Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4742fd34-8ce7-382f-a5f6-a0090c5deddd.roa
File: 4742fd34-8ce7-382f-a5f6-a0090c5deddd.roa (raw, json)
Hash identifier: FJItpjK8Oyqwe5T6ZB7s8yR/RyOu8lI9mAcpjL7ecOg=
Subject key identifier: 9D:20:E8:5B:CC:63:45:4A:30:5E:2B:80:11:5F:27:F5:8F:88:FB:F3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE0CB7DC00A487DBD3E7DF800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4742fd34-8ce7-382f-a5f6-a0090c5deddd.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 136.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e0:cb:7d:c0:0a:48:7d:bd:3e:7d:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=b7acd43b-033c-4627-bb1e-389a04df0149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:9f:4b:b5:b7:07:89:32:bc:28:f2:c8:18:
20:76:91:e5:32:6e:07:bb:d0:a3:68:ea:40:0d:dc:
35:2a:8d:06:57:d5:2d:d0:a6:98:0d:00:5b:0e:1a:
21:2e:66:54:a7:91:ee:a6:32:fe:e4:3b:17:00:70:
51:0f:ba:5b:a0:ed:ea:56:a9:f4:ad:94:45:cc:e2:
b3:b8:fe:17:05:9c:df:c5:a8:95:1d:c5:c7:8c:bf:
02:0f:e2:ca:f5:02:18:71:fc:53:21:26:49:e7:22:
8a:e1:a7:9d:cc:de:be:d6:75:2f:32:17:d5:38:3a:
b6:2d:cc:67:4f:cd:b3:5f:ec:88:b0:21:88:9b:c2:
ac:bd:bd:05:83:8e:a5:a4:c2:2e:2d:c8:0b:95:9e:
9e:04:d5:ee:c9:3f:b1:cc:66:30:14:3e:3b:b3:93:
67:2a:36:31:80:4c:b8:48:91:a6:5a:65:79:fb:a5:
1c:79:3b:67:ef:a8:29:f2:08:2e:83:ae:95:1b:25:
4f:0c:0c:40:05:d3:42:d6:4d:40:ae:ae:d8:42:44:
75:a7:92:cb:6e:62:25:9f:02:db:9e:3b:d6:53:b0:
c8:e4:be:6b:8b:a9:20:eb:b5:5f:46:01:41:43:5a:
f2:c0:54:cb:60:64:64:c6:0d:4d:65:83:1f:5b:4b:
b1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:20:E8:5B:CC:63:45:4A:30:5E:2B:80:11:5F:27:F5:8F:88:FB:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4742fd34-8ce7-382f-a5f6-a0090c5deddd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:a0:64:04:79:72:02:30:e5:b7:86:34:78:a0:24:c6:a8:56:
5a:4c:b8:d4:29:3a:4c:d5:27:2c:a8:01:b0:42:19:56:25:40:
6e:f6:c8:02:f9:e4:2a:45:cd:31:04:28:61:bd:25:66:53:22:
b4:b8:ec:f1:f4:ce:f3:26:ce:dc:b1:d5:ff:c0:48:b7:70:a1:
bc:ea:fa:17:48:e4:ad:c1:30:84:a7:c1:ee:7b:06:a3:9f:6c:
eb:ac:ea:d1:dc:8a:c8:27:2e:bc:90:13:d9:ea:0a:04:19:16:
bc:02:0a:01:79:b2:98:08:14:d5:1b:54:5f:61:5a:6d:c9:50:
f4:68:33:0e:90:a1:bc:a4:f2:d9:8a:9c:40:f9:b7:f7:1a:6f:
17:09:d3:67:2e:ee:de:99:22:78:7d:19:5a:d4:be:a6:3e:af:
63:e2:b6:c4:0c:bc:38:0b:66:f4:3c:6d:06:0b:5b:7a:d8:9c:
80:2f:3c:3d:69:a0:e4:24:bd:4e:b5:b1:d2:ba:49:fd:78:fb:
57:67:cb:b1:0e:c1:14:86:96:18:aa:80:fe:1f:2b:e3:01:a0:
8c:18:6f:fb:f6:93:08:61:68:11:02:f9:fd:42:9f:fa:1c:d5:
97:27:b6:8a:91:39:e4:13:eb:25:a4:32:a7:d1:da:a0:46:9b:
5b:42:cb:5a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzgy33ACkh9vT59+AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIwOTA1MDAwMFoXDTIyMDMxNjA0MDAwMFowLzEtMCsGA1UEAxMk
YjdhY2Q0M2ItMDMzYy00NjI3LWJiMWUtMzg5YTA0ZGYwMTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijmfS7W3B4kyvCjyyBggdpHlMm4Hu9CjaOpA
Ddw1Ko0GV9Ut0KaYDQBbDhohLmZUp5HupjL+5DsXAHBRD7pboO3qVqn0rZRFzOKz
uP4XBZzfxaiVHcXHjL8CD+LK9QIYcfxTISZJ5yKK4aedzN6+1nUvMhfVODq2Lcxn
T82zX+yIsCGIm8Ksvb0Fg46lpMIuLcgLlZ6eBNXuyT+xzGYwFD47s5NnKjYxgEy4
SJGmWmV5+6UceTtn76gp8ggug66VGyVPDAxABdNC1k1Arq7YQkR1p5LLbmIlnwLb
njvWU7DI5L5ri6kg67VfRgFBQ1rywFTLYGRkxg1NZYMfW0uxFwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ0g6FvMY0VKMF4rgBFfJ/WPiPvzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDc0MmZkMzQtOGNlNy0z
ODJmLWE1ZjYtYTAwOTBjNWRlZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiBEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAU6BkBHlyAjDlt4Y0eKAkxqhWWky41Ck6TNUnLKgBsEIZViVAbvbIAvnk
KkXNMQQoYb0lZlMitLjs8fTO8ybO3LHV/8BIt3ChvOr6F0jkrcEwhKfB7nsGo59s
66zq0dyKyCcuvJAT2eoKBBkWvAIKAXmymAgU1RtUX2FabclQ9GgzDpChvKTy2Yqc
QPm39xpvFwnTZy7u3pkieH0ZWtS+pj6vY+K2xAy8OAtm9DxtBgtbeticgC88PWmg
5CS9TrWx0rpJ/Xj7V2fLsQ7BFIaWGKqA/h8r4wGgjBhv+/aTCGFoEQL5/UKf+hzV
lye2ipE55BPrJaQyp9HaoEabW0LLWg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:51:32 2025 by rpki-client