Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a85946f6-3d47-3bcc-98a1-af9520cd09f0.roa
File: a85946f6-3d47-3bcc-98a1-af9520cd09f0.roa (raw, json)
Hash identifier: ArEjhcgufmYyhcEaiQvMoCg9AKAJKDb4x9NNIQcn4kI=
Subject key identifier: 28:F9:29:5F:E8:4F:62:56:F5:AE:14:EC:A6:73:D5:ED:6E:76:5E:53
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F39F30713D94FD21A01965280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a85946f6-3d47-3bcc-98a1-af9520cd09f0.roa
Signing time: Mon 12 Sep 2022 12:00:00 +0000
ROA not before: Mon 12 Sep 2022 12:00:00 +0000
ROA not after: Tue 18 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 135.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:39:f3:07:13:d9:4f:d2:1a:01:96:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 12 12:00:00 2022 GMT
Not After : Oct 18 04:00:00 2022 GMT
Subject: CN=01dd5ac0-e6a3-4ce0-b57c-bc41a5435a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3d:c4:ca:49:fe:ca:50:59:5b:c7:2b:76:ae:
c6:19:12:f3:ed:c6:3a:3d:db:fa:2d:c5:40:9b:40:
b0:7c:b0:ef:e9:b5:b4:25:03:d8:79:47:e4:3e:bb:
c5:0c:1e:9a:71:5d:ae:88:4e:81:24:0a:27:f1:00:
af:03:4f:4e:e6:24:7c:cc:35:4b:55:c7:3d:55:13:
59:e8:16:74:f1:56:c0:ad:2a:4f:ba:be:37:57:52:
55:6a:94:91:e0:80:a9:0a:78:6e:e2:76:2d:a5:97:
79:9d:2a:a1:4d:5e:54:ad:c1:a2:7e:7d:ff:11:ce:
46:00:e5:36:de:ef:f3:90:22:56:19:88:88:63:46:
08:6d:8b:e8:3b:ee:58:53:40:dd:d4:1c:f6:86:4a:
2d:55:96:d0:fb:6c:8f:21:3a:4d:5b:16:d9:bf:81:
25:43:cf:95:68:3b:ae:da:ba:ac:d4:16:81:28:a0:
b7:5b:0d:7a:8c:8d:f8:eb:13:7f:01:23:f1:52:ab:
9c:87:1e:ef:00:e4:1f:e3:d7:86:74:6e:38:db:c1:
9a:37:19:7a:39:a4:52:b0:39:e9:71:c1:d6:f8:28:
ce:e6:fb:4e:b9:47:4b:cf:ad:16:cc:81:0e:63:be:
9a:0a:74:49:ae:62:3d:f3:60:db:53:ae:f3:85:8b:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F9:29:5F:E8:4F:62:56:F5:AE:14:EC:A6:73:D5:ED:6E:76:5E:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a85946f6-3d47-3bcc-98a1-af9520cd09f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
135.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:bf:b2:1a:4c:57:e4:5b:83:d1:2a:94:1f:a4:22:c7:71:27:
da:e1:4c:75:fa:8d:08:d9:f5:3e:95:df:cf:b9:bd:24:7b:7a:
bc:fc:2c:37:b9:76:03:1a:24:33:72:50:72:ef:97:3c:37:3a:
99:c6:48:ce:34:e6:74:8d:12:b4:f1:3a:96:de:5e:94:f1:0c:
a7:8d:52:0f:20:e7:6e:48:06:13:87:a8:ac:d0:8d:83:65:92:
de:79:5f:a8:58:09:8c:ce:b4:cb:20:ca:ac:2d:41:4a:a8:63:
ba:9c:da:b9:72:6e:d0:a8:fc:de:db:87:bb:6e:9f:c3:17:3c:
0a:bb:1d:d6:8e:80:65:85:6e:a9:ce:f0:4d:92:40:20:6f:fa:
b0:b5:57:d9:9c:52:e9:a7:83:ce:fd:01:42:e6:fc:c5:bf:c2:
5b:b1:37:1b:4d:4f:e1:c5:ac:bb:f4:bc:bc:4c:d4:be:85:d7:
7c:43:09:be:f5:a7:87:70:d5:85:8d:44:25:fc:41:75:f5:55:
21:9d:ee:b4:90:50:b6:13:cd:5e:74:5a:8b:64:38:d8:ed:97:
b0:b1:95:0f:5a:ca:84:11:70:28:68:c2:22:aa:b6:64:4e:7f:
60:34:00:a5:c9:d5:1e:8b:2d:f5:2a:a7:53:2e:22:62:f9:d8:
61:07:1b:91
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD858wcT2U/SGgGWUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkxMjEyMDAwMFoXDTIyMTAxODA0MDAwMFowLzEtMCsGA1UEAxMk
MDFkZDVhYzAtZTZhMy00Y2UwLWI1N2MtYmM0MWE1NDM1YTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT3Eykn+ylBZW8crdq7GGRLz7cY6Pdv6LcVA
m0CwfLDv6bW0JQPYeUfkPrvFDB6acV2uiE6BJAon8QCvA09O5iR8zDVLVcc9VRNZ
6BZ08VbArSpPur43V1JVapSR4ICpCnhu4nYtpZd5nSqhTV5UrcGifn3/Ec5GAOU2
3u/zkCJWGYiIY0YIbYvoO+5YU0Dd1Bz2hkotVZbQ+2yPITpNWxbZv4ElQ8+VaDuu
2rqs1BaBKKC3Ww16jI346xN/ASPxUquchx7vAOQf49eGdG4428GaNxl6OaRSsDnp
ccHW+CjO5vtOuUdLz60WzIEOY76aCnRJrmI982DbU67zhYthmQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCj5KV/oT2JW9a4U7KZz1e1udl5TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTg1OTQ2ZjYtM2Q0Ny0z
YmNjLTk4YTEtYWY5NTIwY2QwOWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhxYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAIr+yGkxX5FuD0SqUH6Qix3En2uFMdfqNCNn1PpXfz7m9JHt6vPwsN7l2
AxokM3JQcu+XPDc6mcZIzjTmdI0StPE6lt5elPEMp41SDyDnbkgGE4eorNCNg2WS
3nlfqFgJjM60yyDKrC1BSqhjupzauXJu0Kj83tuHu26fwxc8Crsd1o6AZYVuqc7w
TZJAIG/6sLVX2ZxS6aeDzv0BQub8xb/CW7E3G01P4cWsu/S8vEzUvoXXfEMJvvWn
h3DVhY1EJfxBdfVVIZ3utJBQthPNXnRai2Q42O2XsLGVD1rKhBFwKGjCIqq2ZE5/
YDQApcnVHost9SqnUy4iYvnYYQcbkQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:55 2025 by rpki-client