Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2aa14f9c-abc8-367a-8bd5-acb1272076ff.roa
File: 2aa14f9c-abc8-367a-8bd5-acb1272076ff.roa (raw, json)
Hash identifier: ufArKv3Oop27TEQDacMb5Je2dgySTt1E5w/T88KbVtE=
Subject key identifier: 8F:CC:6A:95:E4:DD:C4:1D:BB:6F:47:F6:1B:7A:8A:DF:9F:6A:91:2C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F7ADB34A5ED6455DE4DAC6480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2aa14f9c-abc8-367a-8bd5-acb1272076ff.roa
Signing time: Wed 05 Oct 2022 12:00:00 +0000
ROA not before: Wed 05 Oct 2022 12:00:00 +0000
ROA not after: Thu 10 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.18.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7a:db:34:a5:ed:64:55:de:4d:ac:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 5 12:00:00 2022 GMT
Not After : Nov 10 05:00:00 2022 GMT
Subject: CN=413f7baf-04ee-43ba-96df-a36c903d4c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:eb:6d:34:7e:10:6f:e6:78:59:5c:31:9e:
a6:5b:e4:2f:d1:4d:7f:a8:a8:fd:43:da:8c:bd:e5:
e3:f9:8e:44:32:83:25:f3:10:c6:63:67:3c:92:d9:
b2:73:53:af:6b:21:3b:ea:c5:b8:01:eb:5c:5b:ed:
6e:dd:e3:48:94:5b:3a:3e:fc:86:d7:7c:2a:d7:ed:
d0:ec:00:67:82:31:13:06:1b:55:28:ac:5d:e5:9b:
fc:21:65:f5:44:59:40:e1:31:aa:04:7a:e9:0e:9d:
aa:1b:b7:07:1d:08:6d:10:8b:46:07:78:41:f2:90:
52:82:e8:e7:d0:24:0a:23:c0:05:5a:2b:9f:da:a9:
e8:10:4d:a6:72:87:ab:97:e8:e1:59:98:94:3f:b0:
6c:63:c7:85:4c:69:5d:02:a1:02:50:8c:38:2f:be:
c2:53:75:44:9a:b4:ac:8a:0e:8f:a1:80:1d:71:5e:
fb:06:da:39:40:c8:fb:97:7b:f0:8a:a7:e2:48:a6:
1a:c6:fc:42:6b:69:2d:db:44:6a:80:00:62:97:31:
a4:c0:1e:f4:d1:f2:b1:db:c4:53:21:ad:db:a0:c8:
bb:03:af:c1:06:e8:4b:6f:ec:fa:9b:bd:e0:ec:03:
49:49:52:a4:4d:9a:20:23:55:50:71:50:fa:07:1c:
71:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:CC:6A:95:E4:DD:C4:1D:BB:6F:47:F6:1B:7A:8A:DF:9F:6A:91:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2aa14f9c-abc8-367a-8bd5-acb1272076ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:8b:62:fe:34:1e:f7:a9:88:a3:f2:6a:dd:05:0e:d4:20:55:
eb:1a:c9:91:84:42:88:ca:d4:06:b7:d5:b5:af:36:83:df:95:
91:20:08:41:1e:15:cd:43:8b:7c:39:90:50:cb:f6:6f:81:04:
74:59:32:92:46:c2:ae:98:bb:13:2e:49:19:e2:0b:77:e3:a8:
74:97:80:7a:32:1d:19:f4:47:f3:de:ff:6d:a7:3c:ab:1c:25:
80:39:d8:54:f7:ef:85:44:70:e4:32:ee:5e:7a:2e:cd:ef:c2:
6d:91:ca:f3:b4:8f:78:bd:8b:50:ad:2c:cb:f2:70:6c:00:a0:
9c:22:6e:97:58:6e:9c:1b:7b:e1:e1:7f:ea:48:24:be:43:c9:
1e:e1:e3:9e:15:47:68:4f:78:b2:f3:6b:01:dd:97:37:8a:2f:
55:0f:74:73:ce:68:61:28:76:22:21:13:fd:63:4d:ca:b4:29:
5b:54:45:a9:b1:ec:04:e4:b3:4f:ba:6f:de:4e:eb:f1:f1:b6:
be:13:29:e6:c3:9a:77:fd:36:49:88:fe:0e:1a:12:49:2a:a6:
33:6e:80:c3:e3:e2:17:80:77:a3:a3:06:f9:07:09:0b:bb:c5:
46:7f:ba:1d:9e:e1:e7:7b:1f:74:4a:70:1e:49:f7:de:59:c7:
71:34:39:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD962zSl7WRV3k2sZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAwNTEyMDAwMFoXDTIyMTExMDA1MDAwMFowLzEtMCsGA1UEAxMk
NDEzZjdiYWYtMDRlZS00M2JhLTk2ZGYtYTM2YzkwM2Q0YzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVjrbTR+EG/meFlcMZ6mW+Qv0U1/qKj9Q9qM
veXj+Y5EMoMl8xDGY2c8ktmyc1OvayE76sW4AetcW+1u3eNIlFs6PvyG13wq1+3Q
7ABngjETBhtVKKxd5Zv8IWX1RFlA4TGqBHrpDp2qG7cHHQhtEItGB3hB8pBSgujn
0CQKI8AFWiuf2qnoEE2mcoerl+jhWZiUP7BsY8eFTGldAqECUIw4L77CU3VEmrSs
ig6PoYAdcV77Bto5QMj7l3vwiqfiSKYaxvxCa2kt20RqgABilzGkwB700fKx28RT
Ia3boMi7A6/BBuhLb+z6m73g7ANJSVKkTZogI1VQcVD6BxxxwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI/MapXk3cQdu29H9ht6it+fapEsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmFhMTRmOWMtYWJjOC0z
NjdhLThiZDUtYWNiMTI3MjA3NmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBIUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAGLYv40HvepiKPyat0FDtQgVesayZGEQojK1Aa31bWvNoPflZEgCEEe
Fc1Di3w5kFDL9m+BBHRZMpJGwq6YuxMuSRniC3fjqHSXgHoyHRn0R/Pe/22nPKsc
JYA52FT374VEcOQy7l56Ls3vwm2RyvO0j3i9i1CtLMvycGwAoJwibpdYbpwbe+Hh
f+pIJL5DyR7h454VR2hPeLLzawHdlzeKL1UPdHPOaGEodiIhE/1jTcq0KVtURamx
7ATks0+6b95O6/Hxtr4TKebDmnf9NkmI/g4aEkkqpjNugMPj4heAd6OjBvkHCQu7
xUZ/uh2e4ed7H3RKcB5J995Zx3E0OR0=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:07 2025 by rpki-client