Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e571e930-6ec7-34ae-912d-a54a1bc1a257.roa
File: e571e930-6ec7-34ae-912d-a54a1bc1a257.roa (raw, json)
Hash identifier: /j/NGmWyq7GR8LklsUAdj5ddFdTUCouW0g1fj+hn1MM=
Subject key identifier: B4:74:3E:EB:84:31:06:DC:7B:E0:FF:78:F2:AA:6C:B4:78:3B:36:6C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD693866124BE7CDCB431E580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e571e930-6ec7-34ae-912d-a54a1bc1a257.roa
Signing time: Mon 07 Nov 2022 22:33:08 +0000
ROA not before: Mon 07 Nov 2022 22:33:08 +0000
ROA not after: Tue 13 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 40.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d6:93:86:61:24:be:7c:dc:b4:31:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 7 22:33:08 2022 GMT
Not After : Dec 13 05:00:00 2022 GMT
Subject: CN=dc393a7d-d28b-443a-af9d-01bfe863d531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bc:cb:98:b2:91:ea:c1:42:42:99:f3:80:f1:
c7:b6:83:f8:ed:ae:29:59:75:e3:90:19:9a:1b:fd:
c2:b7:0b:d1:2b:72:00:fd:62:9b:4b:71:2e:64:50:
56:18:f2:26:8d:ea:db:96:33:f8:b0:62:53:04:a7:
a9:cb:60:a2:33:a2:f4:41:2a:d5:be:a0:c7:08:28:
09:39:20:33:dc:ad:ba:75:73:97:c6:c2:3e:40:9c:
ee:65:e2:27:31:b5:81:f7:d2:5b:be:ef:ce:3e:81:
a6:9f:ca:43:1d:39:cf:7d:50:c4:1c:d0:af:f3:e7:
68:80:37:74:bf:5f:13:12:e2:2d:c7:78:7d:80:23:
d9:15:b3:2d:4e:d6:22:36:2b:9d:e2:78:9d:d0:2b:
8f:f9:5a:fc:88:73:5d:fe:68:81:d1:1b:a3:f6:25:
de:81:5f:7c:86:f5:30:42:ce:6f:a9:f1:7a:78:f5:
b8:78:01:f2:13:e1:68:61:1a:48:05:a1:b5:1a:19:
10:5f:06:cb:5f:5f:f4:0e:c3:73:3b:82:1b:a5:f9:
ef:9d:e9:01:2c:bc:20:bb:ae:51:06:90:e1:77:27:
40:34:66:a0:28:30:f6:bc:51:b2:1c:7e:ab:20:c0:
63:28:5c:52:b7:ee:20:7e:a7:90:ec:73:2d:1e:1b:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:74:3E:EB:84:31:06:DC:7B:E0:FF:78:F2:AA:6C:B4:78:3B:36:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e571e930-6ec7-34ae-912d-a54a1bc1a257.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:8e:8b:b3:93:ae:40:d9:e3:78:0c:e4:de:8f:35:ad:ce:85:
22:0d:a2:33:6c:70:27:90:6f:e4:12:91:1c:e8:29:04:4a:cd:
d1:a0:95:ea:c5:32:dc:d0:c1:16:95:2f:0a:ad:c9:43:1b:ca:
7a:14:3b:57:2b:00:a9:70:03:d7:de:31:3e:53:67:1e:1a:60:
4c:3f:12:a1:50:ab:bb:ae:06:04:41:f7:ae:6b:24:10:24:9d:
4f:84:e7:fe:5a:31:df:65:ff:a3:46:a3:0c:5c:5f:27:13:10:
bd:40:ca:c1:f8:f4:f5:53:23:2a:29:8f:d4:85:45:14:4f:4e:
c1:ff:fc:75:ae:45:8c:a2:a1:bd:25:a5:11:a5:85:20:a7:d6:
2b:09:9f:67:d3:a6:5b:41:63:20:49:c6:35:6d:39:8e:87:c7:
c6:f5:1e:18:a6:ec:66:e3:79:d3:46:01:71:f6:e8:e5:d4:ce:
2d:ef:7b:8b:fe:92:34:81:55:ec:ee:00:18:cc:3b:a1:5c:74:
bc:c8:a3:eb:33:69:d4:82:6a:21:bf:39:45:65:af:82:ba:55:
07:92:81:fb:2a:57:80:09:55:e1:33:be:d1:06:da:03:58:1e:
7b:72:16:86:8f:e2:87:d5:64:f8:44:42:d5:3a:17:6f:3f:c6:
c4:de:84:b0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/Wk4ZhJL583LQx5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwNzIyMzMwOFoXDTIyMTIxMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZGMzOTNhN2QtZDI4Yi00NDNhLWFmOWQtMDFiZmU4NjNkNTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7zLmLKR6sFCQpnzgPHHtoP47a4pWXXjkBma
G/3CtwvRK3IA/WKbS3EuZFBWGPImjerbljP4sGJTBKepy2CiM6L0QSrVvqDHCCgJ
OSAz3K26dXOXxsI+QJzuZeInMbWB99Jbvu/OPoGmn8pDHTnPfVDEHNCv8+dogDd0
v18TEuItx3h9gCPZFbMtTtYiNiud4nid0CuP+Vr8iHNd/miB0Ruj9iXegV98hvUw
Qs5vqfF6ePW4eAHyE+FoYRpIBaG1GhkQXwbLX1/0DsNzO4IbpfnvnekBLLwgu65R
BpDhdydANGagKDD2vFGyHH6rIMBjKFxSt+4gfqeQ7HMtHhtgvwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLR0PuuEMQbce+D/ePKqbLR4OzZsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZTU3MWU5MzAtNmVjNy0z
NGFlLTkxMmQtYTU0YTFiYzFhMjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKLQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEI6Ls5OuQNnjeAzk3o81rc6FIg2iM2xwJ5Bv5BKRHOgpBErN0aCV6sUy
3NDBFpUvCq3JQxvKehQ7VysAqXAD194xPlNnHhpgTD8SoVCru64GBEH3rmskECSd
T4Tn/lox32X/o0ajDFxfJxMQvUDKwfj09VMjKimP1IVFFE9Owf/8da5FjKKhvSWl
EaWFIKfWKwmfZ9OmW0FjIEnGNW05jofHxvUeGKbsZuN500YBcfbo5dTOLe97i/6S
NIFV7O4AGMw7oVx0vMij6zNp1IJqIb85RWWvgrpVB5KB+ypXgAlV4TO+0QbaA1ge
e3IWho/ih9Vk+ERC1ToXbz/GxN6EsA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:50 2025 by rpki-client