Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38a90cf7-bec1-38a2-b488-0c248533c704.roa
File: 38a90cf7-bec1-38a2-b488-0c248533c704.roa (raw, json)
Hash identifier: Gbq/7JwOio+X98m2v5n48ob+a1y1G+wL7UEcrBIf6xE=
Subject key identifier: 24:55:DE:69:61:DC:64:64:00:17:AD:05:3B:6D:6B:9D:D1:AB:09:6B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E07E7BEC64E20A768351E7080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38a90cf7-bec1-38a2-b488-0c248533c704.roa
Signing time: Wed 25 May 2022 12:00:00 +0000
ROA not before: Wed 25 May 2022 12:00:00 +0000
ROA not after: Thu 30 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 157.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:07:e7:be:c6:4e:20:a7:68:35:1e:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 25 12:00:00 2022 GMT
Not After : Jun 30 04:00:00 2022 GMT
Subject: CN=21d49acf-da65-44e0-b226-545224953c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:6d:60:b8:74:bc:a9:6a:5a:a9:19:95:84:
f4:32:7c:68:41:f7:8a:61:42:d7:01:c4:45:75:7b:
41:14:49:74:45:bb:2f:69:1e:29:0c:d4:27:d7:18:
c8:6b:d0:d5:77:99:2d:7e:2d:b1:f3:05:8a:4a:0a:
a8:dc:5e:22:de:45:67:7c:90:5c:fe:ca:2d:2c:5b:
a6:34:5f:51:8e:3d:f2:44:07:6b:7a:5c:de:55:62:
43:9b:cc:f4:d4:32:c5:9d:c7:8f:d4:3f:f5:17:3b:
73:62:47:48:40:18:c0:24:77:eb:12:ce:14:d3:42:
93:0b:c7:01:34:a2:02:0e:0d:c4:4d:d3:4d:c7:b7:
84:79:1d:10:8f:e5:af:8a:56:b7:5e:7e:c7:ff:11:
1e:f1:00:2b:4b:8b:a3:58:d5:56:85:0f:0e:00:2f:
f0:6e:63:e2:01:11:53:4b:6a:cf:eb:96:d6:07:59:
30:24:64:90:37:dc:f5:29:8a:80:9b:c4:51:0f:74:
43:63:ab:05:6f:7e:45:76:39:02:f6:33:b7:9f:94:
75:30:38:e7:20:53:11:ae:7f:bb:f1:7b:ea:c9:fc:
cb:6d:1f:00:70:b1:52:7e:3b:15:76:02:67:d7:a1:
26:18:ee:60:37:79:db:1a:33:0b:dd:df:14:c5:d1:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:55:DE:69:61:DC:64:64:00:17:AD:05:3B:6D:6B:9D:D1:AB:09:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38a90cf7-bec1-38a2-b488-0c248533c704.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
157.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:b0:e2:73:49:70:5e:34:f1:a6:f0:43:e3:37:ae:54:3c:2f:
62:e8:f2:93:e4:2e:38:27:ba:27:52:88:72:dc:b7:13:e0:d9:
3c:de:b3:72:a0:87:f8:0b:3b:f5:6d:fd:e9:da:86:88:9d:c6:
1a:ed:eb:93:4f:d9:cb:44:32:51:a0:ec:e9:f6:50:b8:0e:79:
4c:5b:2a:59:52:95:6e:78:91:33:f1:32:54:e4:73:bb:74:e0:
de:e5:47:69:b5:d7:72:b4:bf:3e:28:13:82:ee:12:c7:91:76:
0c:96:66:ac:e8:a2:24:48:3a:41:47:28:ab:d5:b2:35:00:1b:
80:30:1f:ad:19:7f:df:32:52:23:43:15:28:ce:69:4c:4b:a5:
6a:ae:fc:3b:5e:3f:5d:0c:1e:bd:ee:61:dc:44:9f:69:17:1f:
17:a5:f3:e1:58:cc:d6:c7:a6:f1:12:bf:7c:11:e1:83:98:7c:
e3:99:6a:22:29:4f:65:cb:00:08:de:5b:87:ee:36:b1:0e:b1:
7b:67:64:4e:81:86:0d:27:ab:57:6e:55:b6:65:a8:68:38:65:
0c:6e:ac:5d:36:78:2b:9e:59:67:c6:8b:d5:2e:61:05:54:6b:
64:74:7a:6a:ed:31:c4:d0:e5:1e:d7:43:6f:cb:b0:59:26:df:
50:e1:fd:18
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4H577GTiCnaDUecIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUyNTEyMDAwMFoXDTIyMDYzMDA0MDAwMFowLzEtMCsGA1UEAxMk
MjFkNDlhY2YtZGE2NS00NGUwLWIyMjYtNTQ1MjI0OTUzYzUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohZtYLh0vKlqWqkZlYT0MnxoQfeKYULXAcRF
dXtBFEl0RbsvaR4pDNQn1xjIa9DVd5ktfi2x8wWKSgqo3F4i3kVnfJBc/sotLFum
NF9Rjj3yRAdrelzeVWJDm8z01DLFnceP1D/1FztzYkdIQBjAJHfrEs4U00KTC8cB
NKICDg3ETdNNx7eEeR0Qj+Wvila3Xn7H/xEe8QArS4ujWNVWhQ8OAC/wbmPiARFT
S2rP65bWB1kwJGSQN9z1KYqAm8RRD3RDY6sFb35FdjkC9jO3n5R1MDjnIFMRrn+7
8XvqyfzLbR8AcLFSfjsVdgJn16EmGO5gN3nbGjML3d8UxdEfQQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCRV3mlh3GRkABetBTtta53RqwlrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzhhOTBjZjctYmVjMS0z
OGEyLWI0ODgtMGMyNDg1MzNjNzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnZgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYbDic0lwXjTxpvBD4zeuVDwvYujyk+QuOCe6J1KIcty3E+DZPN6zcqCH
+As79W396dqGiJ3GGu3rk0/Zy0QyUaDs6fZQuA55TFsqWVKVbniRM/EyVORzu3Tg
3uVHabXXcrS/PigTgu4Sx5F2DJZmrOiiJEg6QUcoq9WyNQAbgDAfrRl/3zJSI0MV
KM5pTEulaq78O14/XQweve5h3ESfaRcfF6Xz4VjM1sem8RK/fBHhg5h845lqIilP
ZcsACN5bh+42sQ6xe2dkToGGDSerV25VtmWoaDhlDG6sXTZ4K55ZZ8aL1S5hBVRr
ZHR6au0xxNDlHtdDb8uwWSbfUOH9GA==
-----END CERTIFICATE-----
Generated at Thu Jul 10 04:35:59 2025 by rpki-client