Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97bd117a-3dba-3bb4-81d2-d89159670f9c.roa
File: 97bd117a-3dba-3bb4-81d2-d89159670f9c.roa (raw, json)
Hash identifier: 14A7oH4PDoSbhVsX2vWJwDgUNIw8KZazXhZ7WQJE2Ns=
Subject key identifier: E3:82:17:BC:B1:85:EB:55:EA:46:97:61:CD:29:48:94:A6:D2:0E:3D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840166FE5D2CB533CBB845B2F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97bd117a-3dba-3bb4-81d2-d89159670f9c.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:6f:e5:d2:cb:53:3c:bb:84:5b:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=048534cf-ff03-4464-8883-6ccd1544d0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ed:ee:68:df:7d:57:ab:cb:fe:ed:3e:fc:8b:
f5:00:f0:1b:ed:81:3b:30:0d:db:e1:a1:64:90:65:
95:6a:e8:b7:8e:1c:14:62:35:3c:df:0c:78:66:2a:
8a:c8:9e:36:40:09:e9:66:bf:4a:27:57:81:7a:24:
ed:23:40:74:15:07:f3:1e:d3:d1:6a:6b:ee:16:e7:
41:f1:fd:07:37:08:3e:94:40:59:3f:a1:67:4b:4e:
db:a2:b1:69:bc:59:49:2b:82:d0:a3:45:be:6e:13:
2b:08:df:80:f1:a9:e5:b3:c0:e9:6f:38:f2:bb:30:
fd:ce:5c:79:55:19:43:18:f0:9f:56:c1:79:03:ae:
29:ab:56:5d:83:bc:fb:1f:72:84:21:e9:cb:bf:84:
94:9c:a7:df:fc:2e:09:9c:cb:66:56:22:65:75:b8:
fa:0f:5f:ec:45:68:81:b8:29:26:ab:4c:b0:1a:90:
28:57:b6:79:44:e3:c6:3d:fd:54:0c:d3:d9:ce:e9:
9b:a0:44:ed:d5:1c:c1:16:31:32:ca:a9:ad:5f:12:
c1:73:81:e0:c1:14:ff:f5:dd:9d:91:fa:8f:ee:70:
a4:69:ff:b6:51:05:33:94:06:ce:ba:88:79:84:88:
f2:31:64:cc:60:cd:06:8b:03:b9:6a:38:ac:18:4d:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:17:BC:B1:85:EB:55:EA:46:97:61:CD:29:48:94:A6:D2:0E:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/97bd117a-3dba-3bb4-81d2-d89159670f9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:2a:46:30:40:f1:3b:f0:a1:8a:3d:06:6f:e8:c1:36:0d:4e:
04:1c:4d:5f:0d:c8:0c:5c:03:bc:67:32:a6:c0:6f:d6:ba:42:
77:c5:9a:88:b1:a8:e1:3f:c0:61:cd:26:6f:02:d8:b9:9c:20:
8c:97:98:c2:45:7f:d6:37:a0:6c:e0:06:55:13:ac:3b:bd:d1:
23:3a:fb:a3:0b:39:c3:c2:0b:40:de:88:7b:87:10:09:6f:42:
46:28:31:9c:fe:c2:68:4c:93:c6:7d:b3:a2:63:cc:9f:66:a1:
9b:f6:e2:e4:de:1e:84:35:fe:e5:07:f0:26:61:6d:5e:c7:9a:
b8:7d:48:eb:f5:b5:52:c7:09:2a:68:5f:b4:35:ba:e3:03:7f:
c9:9b:fb:ac:af:20:92:f4:7b:46:c8:e5:b2:d1:8a:11:a8:04:
8a:ce:db:ef:7b:2d:45:04:cf:f4:c8:85:ba:68:a9:fe:c7:94:
f0:00:2a:f6:a4:be:06:44:fb:7c:26:26:3b:45:b0:49:e2:15:
2a:4d:47:42:ff:e3:dc:fc:fe:0c:0c:36:23:7d:fd:d1:45:c0:
76:38:c7:53:a6:01:02:1f:ae:82:ad:b8:55:1a:87:cd:cb:4f:
05:aa:ce:39:e7:8a:cd:3f:d5:f9:6a:24:de:95:0c:49:75:0a:
2b:fb:28:52
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAWb+XSy1M8u4RbL4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEzMDEyMDAwMFoXDTIzMDEwNTA1MDAwMFowLzEtMCsGA1UEAxMk
MDQ4NTM0Y2YtZmYwMy00NDY0LTg4ODMtNmNjZDE1NDRkMGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju3uaN99V6vL/u0+/Iv1APAb7YE7MA3b4aFk
kGWVaui3jhwUYjU83wx4ZiqKyJ42QAnpZr9KJ1eBeiTtI0B0FQfzHtPRamvuFudB
8f0HNwg+lEBZP6FnS07borFpvFlJK4LQo0W+bhMrCN+A8anls8DpbzjyuzD9zlx5
VRlDGPCfVsF5A64pq1Zdg7z7H3KEIenLv4SUnKff/C4JnMtmViJldbj6D1/sRWiB
uCkmq0ywGpAoV7Z5ROPGPf1UDNPZzumboETt1RzBFjEyyqmtXxLBc4HgwRT/9d2d
kfqP7nCkaf+2UQUzlAbOuoh5hIjyMWTMYM0GiwO5ajisGE3e3QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOOCF7yxhetV6kaXYc0pSJSm0g49MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTdiZDExN2EtM2RiYS0z
YmI0LTgxZDItZDg5MTU5NjcwZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXypGMEDxO/Chij0Gb+jBNg1OBBxNXw3IDFwDvGcypsBv1rpCd8WaiLGo
4T/AYc0mbwLYuZwgjJeYwkV/1jegbOAGVROsO73RIzr7ows5w8ILQN6Ie4cQCW9C
RigxnP7CaEyTxn2zomPMn2ahm/bi5N4ehDX+5QfwJmFtXseauH1I6/W1UscJKmhf
tDW64wN/yZv7rK8gkvR7RsjlstGKEagEis7b73stRQTP9MiFumip/seU8AAq9qS+
BkT7fCYmO0WwSeIVKk1HQv/j3Pz+DAw2I3390UXAdjjHU6YBAh+ugq24VRqHzctP
BarOOeeKzT/V+Wok3pUMSXUKK/soUg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:05 2025 by rpki-client