Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec17b04a-1ba2-3013-984a-9492a1d09205.roa
File: ec17b04a-1ba2-3013-984a-9492a1d09205.roa (raw, json)
Hash identifier: K3ZtER4Hy7Qrc0NhsZpWUV8PGQQGVYT8jQRoedaIXdg=
Subject key identifier: 32:BD:CC:72:2C:7F:C6:8A:5D:A2:6D:DE:67:34:32:D8:BF:75:14:F7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D47A7625CE8458DB88B8D5880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec17b04a-1ba2-3013-984a-9492a1d09205.roa
Signing time: Fri 18 Mar 2022 04:00:00 +0000
ROA not before: Fri 18 Mar 2022 04:00:00 +0000
ROA not after: Fri 22 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 167.97.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:47:a7:62:5c:e8:45:8d:b8:8b:8d:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 18 04:00:00 2022 GMT
Not After : Apr 22 04:00:00 2022 GMT
Subject: CN=09c2153a-3283-407e-bdb1-2498c5c2adef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:30:3c:1e:ea:0e:88:bc:4d:43:48:ce:3e:
13:55:c7:1a:e4:83:cc:4a:91:36:a7:eb:f2:c9:bd:
46:61:04:1d:26:6d:45:2b:7f:e4:d0:b8:7f:24:0d:
20:c5:0d:2c:55:50:e9:96:e6:43:9c:66:16:ed:56:
5a:ea:ce:54:3a:39:27:eb:da:08:80:e6:d7:20:bf:
e8:5f:55:fd:a3:4c:b8:d5:9c:34:c5:07:4a:ed:a4:
f3:79:63:8c:23:7e:9a:6d:49:a1:a3:da:40:70:10:
8c:1f:88:d0:36:2e:2e:f2:07:f1:43:e7:20:e4:17:
15:28:59:19:a0:12:81:bb:8e:2a:d3:ee:ea:d5:d6:
0e:5f:a1:cd:34:7b:a3:6d:7c:d0:c3:e6:ac:6a:d9:
70:69:d0:90:ec:42:60:0f:fa:52:ae:72:1d:77:ef:
20:38:89:d3:d6:94:3a:6f:65:98:56:19:ac:85:9c:
f0:21:61:33:59:b2:3e:e6:5c:55:1d:5a:c8:dd:fc:
62:f9:bd:e2:39:e8:d8:2c:39:ba:be:58:e3:57:ac:
94:80:5c:83:34:83:d9:55:1c:6b:90:a8:95:9e:ec:
a7:83:9b:76:f0:aa:44:1e:92:34:d6:11:aa:0a:df:
dc:ed:8b:6b:8f:db:72:78:5a:cf:7b:fe:60:0d:3c:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BD:CC:72:2C:7F:C6:8A:5D:A2:6D:DE:67:34:32:D8:BF:75:14:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec17b04a-1ba2-3013-984a-9492a1d09205.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
167.97.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:3b:15:49:ff:13:0d:e4:f5:e6:35:c9:c5:b3:d5:27:b8:a1:
74:18:8e:04:97:d1:ff:96:c7:11:06:3a:a1:a4:c0:38:e0:17:
5f:4c:44:55:f1:88:98:ae:f9:a0:b6:ce:22:42:45:b8:c0:a5:
b4:b9:b6:99:10:a8:25:94:e0:82:71:f0:9d:ad:28:f0:c5:ab:
ce:49:ca:9d:83:c3:7d:96:73:e4:bb:cc:7a:6e:56:78:ad:45:
83:c9:5b:06:c7:91:8c:af:70:63:69:bb:02:d7:88:18:a7:ad:
8a:9f:ff:6b:3a:de:ff:3b:78:65:ba:c1:94:f4:23:05:48:44:
c1:ab:fb:b2:bc:5b:3b:0f:bc:13:6f:9b:5e:65:d4:32:f6:64:
04:72:eb:2c:7e:47:00:bc:7c:38:7c:16:71:d0:2d:fc:6b:11:
7e:5c:dc:31:55:76:65:60:7e:61:8e:6e:26:2b:fb:7d:17:df:
2a:8f:a7:a8:7d:9b:87:cc:98:71:4d:19:60:f5:c0:13:25:2e:
ee:2b:c6:74:f0:de:d1:97:29:19:ca:82:a3:e7:d7:3d:68:d3:
b4:ed:92:11:cb:b5:a9:d9:27:19:82:f7:76:87:2d:2e:a7:52:
dd:d2:82:f8:00:7d:11:d9:55:ae:34:d0:19:58:30:d9:15:cb:
5b:36:6f:44
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1Hp2Jc6EWNuIuNWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxODA0MDAwMFoXDTIyMDQyMjA0MDAwMFowLzEtMCsGA1UEAxMk
MDljMjE1M2EtMzI4My00MDdlLWJkYjEtMjQ5OGM1YzJhZGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApagwPB7qDoi8TUNIzj4TVcca5IPMSpE2p+vy
yb1GYQQdJm1FK3/k0Lh/JA0gxQ0sVVDpluZDnGYW7VZa6s5UOjkn69oIgObXIL/o
X1X9o0y41Zw0xQdK7aTzeWOMI36abUmho9pAcBCMH4jQNi4u8gfxQ+cg5BcVKFkZ
oBKBu44q0+7q1dYOX6HNNHujbXzQw+asatlwadCQ7EJgD/pSrnIdd+8gOInT1pQ6
b2WYVhmshZzwIWEzWbI+5lxVHVrI3fxi+b3iOejYLDm6vljjV6yUgFyDNIPZVRxr
kKiVnuyng5t28KpEHpI01hGqCt/c7Ytrj9tyeFrPe/5gDTyFRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDK9zHIsf8aKXaJt3mc0Mti/dRT3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWMxN2IwNGEtMWJhMi0z
MDEzLTk4NGEtOTQ5MmExZDA5MjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAp2EwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoTsVSf8TDeT15jXJxbPVJ7ihdBiOBJfR/5bHEQY6oaTAOOAXX0xEVfGI
mK75oLbOIkJFuMCltLm2mRCoJZTggnHwna0o8MWrzknKnYPDfZZz5LvMem5WeK1F
g8lbBseRjK9wY2m7AteIGKetip//azre/zt4ZbrBlPQjBUhEwav7srxbOw+8E2+b
XmXUMvZkBHLrLH5HALx8OHwWcdAt/GsRflzcMVV2ZWB+YY5uJiv7fRffKo+nqH2b
h8yYcU0ZYPXAEyUu7ivGdPDe0ZcpGcqCo+fXPWjTtO2SEcu1qdknGYL3doctLqdS
3dKC+AB9EdlVrjTQGVgw2RXLWzZvRA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:27 2025 by rpki-client