Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95c13fcd-05e7-321f-9476-4a544de90fa0.roa
File: 95c13fcd-05e7-321f-9476-4a544de90fa0.roa (raw, json)
Hash identifier: UFrMWaGS5QbZcNVDPQhK4szXMdqCeuE+EqC45WRi3ls=
Subject key identifier: F8:D8:70:B9:DC:31:3D:23:CE:61:C9:4C:2A:63:24:3C:F0:A5:59:19
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404743A8464EC0F7F716305F38
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95c13fcd-05e7-321f-9476-4a544de90fa0.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 138.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:47:43:a8:46:4e:c0:f7:f7:16:30:5f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=f82db547-5578-439d-8b12-acdf68480868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:24:2c:85:1f:cc:92:6b:01:1e:ea:17:d9:90:
40:fd:e9:d5:c3:84:6e:38:7c:61:f3:0a:6d:88:b9:
88:4d:12:8c:84:81:c5:e5:52:89:0d:6d:93:16:00:
fa:95:26:bb:f7:92:eb:30:a9:6e:74:25:3c:f0:f6:
70:de:c9:7a:f7:b8:3a:76:5c:35:57:65:85:5f:2a:
5b:a7:03:d0:f4:c2:fe:63:41:b4:8f:32:59:e8:cf:
4e:4e:c0:87:49:6b:d1:9e:f7:a4:ed:5e:4e:e4:b7:
4d:d4:c0:b1:3a:9f:9e:cf:92:f9:2a:94:30:fa:62:
47:77:e5:ef:48:ef:53:89:d3:9a:d9:ae:c8:e2:86:
ab:be:c7:de:79:73:bf:6c:28:b6:ef:83:fe:81:6c:
69:ce:65:e3:54:8c:c4:46:2b:eb:e6:83:16:99:cd:
de:af:ea:12:03:f1:03:b8:21:f6:8c:08:dc:8f:2c:
55:3c:40:6f:a3:68:6c:b1:73:b2:4d:18:e9:a0:97:
50:6d:70:68:32:49:98:f2:e2:86:01:04:e7:31:ca:
bb:85:5e:fb:85:bf:14:51:90:c8:ae:ae:bc:61:7c:
54:01:30:3f:05:06:b0:2e:eb:73:51:26:76:09:88:
27:9b:f2:b4:d5:bb:1c:e5:b4:07:98:e4:d4:e3:4f:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D8:70:B9:DC:31:3D:23:CE:61:C9:4C:2A:63:24:3C:F0:A5:59:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/95c13fcd-05e7-321f-9476-4a544de90fa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
138.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:16:db:a6:b5:d4:b0:f5:07:bf:e5:bf:95:2d:bb:0d:1a:0d:
77:14:67:d2:1c:63:3e:bc:3d:7d:2a:c2:7d:d0:55:f7:7f:4e:
81:67:d3:42:ed:9a:ca:11:d6:58:5e:3f:14:fe:3c:0c:aa:52:
ca:dc:d1:aa:e7:ba:c2:85:c5:a0:08:c6:b5:5d:65:dd:20:22:
12:f9:e7:7c:5c:55:38:08:dc:b6:8b:e6:98:1b:b7:47:c7:2b:
72:e4:74:bd:59:1a:bb:fd:c2:fa:17:56:c6:5b:4c:93:5e:db:
d7:a4:2f:09:94:a5:10:fc:a9:a4:d8:19:f3:f7:61:64:db:b9:
f8:f7:00:80:45:86:25:f4:6d:15:47:d0:40:77:37:93:77:4d:
72:b0:6e:20:45:8b:dd:c1:8a:6b:d4:c5:ba:ff:ce:14:13:b2:
ca:68:7c:f8:4d:21:3e:8b:01:87:23:39:3c:0b:c0:82:1f:c9:
4c:c1:41:12:02:0a:38:13:b6:12:be:46:85:15:ee:57:de:c2:
c9:45:ed:49:81:dc:97:f5:d8:ed:67:02:5d:bd:15:77:fa:63:
bc:9c:d2:08:99:64:ef:9a:60:f9:0a:4a:3f:c2:af:02:46:fb:
82:b2:6c:a3:0b:7b:a0:ba:9e:33:09:72:bf:c4:3a:f9:51:d3:
b4:88:59:b0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBHQ6hGTsD39xYwXzgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNzEyMDAwMFoXDTIzMDEyMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZjgyZGI1NDctNTU3OC00MzlkLThiMTItYWNkZjY4NDgwODY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCQshR/MkmsBHuoX2ZBA/enVw4RuOHxh8wpt
iLmITRKMhIHF5VKJDW2TFgD6lSa795LrMKludCU88PZw3sl697g6dlw1V2WFXypb
pwPQ9ML+Y0G0jzJZ6M9OTsCHSWvRnvek7V5O5LdN1MCxOp+ez5L5KpQw+mJHd+Xv
SO9TidOa2a7I4oarvsfeeXO/bCi274P+gWxpzmXjVIzERivr5oMWmc3er+oSA/ED
uCH2jAjcjyxVPEBvo2hssXOyTRjpoJdQbXBoMkmY8uKGAQTnMcq7hV77hb8UUZDI
rq68YXxUATA/BQawLutzUSZ2CYgnm/K01bsc5bQHmOTU408VoQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPjYcLncMT0jzmHJTCpjJDzwpVkZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTVjMTNmY2QtMDVlNy0z
MjFmLTk0NzYtNGE1NDRkZTkwZmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAivAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAChbbprXUsPUHv+W/lS27DRoNdxRn0hxjPrw9fSrCfdBV939OgWfTQu2a
yhHWWF4/FP48DKpSytzRque6woXFoAjGtV1l3SAiEvnnfFxVOAjctovmmBu3R8cr
cuR0vVkau/3C+hdWxltMk17b16QvCZSlEPyppNgZ8/dhZNu5+PcAgEWGJfRtFUfQ
QHc3k3dNcrBuIEWL3cGKa9TFuv/OFBOyymh8+E0hPosBhyM5PAvAgh/JTMFBEgIK
OBO2Er5GhRXuV97CyUXtSYHcl/XY7WcCXb0Vd/pjvJzSCJlk75pg+QpKP8KvAkb7
grJsowt7oLqeMwlyv8Q6+VHTtIhZsA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:39 2025 by rpki-client