Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62863e32-351d-381e-ba0a-4d0429e9ca2f.roa
File: 62863e32-351d-381e-ba0a-4d0429e9ca2f.roa (raw, json)
Hash identifier: qlfSrkMech/REctkv/cxRsqvVa9nOuyol8pyJyaDPmo=
Subject key identifier: CD:B1:94:BE:02:FF:24:E9:22:0D:0A:BE:A6:C4:D4:DC:BA:94:4C:92
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C972A353A570F41B610736C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62863e32-351d-381e-ba0a-4d0429e9ca2f.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 138.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:2a:35:3a:57:0f:41:b6:10:73:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=283b8e60-e523-4baf-a747-36b155d9290b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:71:20:14:9c:e3:e7:8a:e0:f1:d4:33:ed:
57:1e:d3:5a:14:09:40:8c:33:73:cd:35:88:ea:d9:
b5:1f:b5:2b:0d:fb:7c:d0:8b:be:a7:61:b8:b3:10:
4e:83:a9:42:9d:7f:e6:4a:6b:74:69:b2:bf:83:ec:
d0:31:1d:cb:49:63:b1:df:ea:f1:0b:9b:34:bd:ff:
74:23:76:c7:65:9a:5a:19:5d:8f:9a:64:6f:88:3a:
c1:74:6b:cf:d3:4a:bb:51:29:e7:9c:46:a1:86:00:
3e:98:64:79:bd:18:49:02:8b:c6:d4:b7:9b:87:f3:
30:7a:24:64:f8:73:9e:69:2b:cf:79:d0:68:c8:9d:
43:bb:58:69:07:bf:5b:b7:06:16:29:26:86:54:99:
4d:fa:d5:c5:b1:83:32:20:8e:64:80:3a:57:b4:57:
0d:94:4f:e6:7c:9b:f1:c7:cf:ca:a8:c5:39:24:6c:
67:17:56:cd:32:01:c3:2d:37:a9:20:4d:66:e1:4c:
20:25:8c:78:ee:1e:ce:ee:24:0c:c1:9d:c2:63:da:
d3:77:d5:d8:ba:96:df:f7:f8:5e:e6:b5:cc:68:a8:
3f:0c:ec:3f:f5:8b:46:6a:b9:77:95:98:57:ca:68:
49:e7:53:90:ad:9f:16:63:50:0a:38:54:db:b7:7d:
43:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B1:94:BE:02:FF:24:E9:22:0D:0A:BE:A6:C4:D4:DC:BA:94:4C:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/62863e32-351d-381e-ba0a-4d0429e9ca2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
138.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:bc:32:d8:e4:4b:f4:89:1a:73:89:07:eb:61:13:d9:1a:7e:
72:3b:c2:dc:6b:80:7b:3d:f9:d2:8e:87:b2:d2:06:87:64:04:
af:2d:16:78:cc:78:25:17:88:46:27:a5:03:75:c7:d2:8a:65:
fd:5a:04:77:aa:6a:d5:7a:a6:6a:40:6a:dd:11:07:e5:16:0a:
ab:15:5c:68:3b:c8:08:c8:24:28:a3:34:54:1b:01:fb:39:0f:
8e:8f:37:df:1a:cf:da:77:c9:54:95:6a:9a:59:c7:01:ad:d2:
22:ab:b4:da:74:87:3d:c8:89:bf:cb:6b:26:1e:0b:96:e7:5b:
31:72:c3:c8:e5:4a:05:b2:0c:c0:57:71:22:32:1b:7a:c5:25:
89:b2:2c:e9:b5:b9:5d:f4:07:aa:e8:b0:cd:9e:5c:64:44:bc:
1a:a6:25:f2:0e:a2:87:b3:44:38:6b:45:67:9f:7c:47:0d:09:
75:8a:22:1d:f0:50:b7:a9:16:14:09:4c:7f:26:31:6b:a9:88:
a3:dc:d7:ba:fb:f8:0b:ab:53:ca:87:63:16:c4:ba:ae:99:ed:
50:3f:a2:f2:2d:2c:d6:fd:57:5a:67:98:91:24:55:9f:7d:df:
81:de:c9:6c:ed:c1:df:2a:b0:15:70:6d:4b:b2:db:66:01:d6:
ab:81:0d:c5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyXKjU6Vw9BthBzbEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDExNDA1MDAwMFoXDTIyMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
MjgzYjhlNjAtZTUyMy00YmFmLWE3NDctMzZiMTU1ZDkyOTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSVxIBSc4+eK4PHUM+1XHtNaFAlAjDNzzTWI
6tm1H7UrDft80Iu+p2G4sxBOg6lCnX/mSmt0abK/g+zQMR3LSWOx3+rxC5s0vf90
I3bHZZpaGV2PmmRviDrBdGvP00q7USnnnEahhgA+mGR5vRhJAovG1Lebh/MweiRk
+HOeaSvPedBoyJ1Du1hpB79btwYWKSaGVJlN+tXFsYMyII5kgDpXtFcNlE/mfJvx
x8/KqMU5JGxnF1bNMgHDLTepIE1m4UwgJYx47h7O7iQMwZ3CY9rTd9XYupbf9/he
5rXMaKg/DOw/9YtGarl3lZhXymhJ51OQrZ8WY1AKOFTbt31DJQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM2xlL4C/yTpIg0KvqbE1Ny6lEySMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjI4NjNlMzItMzUxZC0z
ODFlLWJhMGEtNGQwNDI5ZTljYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAivAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAr7wy2ORL9Ikac4kH62ET2Rp+cjvC3GuAez350o6HstIGh2QEry0WeMx4
JReIRielA3XH0opl/VoEd6pq1XqmakBq3REH5RYKqxVcaDvICMgkKKM0VBsB+zkP
jo833xrP2nfJVJVqmlnHAa3SIqu02nSHPciJv8trJh4LludbMXLDyOVKBbIMwFdx
IjIbesUlibIs6bW5XfQHquiwzZ5cZES8GqYl8g6ih7NEOGtFZ598Rw0JdYoiHfBQ
t6kWFAlMfyYxa6mIo9zXuvv4C6tTyodjFsS6rpntUD+i8i0s1v1XWmeYkSRVn33f
gd7JbO3B3yqwFXBtS7LbZgHWq4ENxQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:06 2025 by rpki-client