Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa6a5009-5197-350a-90f2-8f8edacd7a38.roa
File: fa6a5009-5197-350a-90f2-8f8edacd7a38.roa (raw, json)
Hash identifier: zZqKWTTnjHOl/2lGaTi3b2lZYdWykpD58Ht7cJNimpc=
Subject key identifier: B5:89:A8:4D:08:78:7E:85:74:DC:1F:02:F7:79:A5:E6:32:AA:0B:EF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC59F8FE1EEEB393F17FF7880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa6a5009-5197-350a-90f2-8f8edacd7a38.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Wed 07 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 129.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c5:9f:8f:e1:ee:eb:39:3f:17:ff:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Dec 7 05:00:00 2022 GMT
Subject: CN=332fe113-64e4-4a52-8de2-4540abb4e545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fc:de:de:d0:c5:7d:ad:c1:8a:1c:19:c2:4f:
21:aa:80:ca:e8:e3:b8:45:1c:5d:0f:36:d1:22:9f:
fb:5a:80:57:24:b6:25:9a:e3:e7:e0:28:00:88:92:
ba:00:ce:05:e1:25:46:c8:40:dd:82:6b:06:37:bd:
10:b1:42:a8:90:14:b4:17:d8:98:a9:41:26:b9:e6:
33:23:b0:aa:ab:b9:65:1c:94:f2:76:3d:63:11:01:
6d:a5:f4:6c:63:88:ab:18:17:58:1a:29:92:ad:e2:
f1:14:e4:8f:24:05:14:71:b9:07:38:d5:f5:ad:98:
8c:80:34:f9:63:9a:af:79:58:ea:21:7f:90:29:59:
fd:c9:00:85:be:82:23:97:f9:bd:03:63:9c:cd:5b:
e9:07:f0:b4:24:a5:1c:95:dc:89:12:03:d7:7a:f1:
76:f4:af:81:51:f8:28:a4:d7:f7:7a:a1:22:19:db:
ca:b6:65:65:e0:3b:d8:0b:0a:11:8e:1c:70:74:54:
27:58:86:3d:18:db:a6:ea:19:15:a4:93:82:f1:3c:
55:e0:4d:17:88:d8:1b:d8:07:ac:a3:1e:ed:86:4c:
51:1f:9c:b4:48:61:4d:0e:c3:08:8c:f1:87:f2:75:
15:e3:a5:6d:59:47:d4:98:ac:a5:6b:dc:f7:5d:67:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:89:A8:4D:08:78:7E:85:74:DC:1F:02:F7:79:A5:E6:32:AA:0B:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fa6a5009-5197-350a-90f2-8f8edacd7a38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
129.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:63:7c:e5:ea:25:1e:bd:8e:75:63:4d:4b:f0:f9:e6:6c:08:
ac:4d:74:44:15:b0:31:f1:7d:0e:b2:f2:52:ee:bb:9b:08:96:
ff:09:e6:03:f6:dc:0c:33:1a:03:22:02:01:c2:e6:4d:11:4c:
05:cc:f0:31:eb:04:b6:5e:bf:79:e3:f9:63:d1:18:85:1f:81:
72:78:6f:1d:f2:c5:db:a6:91:0f:48:b8:d4:43:71:23:03:d5:
c1:21:d3:e3:59:39:da:67:6b:0f:5a:55:f6:e8:9e:43:c3:dd:
60:b4:5d:b5:10:2f:62:be:21:26:81:55:ea:6c:32:a5:ac:ab:
76:dd:24:51:26:c7:c4:f6:c4:78:29:13:f6:e0:09:c2:66:ab:
d2:04:01:e6:51:8f:a8:61:6b:6a:e2:b0:8d:71:db:d2:7e:bb:
e1:93:2c:c1:cb:30:b5:67:56:9e:87:a5:18:27:bf:0c:b5:cd:
0f:a1:d1:79:62:88:c8:ef:85:27:c4:09:96:68:14:20:81:d4:
52:f5:ab:bf:ca:99:f2:b6:9a:68:d1:d1:c6:41:05:86:ba:9e:
0d:ef:9b:5f:cf:a4:32:21:0a:5a:4d:06:27:d0:87:9e:f1:bd:
27:84:a0:b0:a0:cb:38:0e:f7:6b:03:4d:84:4f:53:53:77:f6:
eb:89:ed:ec
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/Fn4/h7us5Pxf/eIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwMTEyMDAwMFoXDTIyMTIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MzMyZmUxMTMtNjRlNC00YTUyLThkZTItNDU0MGFiYjRlNTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfze3tDFfa3BihwZwk8hqoDK6OO4RRxdDzbR
Ip/7WoBXJLYlmuPn4CgAiJK6AM4F4SVGyEDdgmsGN70QsUKokBS0F9iYqUEmueYz
I7Cqq7llHJTydj1jEQFtpfRsY4irGBdYGimSreLxFOSPJAUUcbkHONX1rZiMgDT5
Y5qveVjqIX+QKVn9yQCFvoIjl/m9A2OczVvpB/C0JKUcldyJEgPXevF29K+BUfgo
pNf3eqEiGdvKtmVl4DvYCwoRjhxwdFQnWIY9GNum6hkVpJOC8TxV4E0XiNgb2Aes
ox7thkxRH5y0SGFNDsMIjPGH8nUV46VtWUfUmKyla9z3XWfoFQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLWJqE0IeH6FdNwfAvd5peYyqgvvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmE2YTUwMDktNTE5Ny0z
NTBhLTkwZjItOGY4ZWRhY2Q3YTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAge8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAA2N85eolHr2OdWNNS/D55mwIrE10RBWwMfF9DrLyUu67mwiW/wnmA/bc
DDMaAyICAcLmTRFMBczwMesEtl6/eeP5Y9EYhR+BcnhvHfLF26aRD0i41ENxIwPV
wSHT41k52mdrD1pV9uieQ8PdYLRdtRAvYr4hJoFV6mwypayrdt0kUSbHxPbEeCkT
9uAJwmar0gQB5lGPqGFrauKwjXHb0n674ZMswcswtWdWnoelGCe/DLXND6HReWKI
yO+FJ8QJlmgUIIHUUvWrv8qZ8raaaNHRxkEFhrqeDe+bX8+kMiEKWk0GJ9CHnvG9
J4SgsKDLOA73awNNhE9TU3f264nt7A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:20 2025 by rpki-client