Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f54a420c-6c19-36e0-a13e-7c54b9d8be0c.roa
File: f54a420c-6c19-36e0-a13e-7c54b9d8be0c.roa (raw, json)
Hash identifier: plxVBZK+TvhCXMfuYGeRg43PizrPrW7kJug92W+k8uw=
Subject key identifier: 7C:0C:65:B0:A9:6C:F0:13:C6:59:56:D7:FB:9F:DA:83:26:81:69:AB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405F6E36C5ED89B00D268CA900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f54a420c-6c19-36e0-a13e-7c54b9d8be0c.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 151.148.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:6e:36:c5:ed:89:b0:0d:26:8c:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=cdf35448-b9d5-4d2d-9a42-e98ce13a3d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:47:b1:a0:00:ec:30:4b:16:0e:ad:f8:24:
2d:c4:d5:ab:34:9f:ae:57:7e:6d:9d:0f:28:04:f7:
cd:01:30:ce:07:54:87:21:f2:c3:98:49:8c:a9:45:
90:df:4a:07:29:1d:d7:b2:d9:9c:05:5e:c6:72:8d:
b5:33:80:f7:33:aa:a9:41:e1:a9:fe:82:51:ad:2e:
13:da:99:ad:2f:39:2d:9b:70:a0:92:92:04:1e:96:
bb:76:b6:ed:84:6b:93:00:b4:1c:91:15:e4:a8:9d:
8f:38:c4:69:dd:7d:15:f0:7a:1c:b0:e1:15:48:62:
5c:e0:81:3c:09:5d:a1:98:89:d2:75:81:1f:1d:d3:
b8:6c:9a:aa:be:4e:23:48:23:42:32:47:65:82:69:
f0:37:b7:6c:14:32:ca:cb:21:bd:3d:82:25:a8:43:
e2:e9:cb:c1:07:ab:fe:ce:3b:1e:8f:b3:59:ff:fc:
b1:91:20:e8:8d:a2:22:6d:ab:8a:ad:40:fe:8d:66:
aa:03:a5:4e:4f:0e:77:6d:56:49:0a:51:62:b0:17:
e9:ef:e3:91:31:ee:43:7b:df:7f:a4:0f:97:ef:86:
83:48:61:cd:6a:ad:f0:4e:a9:8c:7a:90:2e:28:14:
58:40:d6:d3:de:b7:68:e3:54:da:c4:e7:72:e5:d1:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0C:65:B0:A9:6C:F0:13:C6:59:56:D7:FB:9F:DA:83:26:81:69:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f54a420c-6c19-36e0-a13e-7c54b9d8be0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
151.148.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:87:74:b7:23:64:b1:bc:1e:b6:e0:dc:27:b5:f4:3c:3b:de:
f6:99:e7:10:64:b0:f3:5e:3e:ec:ec:12:11:65:71:3d:99:80:
36:f0:41:fe:57:9a:c1:2c:74:92:97:5e:b7:3b:44:3f:53:9a:
67:c2:97:e6:9c:24:3d:c1:de:2b:e9:81:8f:c8:aa:59:c4:1c:
0c:66:e1:a4:41:d1:2c:58:99:f7:3b:a6:a9:ac:9e:24:82:4d:
d6:42:0c:61:05:f0:3a:30:3f:97:62:86:94:ef:eb:db:a8:ea:
fd:9b:af:8f:1e:62:53:2f:5b:3c:1a:3d:8d:8f:b0:d9:9e:b8:
dc:60:6c:5f:e7:ec:51:6a:84:f8:f9:65:3b:85:89:1b:5b:12:
86:59:28:bc:f0:5d:ed:fd:57:bf:64:6d:57:d5:0b:78:9d:2d:
2a:7b:6e:3b:19:ed:83:32:4e:be:d4:46:55:f6:9b:56:4f:ce:
71:38:d4:48:39:a6:91:ff:97:01:53:2f:2e:c6:cc:a7:62:3f:
b3:87:27:13:ec:dd:0a:4e:5f:37:60:dc:4d:32:3f:3e:74:30:
65:5c:bd:a4:41:67:cb:8d:13:a8:3f:21:37:b2:5d:f5:5f:1e:
67:bb:de:97:ca:b4:da:bf:d6:81:52:d4:74:2d:21:bd:17:df:
10:f5:0d:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBfbjbF7YmwDSaMqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNjEyMDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
Y2RmMzU0NDgtYjlkNS00ZDJkLTlhNDItZTk4Y2UxM2EzZDAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyNHsaAA7DBLFg6t+CQtxNWrNJ+uV35tnQ8o
BPfNATDOB1SHIfLDmEmMqUWQ30oHKR3XstmcBV7Gco21M4D3M6qpQeGp/oJRrS4T
2pmtLzktm3CgkpIEHpa7drbthGuTALQckRXkqJ2POMRp3X0V8HocsOEVSGJc4IE8
CV2hmInSdYEfHdO4bJqqvk4jSCNCMkdlgmnwN7dsFDLKyyG9PYIlqEPi6cvBB6v+
zjsej7NZ//yxkSDojaIibauKrUD+jWaqA6VOTw53bVZJClFisBfp7+ORMe5De99/
pA+X74aDSGHNaq3wTqmMepAuKBRYQNbT3rdo41TaxOdy5dHGhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHwMZbCpbPATxllW1/uf2oMmgWmrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjU0YTQyMGMtNmMxOS0z
NmUwLWExM2UtN2M1NGI5ZDhiZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl5QIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALCHdLcjZLG8Hrbg3Ce19Dw73vaZ5xBksPNePuzsEhFlcT2ZgDbwQf5X
msEsdJKXXrc7RD9TmmfCl+acJD3B3ivpgY/IqlnEHAxm4aRB0SxYmfc7pqmsniSC
TdZCDGEF8DowP5dihpTv69uo6v2br48eYlMvWzwaPY2PsNmeuNxgbF/n7FFqhPj5
ZTuFiRtbEoZZKLzwXe39V79kbVfVC3idLSp7bjsZ7YMyTr7URlX2m1ZPznE41Eg5
ppH/lwFTLy7GzKdiP7OHJxPs3QpOXzdg3E0yPz50MGVcvaRBZ8uNE6g/ITeyXfVf
Hme73pfKtNq/1oFS1HQtIb0X3xD1DWE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:03 2025 by rpki-client