Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/03280b7d-91ca-3f28-a4da-33a26ed29706.roa
File: 03280b7d-91ca-3f28-a4da-33a26ed29706.roa (raw, json)
Hash identifier: gZSSshudrHcuvhgx8/xbdFoPXqG05vmAbXgcC/xzR8M=
Subject key identifier: B0:4B:B1:9B:4E:81:82:6D:FC:C1:DA:5F:4A:EB:35:17:57:1E:DA:75
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584053EA0C9BF101D2059EDCE860
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/03280b7d-91ca-3f28-a4da-33a26ed29706.roa
Signing time: Thu 22 Dec 2022 12:00:00 +0000
ROA not before: Thu 22 Dec 2022 12:00:00 +0000
ROA not after: Fri 27 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 138.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:53:ea:0c:9b:f1:01:d2:05:9e:dc:e8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 22 12:00:00 2022 GMT
Not After : Jan 27 05:00:00 2023 GMT
Subject: CN=1abd19e5-2d1b-4855-b156-01e555c6ee2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:a5:fe:ff:76:34:5b:24:2d:9c:f6:39:5e:
63:eb:a7:ca:fa:de:4e:10:5a:10:c6:d9:f2:57:03:
c7:5a:e2:d4:cf:78:0b:64:ad:81:b6:32:6d:61:90:
06:d4:17:7b:19:06:71:42:48:e5:0e:4c:c0:8a:f9:
54:f9:a2:21:24:32:01:71:ff:00:21:41:84:9c:62:
91:25:24:f3:b6:8f:6b:f3:b3:86:2b:c5:d0:9e:2c:
86:f9:07:36:6c:80:46:32:c4:d4:7c:a6:f7:11:93:
17:55:4c:cd:ea:c3:fd:48:10:bd:14:99:08:81:76:
a2:1d:46:89:11:23:d8:e6:62:58:2c:4a:e3:37:bd:
e7:d1:ac:8f:7f:84:ba:78:9a:10:d6:d0:af:98:1c:
1e:be:08:f7:40:26:13:08:28:36:c6:27:00:80:d8:
8c:7d:db:3e:81:55:b2:54:f9:03:a3:11:15:1a:15:
11:4b:1d:01:94:a8:06:7f:02:97:fb:8c:98:39:07:
e6:57:23:80:dc:df:53:2f:6f:ea:3f:8a:68:be:de:
4e:63:49:9a:eb:74:35:1b:34:d7:d4:68:a1:d1:a9:
b9:a1:4c:c7:92:c8:9a:53:83:7d:4b:3d:6d:0f:4a:
3d:06:48:cb:b0:3c:b0:5f:79:e5:d3:2f:6b:95:8a:
1e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4B:B1:9B:4E:81:82:6D:FC:C1:DA:5F:4A:EB:35:17:57:1E:DA:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/03280b7d-91ca-3f28-a4da-33a26ed29706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
138.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:72:c8:dc:09:12:60:d5:14:f8:e6:3a:21:46:44:7a:c8:3d:
ef:91:ff:72:40:4f:9b:be:e4:24:b0:48:dc:a0:07:0a:ee:aa:
82:17:05:b6:24:85:82:38:23:c4:1d:26:66:2a:db:7c:79:0c:
c2:1c:2a:83:cc:eb:4f:4d:15:18:d9:4c:77:2f:d2:92:14:ac:
91:dd:dc:34:94:62:88:4b:20:36:64:c3:84:4a:9c:87:f3:20:
64:f5:3d:ec:e2:09:eb:21:20:60:ba:30:c2:d9:54:bc:4c:cd:
1d:da:87:46:aa:c3:60:60:47:3e:5b:30:8a:b4:cf:62:71:99:
c0:50:0f:6f:51:9c:16:8c:9c:da:71:21:83:67:74:b8:68:f7:
fb:5c:c4:93:85:d5:7b:2d:26:5e:2f:00:1c:62:52:83:65:38:
9b:68:48:b9:3a:e1:6e:f7:71:26:c6:20:91:8c:98:34:7c:6a:
02:e9:73:31:9b:93:5b:bd:65:a4:6b:ae:51:16:85:fa:fa:15:
d6:41:d1:68:52:2a:ff:7d:29:05:15:36:77:d5:bf:09:59:23:
65:56:46:99:cd:08:c7:9d:73:18:0c:a6:af:91:b1:79:61:61:
e7:8d:5e:a9:30:88:e6:0e:c9:e9:a4:ac:93:7b:c6:7d:24:90:
c0:ce:bf:96
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBT6gyb8QHSBZ7c6GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyMjEyMDAwMFoXDTIzMDEyNzA1MDAwMFowLzEtMCsGA1UEAxMk
MWFiZDE5ZTUtMmQxYi00ODU1LWIxNTYtMDFlNTU1YzZlZTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi12l/v92NFskLZz2OV5j66fK+t5OEFoQxtny
VwPHWuLUz3gLZK2BtjJtYZAG1Bd7GQZxQkjlDkzAivlU+aIhJDIBcf8AIUGEnGKR
JSTzto9r87OGK8XQniyG+Qc2bIBGMsTUfKb3EZMXVUzN6sP9SBC9FJkIgXaiHUaJ
ESPY5mJYLErjN73n0ayPf4S6eJoQ1tCvmBwevgj3QCYTCCg2xicAgNiMfds+gVWy
VPkDoxEVGhURSx0BlKgGfwKX+4yYOQfmVyOA3N9TL2/qP4povt5OY0ma63Q1GzTX
1Gih0am5oUzHksiaU4N9Sz1tD0o9BkjLsDywX3nl0y9rlYoemQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLBLsZtOgYJt/MHaX0rrNRdXHtp1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDMyODBiN2QtOTFjYS0z
ZjI4LWE0ZGEtMzNhMjZlZDI5NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAikYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOnLI3AkSYNUU+OY6IUZEesg975H/ckBPm77kJLBI3KAHCu6qghcFtiSF
gjgjxB0mZirbfHkMwhwqg8zrT00VGNlMdy/SkhSskd3cNJRiiEsgNmTDhEqch/Mg
ZPU97OIJ6yEgYLowwtlUvEzNHdqHRqrDYGBHPlswirTPYnGZwFAPb1GcFoyc2nEh
g2d0uGj3+1zEk4XVey0mXi8AHGJSg2U4m2hIuTrhbvdxJsYgkYyYNHxqAulzMZuT
W71lpGuuURaF+voV1kHRaFIq/30pBRU2d9W/CVkjZVZGmc0Ix51zGAymr5GxeWFh
541eqTCI5g7J6aSsk3vGfSSQwM6/lg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:01 2025 by rpki-client