:52:b3:5f:f7:da:6e:
2a:79:19:55:df:4c:2d:00:cc:25:23:4d:87:19:4b:
74:9d:c5:3b:4e:f3:fe:51:ec:75:91:36:10:2f:27:
9f:8f:61:57:9b:70:a1:1c:66:db:49:09:28:d6:5a:
85:f3:d3:f5:06:f7:15:92:3d:7d:15:7c:8a:95:1d:
32:88:23:cc:73:04:a4:37:7a:05:16:ab:b1:97:fd:
09:a8:71:75:82:46:e4:62:5c:a2:9d:8e:0b:de:ab:
2a:c6:9d:28:1b:11:89:4d:b9:1f:dc:fc:a0:84:4e:
79:7c:7e:97:51:15:b0:7f:e4:97:4c:66:04:c0:f3:
1e:ef:f1:39:a5:8e:58:6a:f3:db:32:b0:85:39:64:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1C:65:F0:F1:71:41:CB:A7:D1:47:F5:99:3D:1F:4C:6A:90:D6:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd0540e5-77a9-3e2d-9e71-01763401598c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
152.227.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:9d:53:b0:2b:fc:71:de:91:8a:7f:1c:d7:40:7a:b9:5b:fb:
a2:ef:65:3f:1e:a8:28:ae:3d:f2:21:57:ce:0e:30:da:68:4e:
88:a9:5f:38:1a:37:d7:61:77:b7:1f:f0:c6:0e:6c:fb:20:5e:
a4:40:e4:a8:c8:8c:5f:38:94:1e:41:3c:bf:62:89:cf:d9:04:
ed:11:40:c9:f1:5e:1e:86:bc:60:af:71:b3:82:87:97:13:4d:
cc:ae:54:1c:fb:40:5c:9c:ac:6c:f5:78:c7:06:aa:a8:d9:44:
73:1a:c6:9b:ec:0d:93:8a:3b:a3:80:70:77:be:22:c8:4d:a6:
2b:df:fd:25:20:09:6f:ea:be:5d:6a:f1:b0:f3:8c:3e:73:5f:
c2:bd:a0:96:41:cc:be:52:32:3c:b9:e9:fe:b4:5f:40:e9:5c:
e2:ee:cf:96:a6:69:89:f0:ae:38:51:6d:50:fb:e9:90:11:d8:
7a:17:4e:ae:6c:58:dc:62:a9:ea:2e:c6:06:28:7f:6a:7e:7b:
9c:c7:ea:b7:5b:f7:3a:f6:ef:9a:8b:ae:e5:e3:22:6a:f0:20:
28:e6:f8:d6:53:8e:38:d0:c9:8f:b0:80:fe:d8:eb:06:44:e0:
a7:74:56:80:7d:83:0c:c1:cf:5b:3d:d0:e1:45:7b:17:1b:93:
d2:8b:15:8b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB1VANjlJrtMbHdV8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwMzEyMDAwMFoXDTIzMDIwODA1MDAwMFowLzEtMCsGA1UEAxMk
MjQ0ZjllYTctMjBlMy00OTIwLTkwMDktZTA1MzA0NzU3ZTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHRFAjRDTyAK+K9MADcMohO4KEq0hqYxqjpz
qYpteXZPiLcy32/59ddiFLdh5MIMLqAzTlzjpxboDOfvOgfdNKHsMfVYAtQ/Bd+w
PYmgs82smQ9f0BOcmtPVltAmnRlYfzJWD8lxzxRREh+xI7WyBztSs1/32m4qeRlV
30wtAMwlI02HGUt0ncU7TvP+Uex1kTYQLyefj2FXm3ChHGbbSQko1lqF89P1BvcV
kj19FXyKlR0yiCPMcwSkN3oFFquxl/0JqHF1gkbkYlyinY4L3qsqxp0oGxGJTbkf
3PyghE55fH6XURWwf+SXTGYEwPMe7/E5pY5YavPbMrCFOWRDzQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLMcZfDxcUHLp9FH9Zk9H0xqkNYnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGQwNTQwZTUtNzdhOS0z
ZTJkLTllNzEtMDE3NjM0MDE1OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmOMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAX51TsCv8cd6Rin8c10B6uVv7ou9lPx6oKK498iFXzg4w2mhOiKlfOBo3
12F3tx/wxg5s+yBepEDkqMiMXziUHkE8v2KJz9kE7RFAyfFeHoa8YK9xs4KHlxNN
zK5UHPtAXJysbPV4xwaqqNlEcxrGm+wNk4o7o4Bwd74iyE2mK9/9JSAJb+q+XWrx
sPOMPnNfwr2glkHMvlIyPLnp/rRfQOlc4u7PlqZpifCuOFFtUPvpkBHYehdOrmxY
3GKp6i7GBih/an57nMfqt1v3Ovbvmouu5eMiavAgKOb41lOOONDJj7CA/tjrBkTg
p3RWgH2DDMHPWz3Q4UV7FxuT0osViw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:54 2025 by rpki-client