Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd4fc8ed-0751-3d54-a33c-1cb74afaa634.roa
File: dd4fc8ed-0751-3d54-a33c-1cb74afaa634.roa (raw, json)
Hash identifier: wYCE9110bUMYfSUAAT6RHMzD24o7ZGLn/tXISq9rwcc=
Subject key identifier: 3F:D1:1F:CF:62:87:7B:7B:73:D9:33:3E:0A:36:EF:38:84:2E:88:1B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840BC9AA77924319637F5FDF900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd4fc8ed-0751-3d54-a33c-1cb74afaa634.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 104.200.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bc:9a:a7:79:24:31:96:37:f5:fd:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=9983f51f-f7c5-4e34-ac6a-c79f6cb10fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a2:8a:3c:cb:ea:2f:11:a6:75:0f:d7:51:a4:
2b:9c:52:31:ea:3a:81:91:42:04:ab:05:6d:b3:41:
21:6f:6e:0f:41:d1:82:bd:27:fe:55:db:e2:c1:44:
2c:ed:30:72:99:98:47:cc:34:ea:ad:34:9f:79:3d:
20:ca:5f:8d:85:ae:21:2a:e1:07:24:b8:f3:d2:e6:
d5:87:f8:66:e6:49:8e:22:9a:51:a7:50:be:b1:ad:
dc:68:41:f2:95:c3:b1:f6:0e:46:e5:74:99:13:64:
63:45:23:98:2f:fe:35:09:e5:c2:d7:0f:0f:57:bf:
88:ab:d8:cc:90:a9:f5:31:cc:01:f2:0e:60:12:80:
32:7d:71:4b:c9:cc:59:a5:d9:a0:00:6d:96:51:c2:
42:1a:9a:ed:e7:14:38:e8:a4:cb:19:21:31:6d:7d:
95:80:50:2f:15:82:a8:69:c3:6b:8d:cc:0d:1b:1b:
5c:f4:d8:ca:29:36:5b:be:a3:60:63:b1:9b:86:0b:
8c:6b:15:d0:aa:7e:28:f1:72:4e:65:b4:76:47:de:
7a:1f:63:20:48:76:fd:ec:91:22:1a:d1:9d:bd:1e:
29:1e:a4:e7:61:f4:18:d8:d3:cd:15:b4:a9:89:db:
09:61:e2:28:ff:18:ad:25:17:26:58:50:49:70:ff:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D1:1F:CF:62:87:7B:7B:73:D9:33:3E:0A:36:EF:38:84:2E:88:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd4fc8ed-0751-3d54-a33c-1cb74afaa634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.200.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:b2:1e:55:a8:d3:28:82:9b:bc:f8:c3:cb:7f:c9:a7:f8:d8:
b1:24:56:f8:fa:eb:00:96:8a:b7:40:37:cc:0d:18:6d:ba:3a:
e2:5d:cc:34:f1:fb:3d:b2:a2:70:6d:d0:d6:75:92:1b:d9:ef:
f3:0d:34:28:e9:6e:6a:86:f1:4d:97:24:02:34:93:a0:bb:e7:
8a:63:ae:a8:01:b5:e9:db:d9:99:fa:53:52:4c:18:dd:26:3e:
63:cb:79:cb:1b:aa:34:e1:ac:22:12:8c:e5:a4:a1:7a:39:f6:
aa:37:65:92:06:d5:0e:8c:6e:15:de:79:d0:9e:69:c0:fd:d6:
8f:87:d8:e1:cb:c0:fc:b3:f1:49:d6:a3:b9:44:3c:c4:da:b4:
95:d3:e4:36:c4:58:f8:cd:8d:e7:27:a4:01:4e:66:c1:02:f9:
c8:c3:9d:88:52:53:77:54:c0:5d:f4:d7:b8:15:5e:d8:65:a0:
46:a6:05:44:ca:56:8e:47:e2:57:ba:a8:e9:2b:0d:b2:69:4c:
60:7d:e7:3d:b8:1e:5c:41:9a:03:8b:59:ac:aa:f3:1e:16:56:
0a:22:47:c7:38:49:03:8f:5a:a8:8b:4a:05:00:17:4a:a4:38:
44:c4:8f:8d:e6:d4:82:d2:1a:52:dc:6c:3f:47:6e:df:9a:e6:
9b:c5:40:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEC8mqd5JDGWN/X9+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyODEyMDAwMFoXDTIzMDMwNTA1MDAwMFowLzEtMCsGA1UEAxMk
OTk4M2Y1MWYtZjdjNS00ZTM0LWFjNmEtYzc5ZjZjYjEwZmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaKKPMvqLxGmdQ/XUaQrnFIx6jqBkUIEqwVt
s0Ehb24PQdGCvSf+VdviwUQs7TBymZhHzDTqrTSfeT0gyl+Nha4hKuEHJLjz0ubV
h/hm5kmOIppRp1C+sa3caEHylcOx9g5G5XSZE2RjRSOYL/41CeXC1w8PV7+Iq9jM
kKn1McwB8g5gEoAyfXFLycxZpdmgAG2WUcJCGprt5xQ46KTLGSExbX2VgFAvFYKo
acNrjcwNGxtc9NjKKTZbvqNgY7GbhguMaxXQqn4o8XJOZbR2R956H2MgSHb97JEi
GtGdvR4pHqTnYfQY2NPNFbSpidsJYeIo/xitJRcmWFBJcP+eFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/RH89ih3t7c9kzPgo27ziELogbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGQ0ZmM4ZWQtMDc1MS0z
ZDU0LWEzM2MtMWNiNzRhZmFhNjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaMjgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEayHlWo0yiCm7z4w8t/yaf42LEkVvj66wCWirdAN8wNGG26OuJdzDTx
+z2yonBt0NZ1khvZ7/MNNCjpbmqG8U2XJAI0k6C754pjrqgBtenb2Zn6U1JMGN0m
PmPLecsbqjThrCISjOWkoXo59qo3ZZIG1Q6MbhXeedCeacD91o+H2OHLwPyz8UnW
o7lEPMTatJXT5DbEWPjNjecnpAFOZsEC+cjDnYhSU3dUwF3017gVXthloEamBUTK
Vo5H4le6qOkrDbJpTGB95z24HlxBmgOLWayq8x4WVgoiR8c4SQOPWqiLSgUAF0qk
OETEj43m1ILSGlLcbD9Hbt+a5pvFQGk=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:20 2025 by rpki-client