Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef7b3602-b6c4-3d82-be19-02f3e65c81b0.roa
File: ef7b3602-b6c4-3d82-be19-02f3e65c81b0.roa (raw, json)
Hash identifier: dV33rABBjk/uq399yVvTUg9Yr0Iya0pOB2Eyl5V/HFc=
Subject key identifier: D1:8F:68:E5:AD:4F:DC:A1:CA:76:6E:5F:08:B8:19:36:77:80:DA:09
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401E0EB5E90093BD3C7DE0E480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef7b3602-b6c4-3d82-be19-02f3e65c81b0.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 107.176.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1e:0e:b5:e9:00:93:bd:3c:7d:e0:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=bfd85af4-9511-473f-a713-21add17df270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e9:bf:28:9f:24:56:7c:bb:0d:0f:13:c0:ef:
92:6b:7b:74:c4:4b:96:15:13:36:f9:37:bf:f4:fa:
76:38:92:aa:b7:e4:4d:68:c7:14:28:11:29:a4:93:
66:e8:5b:1f:be:43:cb:1a:f1:51:35:07:73:d2:3a:
9e:50:8e:a0:60:c1:3d:c3:e8:20:7f:71:94:c4:a2:
1d:01:2f:12:1f:c0:29:8d:24:a0:1e:d7:9d:51:16:
a4:b6:53:06:61:5d:81:56:bb:80:de:6a:d9:50:2a:
05:47:66:1c:24:f1:88:59:9c:0a:9c:11:d6:9e:cd:
d3:e4:69:d1:a2:42:2b:e6:b9:85:80:4a:40:d9:e5:
71:02:27:be:48:c8:bd:32:ca:bf:81:6e:d3:44:1b:
20:72:1b:ab:fe:8e:af:5d:43:83:5f:ba:b5:f5:e5:
a7:e8:46:f9:2b:b1:bc:38:7c:87:6e:27:15:ab:fb:
8c:bd:f1:f9:57:0a:0c:56:cf:f7:52:a5:12:1b:a1:
90:88:16:81:a6:41:9a:d7:69:87:96:e4:ef:dc:65:
f5:6c:71:1b:16:4e:88:b0:6b:bc:15:5a:de:79:96:
ee:ca:e0:94:54:cf:c6:1a:27:a6:2f:35:13:ef:fc:
fd:af:96:0e:29:88:ae:80:af:ec:6c:2f:44:47:ac:
bd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8F:68:E5:AD:4F:DC:A1:CA:76:6E:5F:08:B8:19:36:77:80:DA:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef7b3602-b6c4-3d82-be19-02f3e65c81b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
107.176.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ce:c3:c1:20:41:e4:67:f6:48:3d:0c:72:dc:c9:3e:dd:67:
9a:a9:f9:a7:02:aa:ce:36:41:30:a3:76:da:36:7b:9a:52:02:
9a:9c:a8:45:72:90:c0:49:f5:f0:72:7b:da:51:c8:90:70:a0:
38:bd:0c:13:fa:b9:ae:79:89:f8:fe:f1:de:2e:df:43:4d:ad:
a5:45:c7:ad:4a:5a:da:76:ab:00:8f:98:6b:d7:b5:06:e0:de:
1b:d8:d4:be:19:51:19:ae:af:02:8f:fc:d2:93:d2:ac:03:53:
16:56:2f:be:f8:fe:61:21:8d:80:3d:cb:ba:4b:2f:9b:d1:b7:
5c:03:e3:8a:d6:34:9e:35:4a:61:bc:1d:a7:49:51:4d:5e:f1:
07:73:c9:3f:39:dd:a1:8c:99:eb:22:35:e0:73:9e:b4:02:37:
02:fb:72:4f:33:88:cc:1d:f1:fa:16:60:b4:e0:b1:e4:71:ee:
e4:dc:8e:9d:0f:7c:6c:91:22:66:3f:71:a0:cf:c7:7e:f6:e8:
75:a9:b6:0f:3f:03:89:f7:e2:10:bd:09:66:b6:21:a0:3a:e6:
d9:f1:ee:8c:bc:fc:84:cf:ac:a1:3a:31:ea:44:a3:b8:79:e3:
c1:ed:8e:89:41:40:de:36:ee:62:1d:aa:a3:54:9c:97:d8:88:
5b:33:ae:d2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAeDrXpAJO9PH3g5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMzEyMDAwMFoXDTIzMDEwODA1MDAwMFowLzEtMCsGA1UEAxMk
YmZkODVhZjQtOTUxMS00NzNmLWE3MTMtMjFhZGQxN2RmMjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlum/KJ8kVny7DQ8TwO+Sa3t0xEuWFRM2+Te/
9Pp2OJKqt+RNaMcUKBEppJNm6FsfvkPLGvFRNQdz0jqeUI6gYME9w+ggf3GUxKId
AS8SH8ApjSSgHtedURaktlMGYV2BVruA3mrZUCoFR2YcJPGIWZwKnBHWns3T5GnR
okIr5rmFgEpA2eVxAie+SMi9Msq/gW7TRBsgchur/o6vXUODX7q19eWn6Eb5K7G8
OHyHbicVq/uMvfH5VwoMVs/3UqUSG6GQiBaBpkGa12mHluTv3GX1bHEbFk6IsGu8
FVreeZbuyuCUVM/GGiemLzUT7/z9r5YOKYiugK/sbC9ER6y9EwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNGPaOWtT9yhynZuXwi4GTZ3gNoJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWY3YjM2MDItYjZjNC0z
ZDgyLWJlMTktMDJmM2U2NWM4MWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBa7AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASc7DwSBB5Gf2SD0MctzJPt1nmqn5pwKqzjZBMKN22jZ7mlICmpyoRXKQ
wEn18HJ72lHIkHCgOL0ME/q5rnmJ+P7x3i7fQ02tpUXHrUpa2narAI+Ya9e1BuDe
G9jUvhlRGa6vAo/80pPSrANTFlYvvvj+YSGNgD3Luksvm9G3XAPjitY0njVKYbwd
p0lRTV7xB3PJPzndoYyZ6yI14HOetAI3AvtyTzOIzB3x+hZgtOCx5HHu5NyOnQ98
bJEiZj9xoM/Hfvbodam2Dz8DiffiEL0JZrYhoDrm2fHujLz8hM+soTox6kSjuHnj
we2OiUFA3jbuYh2qo1Scl9iIWzOu0g==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:31 2025 by rpki-client