Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ab6713e-925c-3e35-aa45-1620d036a4c5.roa
File: 4ab6713e-925c-3e35-aa45-1620d036a4c5.roa (raw, json)
Hash identifier: szz84QO+jAvcqfLamVwkYnKnO23l5urvder5Ev09HdQ=
Subject key identifier: 6F:2C:C8:22:25:DF:2A:9E:0E:FE:FE:48:E0:C5:39:A7:72:7A:8C:08
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403E8A4195713D1600287C9400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ab6713e-925c-3e35-aa45-1620d036a4c5.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 136.18.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:8a:41:95:71:3d:16:00:28:7c:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=9180a1d1-a175-4189-af97-bf95b39f2bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:60:9f:9a:97:6e:d2:f8:52:64:24:a5:6d:8c:
04:97:87:ba:18:0f:31:1d:49:cc:ae:82:2b:78:71:
dc:c2:e5:c1:5c:9a:c4:21:7f:ed:48:6a:2a:87:19:
52:04:1f:4b:df:07:2b:40:92:9b:cc:89:0a:05:7e:
b1:74:bd:dd:6c:20:94:28:59:52:61:66:ca:9f:5d:
57:79:41:6b:a7:f8:db:b9:94:2c:58:4a:7e:7f:38:
30:62:85:fa:d0:3d:df:71:1a:04:ca:9f:4d:b1:5e:
c7:0d:08:c7:b6:b7:65:26:3d:07:a7:c6:a8:1c:69:
b1:43:47:05:0b:8c:fb:12:89:07:36:e4:7f:17:64:
4e:17:1c:68:30:81:78:da:e2:fb:04:e0:ce:49:3d:
00:d2:6d:77:c1:be:12:bd:35:24:52:3d:9b:37:59:
ca:d1:63:64:5d:c3:0c:84:30:b4:5b:38:5e:69:a5:
e9:1b:56:37:3e:fa:d0:66:60:61:28:c4:a9:d7:2b:
6c:58:70:fe:ee:99:22:0f:17:47:a5:4d:bb:c6:6d:
35:34:7c:2b:e9:4b:24:b9:8d:08:42:e3:8b:d0:bd:
78:b1:cc:10:4a:d6:02:bd:ff:59:83:6d:ce:18:43:
95:d1:8e:51:7e:a4:a4:5e:cf:4e:e2:b6:19:87:8b:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:C8:22:25:DF:2A:9E:0E:FE:FE:48:E0:C5:39:A7:72:7A:8C:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4ab6713e-925c-3e35-aa45-1620d036a4c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:8f:bc:ff:68:66:7f:13:5f:45:be:d8:5b:05:c5:c4:eb:76:
a1:42:59:18:a6:44:cd:7c:0f:09:6a:33:4d:03:d3:01:bb:a5:
84:89:ad:c5:2b:cf:b7:25:46:f5:0c:97:1c:94:1e:c4:78:99:
17:1b:53:13:50:5f:50:21:0d:ed:34:2a:aa:5a:12:f3:db:c8:
39:f0:6a:06:e9:c1:c3:15:7d:cd:e3:f6:bf:bd:72:d0:3e:89:
75:45:5e:55:3c:b9:9c:09:4e:c8:9a:41:92:2b:fa:0a:57:ce:
23:6a:e7:31:3a:ec:b7:02:f4:3f:fc:1e:f9:e7:88:9a:b7:e6:
45:95:3d:49:ce:38:df:1d:57:45:e9:c2:de:cd:39:37:8a:e1:
9f:04:0f:27:d7:bf:f1:cb:08:5a:1e:f0:93:c5:e2:ae:99:0e:
f2:f8:0d:17:2c:e6:cc:52:81:ba:14:d2:c0:7f:80:f4:38:42:
3f:41:33:78:86:84:b3:ce:fb:47:67:f2:8d:d9:60:f6:66:fc:
17:74:49:7c:a9:bc:2d:4c:0d:62:ab:5f:30:18:e1:f7:45:86:
d0:5a:a3:89:c8:51:fb:91:ef:fc:82:41:58:d3:1f:8f:9b:8a:
21:50:ff:58:54:93:a8:cb:bd:79:be:b1:35:5f:19:38:82:b1:
a3:c2:8f:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEA+ikGVcT0WACh8lAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
OTE4MGExZDEtYTE3NS00MTg5LWFmOTctYmY5NWIzOWYyYmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWCfmpdu0vhSZCSlbYwEl4e6GA8xHUnMroIr
eHHcwuXBXJrEIX/tSGoqhxlSBB9L3wcrQJKbzIkKBX6xdL3dbCCUKFlSYWbKn11X
eUFrp/jbuZQsWEp+fzgwYoX60D3fcRoEyp9NsV7HDQjHtrdlJj0Hp8aoHGmxQ0cF
C4z7EokHNuR/F2ROFxxoMIF42uL7BODOST0A0m13wb4SvTUkUj2bN1nK0WNkXcMM
hDC0WzheaaXpG1Y3PvrQZmBhKMSp1ytsWHD+7pkiDxdHpU27xm01NHwr6UskuY0I
QuOL0L14scwQStYCvf9Zg23OGEOV0Y5RfqSkXs9O4rYZh4tJxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG8syCIl3yqeDv7+SODFOadyeowIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGFiNjcxM2UtOTI1Yy0z
ZTM1LWFhNDUtMTYyMGQwMzZhNGM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiBIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACePvP9oZn8TX0W+2FsFxcTrdqFCWRimRM18DwlqM00D0wG7pYSJrcUr
z7clRvUMlxyUHsR4mRcbUxNQX1AhDe00KqpaEvPbyDnwagbpwcMVfc3j9r+9ctA+
iXVFXlU8uZwJTsiaQZIr+gpXziNq5zE67LcC9D/8HvnniJq35kWVPUnOON8dV0Xp
wt7NOTeK4Z8EDyfXv/HLCFoe8JPF4q6ZDvL4DRcs5sxSgboU0sB/gPQ4Qj9BM3iG
hLPO+0dn8o3ZYPZm/Bd0SXypvC1MDWKrXzAY4fdFhtBao4nIUfuR7/yCQVjTH4+b
iiFQ/1hUk6jLvXm+sTVfGTiCsaPCj6Y=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:53:13 2025 by rpki-client