Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3448f6b2-77fe-30a0-b7b6-893a8efe8325.roa
File: 3448f6b2-77fe-30a0-b7b6-893a8efe8325.roa (raw, json)
Hash identifier: L0tavrG5rf8rU208EkmEbuyaPoXcNZWjzstkP8wiMzs=
Subject key identifier: 33:44:2D:58:39:59:EF:16:C4:57:3B:EA:92:48:23:B0:9E:BD:5E:38
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC12149CEE5021E02F3D97900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3448f6b2-77fe-30a0-b7b6-893a8efe8325.roa
Signing time: Sun 30 Oct 2022 12:00:00 +0000
ROA not before: Sun 30 Oct 2022 12:00:00 +0000
ROA not after: Mon 05 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 136.8.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c1:21:49:ce:e5:02:1e:02:f3:d9:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 30 12:00:00 2022 GMT
Not After : Dec 5 05:00:00 2022 GMT
Subject: CN=78ce76c3-2f2a-46b0-a48f-708a63cf9e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:80:2f:dd:33:b9:c8:25:36:b5:60:0e:e1:
e9:5c:84:4e:26:1c:ba:74:8e:c8:22:d5:32:6e:b6:
32:ea:ed:a4:fd:4b:1b:15:9e:50:3b:42:64:ae:f8:
68:64:01:77:f2:70:e9:ed:64:a8:1a:1a:62:fb:a5:
e6:86:8f:f3:55:b2:a0:9a:e4:38:54:80:1a:7f:bf:
7d:00:63:89:e5:76:bf:e1:c8:27:ba:0f:77:53:f2:
2b:da:d9:1a:fb:c9:90:e9:a5:4a:a8:42:d4:46:56:
2c:13:5c:44:69:61:83:a0:c5:38:84:fb:49:ca:9e:
37:40:4c:66:44:95:54:0d:33:33:aa:54:e0:43:66:
81:59:bc:dc:93:1c:cc:80:cc:03:4f:01:a8:5f:b7:
12:c1:08:cc:0d:3e:4d:0f:d7:61:e7:2f:64:85:33:
37:53:62:1b:4d:d3:30:7c:06:91:8f:af:8c:86:69:
bf:c5:ec:e6:26:c9:5b:9d:49:1e:9e:b5:19:83:f9:
a6:ae:02:b7:3a:b0:fa:11:32:f2:e7:e4:84:6f:26:
27:ba:88:76:ca:dc:ec:37:82:ac:c5:92:fb:2e:d9:
9e:60:1b:bf:9d:60:60:2a:2e:8c:ad:91:e3:48:a1:
67:20:38:6c:da:81:69:c3:8c:eb:0b:90:31:3d:08:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:44:2D:58:39:59:EF:16:C4:57:3B:EA:92:48:23:B0:9E:BD:5E:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3448f6b2-77fe-30a0-b7b6-893a8efe8325.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.8.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:98:c8:46:b1:34:e3:d3:67:e4:18:15:40:d6:22:49:2f:b9:
ea:20:90:7b:24:39:10:ee:df:61:79:e3:f4:bb:06:ba:24:62:
7b:07:18:67:70:f2:16:2f:9c:e6:a8:96:f0:ec:3b:34:db:69:
2f:dd:20:4c:5b:3f:72:2e:9e:2a:f0:40:1d:d1:14:f4:d6:8d:
79:d3:5d:34:3c:39:4f:ed:75:28:66:c4:13:08:b2:8e:0e:54:
e7:f3:fd:58:a4:99:87:3e:89:cc:ea:30:b9:6f:04:07:3b:42:
29:6c:30:00:0c:84:79:42:b1:24:5b:02:f1:0d:1b:0a:92:5b:
3e:86:42:30:ce:8b:f9:19:25:23:b4:99:34:d5:da:02:43:36:
07:cc:16:52:83:c4:dc:65:bc:60:d4:e6:dd:e8:1f:1c:33:dd:
4e:a0:d3:6e:7d:06:db:69:3d:81:2d:da:5e:d1:52:87:9b:14:
cd:9e:f6:f8:a9:4e:c2:03:f0:cb:4c:2e:fb:0c:03:99:65:dd:
be:7d:84:f6:9c:a6:b4:e7:a4:7e:d6:0d:a4:36:09:a8:ae:e0:
11:e0:92:76:f0:69:56:cd:8d:da:9d:d3:d5:94:39:f4:2d:bb:
2b:cb:8b:0c:9a:d0:32:6a:17:6c:ed:85:d3:13:98:bb:e4:b3:
81:ff:4b:46
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/BIUnO5QIeAvPZeQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAzMDEyMDAwMFoXDTIyMTIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
NzhjZTc2YzMtMmYyYS00NmIwLWE0OGYtNzA4YTYzY2Y5ZTdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZyAL90zucglNrVgDuHpXIROJhy6dI7IItUy
brYy6u2k/UsbFZ5QO0JkrvhoZAF38nDp7WSoGhpi+6Xmho/zVbKgmuQ4VIAaf799
AGOJ5Xa/4cgnug93U/Ir2tka+8mQ6aVKqELURlYsE1xEaWGDoMU4hPtJyp43QExm
RJVUDTMzqlTgQ2aBWbzckxzMgMwDTwGoX7cSwQjMDT5ND9dh5y9khTM3U2IbTdMw
fAaRj6+Mhmm/xezmJslbnUkenrUZg/mmrgK3OrD6ETLy5+SEbyYnuoh2ytzsN4Ks
xZL7LtmeYBu/nWBgKi6MrZHjSKFnIDhs2oFpw4zrC5AxPQj5+wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDNELVg5We8WxFc76pJII7CevV44MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzQ0OGY2YjItNzdmZS0z
MGEwLWI3YjYtODkzYThlZmU4MzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBiAgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAB5jIRrE049Nn5BgVQNYiSS+56iCQeyQ5EO7fYXnj9LsGuiRiewcYZ3Dy
Fi+c5qiW8Ow7NNtpL90gTFs/ci6eKvBAHdEU9NaNedNdNDw5T+11KGbEEwiyjg5U
5/P9WKSZhz6JzOowuW8EBztCKWwwAAyEeUKxJFsC8Q0bCpJbPoZCMM6L+RklI7SZ
NNXaAkM2B8wWUoPE3GW8YNTm3egfHDPdTqDTbn0G22k9gS3aXtFSh5sUzZ72+KlO
wgPwy0wu+wwDmWXdvn2E9pymtOekftYNpDYJqK7gEeCSdvBpVs2N2p3T1ZQ59C27
K8uLDJrQMmoXbO2F0xOYu+Szgf9LRg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:57 2025 by rpki-client