Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38d9d424-26d1-3879-b5a0-8e68935671ac.roa
File: 38d9d424-26d1-3879-b5a0-8e68935671ac.roa (raw, json)
Hash identifier: xd851ciROVe4DkXc1cNFIGNuQyWO2K+TH91StjjoKfg=
Subject key identifier: C8:7E:02:B1:3B:89:38:00:04:0A:A7:79:EE:BA:BF:88:FA:29:E4:62
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF94725A7F6D895A5B4CBB7A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38d9d424-26d1-3879-b5a0-8e68935671ac.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 70.236.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:47:25:a7:f6:d8:95:a5:b4:cb:b7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=7e1506fc-72a6-4550-96d9-240dbdccac37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:74:5b:59:3b:67:ad:ca:a6:aa:e2:92:68:
e5:f0:21:ae:50:f4:82:90:18:1c:c2:3a:2b:de:bf:
a2:a2:3c:c0:4a:3d:90:c7:47:4d:c4:90:ad:f7:7a:
3f:88:04:b2:30:da:ba:20:74:4b:c3:2c:36:f3:af:
ed:47:a2:93:73:3b:4f:55:4b:eb:f4:cf:52:0e:08:
7b:1e:ad:e1:60:0f:5a:3a:11:73:ed:b2:fb:67:de:
72:0e:de:7e:ff:74:46:78:f2:43:6a:51:fb:6f:41:
88:c0:d9:41:61:6d:7d:e0:57:50:ab:5b:d3:98:89:
f5:26:da:97:88:b3:10:68:5d:64:ef:a4:82:e9:61:
ac:47:4b:66:0b:16:b4:38:95:92:ad:c8:cd:47:e7:
4b:e3:0f:53:f7:fe:90:c7:50:00:8c:ad:56:67:16:
e9:b7:52:f8:86:db:73:37:19:58:c8:0b:74:c3:05:
7d:b9:10:d1:99:f1:9b:48:d4:66:45:8a:b1:28:ef:
32:58:a8:be:28:46:ee:0d:2c:a4:49:35:4e:40:fc:
6b:72:e4:d2:6e:65:02:80:12:88:b9:42:33:fb:9c:
27:a1:65:2d:b2:47:61:0c:b8:27:25:13:ba:3b:9d:
10:34:0a:f0:71:8c:a5:74:c5:87:65:8f:d9:b0:54:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7E:02:B1:3B:89:38:00:04:0A:A7:79:EE:BA:BF:88:FA:29:E4:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/38d9d424-26d1-3879-b5a0-8e68935671ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
70.236.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:4a:e1:0c:96:f3:79:51:b3:b0:b7:91:fc:ac:6f:b6:9c:f1:
db:18:d2:11:ec:2f:25:f7:16:2d:3e:58:69:4a:1b:1e:33:73:
b3:b1:d6:41:b2:f6:86:fd:85:d1:12:e0:a7:46:81:33:8f:1d:
f6:67:cd:00:ad:5d:57:10:39:19:5d:6f:5e:62:a1:87:b0:90:
33:11:09:6c:08:4c:1f:26:5d:6c:60:fd:cc:ac:5b:6c:cd:82:
44:e6:f4:f9:c0:5e:39:40:92:be:a3:f1:ae:f8:b3:39:e3:f0:
c1:aa:35:e4:aa:83:d8:95:41:81:74:07:af:96:43:92:b7:0d:
b7:06:9f:34:b9:70:0b:88:85:b3:33:b0:51:04:e4:49:92:7e:
42:7a:61:03:dd:64:94:05:25:d0:86:5a:e2:48:66:43:c2:62:
55:8b:db:36:8f:3a:9d:0a:aa:76:6c:c3:19:b4:71:b3:c9:a0:
f1:f0:87:87:39:83:36:ed:ee:4c:3d:4c:1e:32:f0:c1:06:f4:
05:72:fc:7f:e5:1f:75:99:c2:82:d1:96:7c:ee:7d:41:b4:4f:
17:63:a3:7a:4b:5e:62:a0:e1:e7:25:a3:7a:5b:c3:24:52:73:
ed:03:63:a9:de:d9:39:ab:99:1a:b2:23:df:a9:1d:05:e0:2d:
96:e9:d1:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD35RyWn9tiVpbTLt6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUyMDEyMDAwMFoXDTIyMDYyNTA0MDAwMFowLzEtMCsGA1UEAxMk
N2UxNTA2ZmMtNzJhNi00NTUwLTk2ZDktMjQwZGJkY2NhYzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yl0W1k7Z63Kpqrikmjl8CGuUPSCkBgcwjor
3r+iojzASj2Qx0dNxJCt93o/iASyMNq6IHRLwyw286/tR6KTcztPVUvr9M9SDgh7
Hq3hYA9aOhFz7bL7Z95yDt5+/3RGePJDalH7b0GIwNlBYW194FdQq1vTmIn1JtqX
iLMQaF1k76SC6WGsR0tmCxa0OJWSrcjNR+dL4w9T9/6Qx1AAjK1WZxbpt1L4httz
NxlYyAt0wwV9uRDRmfGbSNRmRYqxKO8yWKi+KEbuDSykSTVOQPxrcuTSbmUCgBKI
uUIz+5wnoWUtskdhDLgnJRO6O50QNArwcYyldMWHZY/ZsFQ80wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMh+ArE7iTgABAqnee66v4j6KeRiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzhkOWQ0MjQtMjZkMS0z
ODc5LWI1YTAtOGU2ODkzNTY3MWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRuwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFK4QyW83lRs7C3kfysb7ac8dsY0hHsLyX3Fi0+WGlKGx4zc7Ox1kGy
9ob9hdES4KdGgTOPHfZnzQCtXVcQORldb15ioYewkDMRCWwITB8mXWxg/cysW2zN
gkTm9PnAXjlAkr6j8a74sznj8MGqNeSqg9iVQYF0B6+WQ5K3DbcGnzS5cAuIhbMz
sFEE5EmSfkJ6YQPdZJQFJdCGWuJIZkPCYlWL2zaPOp0KqnZswxm0cbPJoPHwh4c5
gzbt7kw9TB4y8MEG9AVy/H/lH3WZwoLRlnzufUG0Txdjo3pLXmKg4eclo3pbwyRS
c+0DY6ne2TmrmRqyI9+pHQXgLZbp0Rc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:33 2025 by rpki-client