Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3b85c47-8a7e-3b14-aaa4-2af4f75b7462.roa
File: f3b85c47-8a7e-3b14-aaa4-2af4f75b7462.roa (raw, json)
Hash identifier: M5y3Pv7O3B9BwfmNaqlLldh3jDkXkk1mK0v8ju/hJsw=
Subject key identifier: 22:2B:9D:FC:9A:B2:6A:D0:4D:61:01:FC:99:10:4E:7B:48:23:B4:B4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E50D6A55A75CCA2C71D5BFBA8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3b85c47-8a7e-3b14-aaa4-2af4f75b7462.roa
Signing time: Mon 20 Jun 2022 12:00:00 +0000
ROA not before: Mon 20 Jun 2022 12:00:00 +0000
ROA not after: Tue 26 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 164.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:50:d6:a5:5a:75:cc:a2:c7:1d:5b:fb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 20 12:00:00 2022 GMT
Not After : Jul 26 04:00:00 2022 GMT
Subject: CN=2a1c9cfc-2f80-4117-915b-e59fbc681dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:8e:bd:56:c1:04:26:88:60:a4:e9:39:11:
1e:d3:da:ea:38:7f:8c:64:70:f5:ee:4f:d6:1b:87:
8f:42:2b:15:1b:96:70:b4:7a:d5:ef:46:e2:f4:d7:
c5:6e:f8:27:ad:d0:05:94:c4:e0:09:f0:06:2f:35:
23:90:f5:08:f4:de:03:4e:6d:eb:49:cd:a3:e1:98:
e0:aa:88:28:34:8c:5f:88:6f:74:16:ca:cd:38:29:
79:d5:f3:2c:24:e8:e3:b9:ec:11:a1:bb:a7:84:db:
43:ed:cf:a0:10:01:f0:57:8c:bd:2a:fd:e2:ad:b7:
38:5a:c7:bc:98:54:4e:74:26:0b:e5:b5:a3:70:5b:
10:10:2e:14:a3:f7:ee:86:4e:8a:b5:f5:e9:8a:46:
63:81:38:d7:5b:92:67:03:aa:30:88:20:5c:1e:61:
4a:fe:85:54:a5:c3:02:bd:8d:c7:79:df:63:b7:20:
4f:c0:67:90:d1:5b:46:41:f5:1b:70:eb:dc:19:2b:
bc:8c:93:f5:01:a0:95:cd:e2:cf:11:b8:17:7b:b4:
bf:d1:33:17:6c:0f:62:de:72:e6:ac:36:6d:14:77:
73:ae:e2:a7:76:25:31:12:e5:ff:3b:f3:3a:94:ef:
a7:43:61:65:2c:a4:50:df:dc:29:42:3f:21:cc:57:
ce:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2B:9D:FC:9A:B2:6A:D0:4D:61:01:FC:99:10:4E:7B:48:23:B4:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f3b85c47-8a7e-3b14-aaa4-2af4f75b7462.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
164.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:cf:b6:9a:d9:75:3a:5e:25:33:e4:49:a9:5a:9b:0d:39:1a:
0b:ba:75:16:51:92:28:3e:50:4b:95:7b:d5:11:de:cc:3b:ed:
11:9f:22:62:71:70:a3:f7:92:ad:55:01:b6:9d:cd:f0:5a:14:
80:58:de:26:3a:85:bf:d3:99:ec:04:05:02:25:40:44:c0:c2:
98:4f:fc:53:00:e5:da:56:8c:7f:12:96:88:e7:b1:4a:dc:d7:
38:35:14:f3:c6:fa:33:07:d5:70:15:c1:34:ec:6b:cf:85:e8:
b5:f9:91:9d:03:48:e8:69:99:68:ef:30:05:7b:1f:b5:ee:06:
98:35:c8:dd:b6:40:30:06:e8:a0:3c:3b:00:19:fb:76:db:15:
be:3d:bf:40:23:e4:ce:97:97:a5:62:86:92:bf:d1:b5:2d:db:
15:e0:f0:92:dc:03:80:3b:47:ef:11:7a:ee:9a:65:11:32:70:
71:6d:7d:81:c7:3b:a1:f3:de:3c:ad:8a:16:2a:7d:f4:8b:5c:
bb:44:d7:b8:5b:83:63:87:08:34:e4:34:f0:b6:95:00:26:70:
e0:e7:51:21:c5:58:f4:3e:45:4f:2e:f3:cc:17:cd:d7:83:ef:
26:9b:5f:f7:ba:23:66:b5:de:4c:81:df:93:dd:5b:14:65:14:
f7:f7:22:80
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5Q1qVadcyixx1b+6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYyMDEyMDAwMFoXDTIyMDcyNjA0MDAwMFowLzEtMCsGA1UEAxMk
MmExYzljZmMtMmY4MC00MTE3LTkxNWItZTU5ZmJjNjgxZGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+GOvVbBBCaIYKTpOREe09rqOH+MZHD17k/W
G4ePQisVG5ZwtHrV70bi9NfFbvgnrdAFlMTgCfAGLzUjkPUI9N4DTm3rSc2j4Zjg
qogoNIxfiG90FsrNOCl51fMsJOjjuewRobunhNtD7c+gEAHwV4y9Kv3irbc4Wse8
mFROdCYL5bWjcFsQEC4Uo/fuhk6KtfXpikZjgTjXW5JnA6owiCBcHmFK/oVUpcMC
vY3Hed9jtyBPwGeQ0VtGQfUbcOvcGSu8jJP1AaCVzeLPEbgXe7S/0TMXbA9i3nLm
rDZtFHdzruKndiUxEuX/O/M6lO+nQ2FlLKRQ39wpQj8hzFfOnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCIrnfyasmrQTWEB/JkQTntII7S0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjNiODVjNDctOGE3ZS0z
YjE0LWFhYTQtMmFmNGY3NWI3NDYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApKgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqc+2mtl1Ol4lM+RJqVqbDTkaC7p1FlGSKD5QS5V71RHezDvtEZ8iYnFw
o/eSrVUBtp3N8FoUgFjeJjqFv9OZ7AQFAiVARMDCmE/8UwDl2laMfxKWiOexStzX
ODUU88b6MwfVcBXBNOxrz4XotfmRnQNI6GmZaO8wBXsfte4GmDXI3bZAMAbooDw7
ABn7dtsVvj2/QCPkzpeXpWKGkr/RtS3bFeDwktwDgDtH7xF67pplETJwcW19gcc7
ofPePK2KFip99Itcu0TXuFuDY4cINOQ08LaVACZw4OdRIcVY9D5FTy7zzBfN14Pv
Jptf97ojZrXeTIHfk91bFGUU9/cigA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:46 2025 by rpki-client