Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbbe2707-11b5-3c62-90b7-3c3fcfa0a7b3.roa
File: fbbe2707-11b5-3c62-90b7-3c3fcfa0a7b3.roa (raw, json)
Hash identifier: mX7wPcUZLYr0oK9GninM6Yzp6gzPSKlqmFlysM7OLAU=
Subject key identifier: 73:FB:FF:5B:54:75:78:A6:3E:E4:18:D3:78:B9:F7:44:51:4C:D2:AC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FBFA1E1EF279AF35EEC052A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbbe2707-11b5-3c62-90b7-3c3fcfa0a7b3.roa
Signing time: Sun 30 Oct 2022 12:00:00 +0000
ROA not before: Sun 30 Oct 2022 12:00:00 +0000
ROA not after: Mon 05 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 40.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:bf:a1:e1:ef:27:9a:f3:5e:ec:05:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 30 12:00:00 2022 GMT
Not After : Dec 5 05:00:00 2022 GMT
Subject: CN=1e06bca7-4dfe-4f8e-acc8-3e58ff4ad85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:c4:f4:ca:4e:95:b2:18:13:c8:de:7d:16:
4e:b4:0f:10:2f:f1:6c:06:62:9c:93:1a:6b:79:34:
4e:09:df:f9:7e:8d:7c:12:96:19:ed:4c:bc:14:1a:
0c:b2:69:75:69:c7:eb:d6:3c:e7:5f:c7:ed:00:57:
36:17:99:01:bc:0a:26:3b:d7:a7:92:f0:a9:bc:93:
58:90:36:24:5e:3d:76:4a:76:e5:ff:e5:b9:6c:65:
4f:72:9f:f8:9d:2f:03:18:ac:d8:24:5d:cb:9a:a4:
de:7f:78:f8:a1:60:84:41:21:ae:c1:37:f6:a5:2e:
26:13:dc:dc:ca:82:e9:77:72:2d:32:ae:44:31:3b:
87:79:19:c3:3b:ec:05:67:f0:fa:8b:df:14:b0:3e:
85:65:7a:d1:74:ee:b9:58:22:da:90:3a:02:09:b8:
d8:69:a8:b6:17:c7:6a:bf:bb:25:a4:3d:6d:f3:ea:
ff:dd:10:0e:ea:2b:87:92:ab:ac:bc:52:55:19:ba:
3f:71:1a:81:86:6a:54:ca:82:2a:df:66:5e:a0:1f:
3a:26:a1:26:61:eb:dc:2f:9b:b4:89:79:46:ae:24:
14:10:f2:04:c5:54:89:76:e1:9a:42:71:1a:05:5b:
7e:0e:ab:ff:f3:ed:0d:88:f1:ca:74:ff:ae:60:36:
cb:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FB:FF:5B:54:75:78:A6:3E:E4:18:D3:78:B9:F7:44:51:4C:D2:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbbe2707-11b5-3c62-90b7-3c3fcfa0a7b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
40.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:3b:9b:46:b2:e2:91:1c:d2:87:cb:d5:44:89:3e:9e:77:8a:
cb:a3:fe:68:80:5f:ad:c6:3c:28:60:9f:5b:0b:a2:2d:69:88:
6d:d3:7f:05:dd:01:a4:2c:e2:ef:07:b9:a8:12:c9:eb:3b:0f:
61:80:a5:ab:0d:2d:98:3f:d5:bc:5f:46:dc:97:10:e0:66:ba:
cf:c0:bc:4f:38:53:99:ed:0e:d2:26:61:3e:36:d8:d9:d1:fc:
af:c5:98:a0:8c:67:a9:d1:94:71:c6:0d:1f:8e:e0:52:25:ad:
29:5a:9a:15:72:07:b5:fe:17:da:14:fd:77:a7:33:93:de:37:
c5:4e:1e:0c:39:15:30:c9:93:e1:d7:51:13:84:db:61:a4:ac:
f7:75:6a:08:47:fd:7d:eb:e3:47:8c:f0:ee:78:ac:7c:f0:cb:
5c:94:d2:62:d9:0d:17:0c:7a:5a:29:63:25:2e:3a:7e:ef:fd:
a8:b3:2d:d3:5b:46:ec:59:57:75:21:a0:ae:5d:5c:a2:b5:b4:
aa:44:cc:b9:35:5e:57:0a:4d:ff:2c:5e:12:5d:ee:5e:58:60:
1b:18:a9:6b:e1:31:48:57:f0:b2:bc:98:52:4b:f9:21:3c:b5:
8d:88:a3:a9:b5:71:18:68:be:fc:76:04:7b:cd:65:12:46:aa:
2e:8b:c2:c3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+/oeHvJ5rzXuwFKgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAzMDEyMDAwMFoXDTIyMTIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
MWUwNmJjYTctNGRmZS00ZjhlLWFjYzgtM2U1OGZmNGFkODVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8TE9MpOlbIYE8jefRZOtA8QL/FsBmKckxpr
eTROCd/5fo18EpYZ7Uy8FBoMsml1acfr1jznX8ftAFc2F5kBvAomO9enkvCpvJNY
kDYkXj12Snbl/+W5bGVPcp/4nS8DGKzYJF3LmqTef3j4oWCEQSGuwTf2pS4mE9zc
yoLpd3ItMq5EMTuHeRnDO+wFZ/D6i98UsD6FZXrRdO65WCLakDoCCbjYaai2F8dq
v7slpD1t8+r/3RAO6iuHkqusvFJVGbo/cRqBhmpUyoIq32ZeoB86JqEmYevcL5u0
iXlGriQUEPIExVSJduGaQnEaBVt+Dqv/8+0NiPHKdP+uYDbL0QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHP7/1tUdXimPuQY03i590RRTNKsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmJiZTI3MDctMTFiNS0z
YzYyLTkwYjctM2MzZmNmYTBhN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAKO8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnDubRrLikRzSh8vVRIk+nneKy6P+aIBfrcY8KGCfWwuiLWmIbdN/Bd0B
pCzi7we5qBLJ6zsPYYClqw0tmD/VvF9G3JcQ4Ga6z8C8TzhTme0O0iZhPjbY2dH8
r8WYoIxnqdGUccYNH47gUiWtKVqaFXIHtf4X2hT9d6czk943xU4eDDkVMMmT4ddR
E4TbYaSs93VqCEf9fevjR4zw7nisfPDLXJTSYtkNFwx6WiljJS46fu/9qLMt01tG
7FlXdSGgrl1corW0qkTMuTVeVwpN/yxeEl3uXlhgGxipa+ExSFfwsryYUkv5ITy1
jYijqbVxGGi+/HYEe81lEkaqLovCww==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:32:19 2025 by rpki-client