Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f71d3e0a-3eb9-3a87-9c9e-89f24d4c2118.roa
File: f71d3e0a-3eb9-3a87-9c9e-89f24d4c2118.roa (raw, json)
Hash identifier: W+UxJhJlXZghpBdgUWPQjGX/emlgZVafB2uBQMRhKBI=
Subject key identifier: 95:9E:90:D0:26:7D:2A:30:08:77:E7:16:FA:D8:B7:B9:B6:7C:5E:3E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E41D5308D6AD33766D10FC1C8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f71d3e0a-3eb9-3a87-9c9e-89f24d4c2118.roa
Signing time: Wed 15 Jun 2022 12:00:00 +0000
ROA not before: Wed 15 Jun 2022 12:00:00 +0000
ROA not after: Thu 21 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 40.163.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:41:d5:30:8d:6a:d3:37:66:d1:0f:c1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 15 12:00:00 2022 GMT
Not After : Jul 21 04:00:00 2022 GMT
Subject: CN=f3ff476e-3f14-46dc-8129-2ce4fb14a718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:22:71:97:cc:1f:41:99:fc:97:79:49:1d:
00:db:4e:93:99:69:26:79:a6:0f:7d:1a:82:8f:4c:
88:90:22:3a:ef:2c:6d:5a:4c:dd:9f:ba:ee:c8:51:
7b:ef:18:c4:d8:77:76:f1:8d:17:da:59:b7:bc:a5:
8a:88:41:54:2e:e7:dd:cb:49:19:e5:cd:01:41:1c:
e7:6a:07:f9:c1:90:09:16:ab:52:5b:a9:1b:1f:7b:
63:19:3b:ba:bc:cd:54:69:64:5c:72:21:87:98:83:
da:cd:6d:fb:75:d5:c9:fd:ef:f0:d7:35:fb:0c:6e:
20:b3:2a:21:93:10:64:fb:25:76:1e:58:83:cd:ee:
be:f1:6c:78:0c:b4:de:55:9b:27:be:c8:50:fb:4b:
d6:e0:da:41:14:2a:d0:3b:5e:48:72:fc:2b:a4:9f:
57:70:49:3f:7a:83:98:ec:c6:d5:64:8d:9a:99:11:
5e:79:68:25:c1:a9:9e:7f:0d:e8:a1:b9:94:41:6c:
b3:a0:b7:e9:02:2f:cd:e1:1d:19:7a:06:85:77:4d:
90:6c:e1:db:2c:11:92:14:2a:10:24:41:2f:c2:53:
cc:00:77:7c:5f:3f:44:2d:17:22:99:56:35:d8:a3:
8a:5b:99:6a:49:0d:a6:5c:17:3a:a5:12:b4:e5:05:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9E:90:D0:26:7D:2A:30:08:77:E7:16:FA:D8:B7:B9:B6:7C:5E:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f71d3e0a-3eb9-3a87-9c9e-89f24d4c2118.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.163.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:f2:20:9c:db:bb:b4:e7:31:ba:6c:e3:35:c4:cb:eb:ca:c4:
9f:37:ab:d3:61:24:4a:40:0a:c6:af:b2:97:32:24:b7:99:95:
33:09:db:95:a0:dc:c8:9c:03:f5:fd:8b:f8:02:f4:3a:9f:b4:
45:d0:56:0a:b2:3d:ab:1a:3a:46:5b:42:73:d9:97:f4:e8:29:
47:ce:60:80:a3:a5:e1:b8:e2:6b:cd:57:34:5d:d3:38:f9:d6:
c5:e8:80:7c:3c:80:57:68:d4:18:12:96:e2:06:d7:3d:1f:13:
f4:11:81:28:bf:24:05:3e:32:54:0d:8b:ff:6c:a5:ed:0e:b9:
87:bd:9f:0f:fa:c4:0d:14:5d:29:ff:61:a5:22:28:61:91:8c:
ae:70:f5:eb:7e:89:0d:e4:ba:71:f1:4b:a9:c9:b5:db:1a:d0:
17:0d:00:92:46:be:be:d1:40:6a:e2:9e:e7:c9:ff:df:7f:42:
fb:9a:98:1f:61:6c:96:37:27:93:51:6c:5b:dc:56:fd:1d:69:
66:d8:1c:54:b3:43:35:3b:59:1a:68:eb:76:84:77:bb:3c:4b:
a8:2f:c8:7e:f1:9c:ee:7c:02:34:58:09:ad:7d:c2:6b:4c:b3:
77:b8:d3:ee:c0:bc:d2:ad:74:85:0f:20:71:d3:68:3d:76:a5:
60:00:5f:2a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5B1TCNatM3ZtEPwcgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxNTEyMDAwMFoXDTIyMDcyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZjNmZjQ3NmUtM2YxNC00NmRjLTgxMjktMmNlNGZiMTRhNzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkQicZfMH0GZ/Jd5SR0A206TmWkmeaYPfRqC
j0yIkCI67yxtWkzdn7ruyFF77xjE2Hd28Y0X2lm3vKWKiEFULufdy0kZ5c0BQRzn
agf5wZAJFqtSW6kbH3tjGTu6vM1UaWRcciGHmIPazW37ddXJ/e/w1zX7DG4gsyoh
kxBk+yV2HliDze6+8Wx4DLTeVZsnvshQ+0vW4NpBFCrQO15IcvwrpJ9XcEk/eoOY
7MbVZI2amRFeeWglwamefw3oobmUQWyzoLfpAi/N4R0ZegaFd02QbOHbLBGSFCoQ
JEEvwlPMAHd8Xz9ELRcimVY12KOKW5lqSQ2mXBc6pRK05QX7RQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJWekNAmfSowCHfnFvrYt7m2fF4+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjcxZDNlMGEtM2ViOS0z
YTg3LTljOWUtODlmMjRkNGMyMTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKKMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUvIgnNu7tOcxumzjNcTL68rEnzer02EkSkAKxq+ylzIkt5mVMwnblaDc
yJwD9f2L+AL0Op+0RdBWCrI9qxo6RltCc9mX9OgpR85ggKOl4bjia81XNF3TOPnW
xeiAfDyAV2jUGBKW4gbXPR8T9BGBKL8kBT4yVA2L/2yl7Q65h72fD/rEDRRdKf9h
pSIoYZGMrnD1636JDeS6cfFLqcm12xrQFw0Akka+vtFAauKe58n/339C+5qYH2Fs
ljcnk1FsW9xW/R1pZtgcVLNDNTtZGmjrdoR3uzxLqC/IfvGc7nwCNFgJrX3Ca0yz
d7jT7sC80q10hQ8gcdNoPXalYABfKg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:38 2025 by rpki-client