Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad820c88-d48f-3b64-bf49-07720de5db1b.roa
File: ad820c88-d48f-3b64-bf49-07720de5db1b.roa (raw, json)
Hash identifier: eO7F5SamhWADEuVpOd+nji92FxGvrRYS7puoFqe/3l4=
Subject key identifier: 3A:A3:8A:5F:7F:D4:EC:D6:9D:68:5D:2B:E5:75:9C:9C:08:F4:3B:D0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403D59125B30D64401BDC2F130
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad820c88-d48f-3b64-bf49-07720de5db1b.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:59:12:5b:30:d6:44:01:bd:c2:f1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=f087fe94-8ea0-4cba-8968-b2b6b80134ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:7c:1d:57:b9:b9:60:25:15:55:84:d9:02:
dd:e7:f6:14:19:f5:f6:12:ab:c7:36:0f:ef:8a:47:
02:aa:34:f8:ba:6f:9d:b1:db:fe:4f:57:55:06:bb:
7f:36:9c:de:6b:66:a3:03:3d:61:da:18:97:1c:2f:
68:96:e2:a1:c5:85:bf:4a:6e:cb:fd:93:72:81:28:
21:92:1b:d7:51:49:da:9c:00:52:3e:05:52:f0:d4:
02:58:37:dd:66:cb:13:ea:39:4b:04:ab:3b:86:21:
19:69:c9:66:f3:31:a0:42:59:7a:88:07:f6:9f:c0:
27:86:d7:c3:6a:51:b2:3b:03:46:5c:39:3e:f7:d9:
fb:fa:2b:e2:26:5f:72:88:7f:71:a8:99:7d:bc:51:
8f:d6:4b:dc:58:c5:ea:a3:63:3a:9b:2f:95:63:94:
c7:d7:81:f9:b2:05:2d:5e:56:bf:29:f3:92:2e:e7:
b7:77:49:5f:73:ce:38:bb:87:35:72:f1:7d:ed:4c:
d7:79:5b:00:cd:42:a0:99:25:fb:ca:96:cd:59:ad:
bc:c7:5b:a8:54:06:ac:df:8b:5c:e2:5d:00:f8:5b:
be:71:95:16:26:85:9c:ee:76:3e:34:ed:e3:6d:3e:
b1:d0:f6:e0:a5:e1:ad:2c:f5:e4:f4:cf:58:09:60:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A3:8A:5F:7F:D4:EC:D6:9D:68:5D:2B:E5:75:9C:9C:08:F4:3B:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad820c88-d48f-3b64-bf49-07720de5db1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:fd:5d:b1:73:2d:be:b2:84:a6:79:f6:ed:e5:e4:82:c1:80:
b2:02:e1:e2:ee:06:d9:3a:13:eb:71:92:95:c3:dc:8f:bd:00:
ff:fd:73:3c:48:d9:91:25:5c:66:9a:ab:f5:2d:59:33:60:f8:
29:54:4d:bd:e1:95:a6:3e:e2:8d:3f:4d:9f:be:20:26:6f:b1:
01:26:f9:40:9c:9a:02:3c:da:7a:f8:bb:c5:03:94:3a:5a:81:
c7:6f:58:85:71:66:d3:45:ce:45:ca:52:23:83:4f:88:79:44:
06:da:0b:82:10:da:07:1d:78:1e:25:52:ef:9b:86:99:58:ef:
b9:15:98:6e:d6:32:1f:a2:29:45:0f:2b:f6:da:50:b9:47:0a:
7c:32:5b:87:ff:87:63:f4:13:d4:3c:20:cf:47:d5:b6:ca:01:
b4:f9:64:e6:66:ee:b6:0c:a6:38:5b:71:de:43:65:8c:7e:52:
94:05:90:f1:9b:56:45:0f:43:d1:ff:4d:0e:08:cc:7d:fa:28:
a5:99:9b:f5:a8:f5:f3:e0:a4:54:0b:19:2f:a6:89:15:a4:8d:
89:8b:ab:02:7b:3b:14:da:e2:08:10:dc:6e:6b:d8:7f:38:80:
06:ed:ea:67:ce:90:71:d5:3f:c4:db:a0:55:d7:f9:47:3e:1e:
90:f6:1b:cb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA9WRJbMNZEAb3C8TAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZjA4N2ZlOTQtOGVhMC00Y2JhLTg5NjgtYjJiNmI4MDEzNGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAR8HVe5uWAlFVWE2QLd5/YUGfX2EqvHNg/v
ikcCqjT4um+dsdv+T1dVBrt/Npzea2ajAz1h2hiXHC9oluKhxYW/Sm7L/ZNygSgh
khvXUUnanABSPgVS8NQCWDfdZssT6jlLBKs7hiEZaclm8zGgQll6iAf2n8AnhtfD
alGyOwNGXDk+99n7+iviJl9yiH9xqJl9vFGP1kvcWMXqo2M6my+VY5TH14H5sgUt
Xla/KfOSLue3d0lfc844u4c1cvF97UzXeVsAzUKgmSX7ypbNWa28x1uoVAas34tc
4l0A+Fu+cZUWJoWc7nY+NO3jbT6x0PbgpeGtLPXk9M9YCWDh+wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDqjil9/1OzWnWhdK+V1nJwI9DvQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWQ4MjBjODgtZDQ4Zi0z
YjY0LWJmNDktMDc3MjBkZTVkYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiBEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYP1dsXMtvrKEpnn27eXkgsGAsgLh4u4G2ToT63GSlcPcj70A//1zPEjZ
kSVcZpqr9S1ZM2D4KVRNveGVpj7ijT9Nn74gJm+xASb5QJyaAjzaevi7xQOUOlqB
x29YhXFm00XORcpSI4NPiHlEBtoLghDaBx14HiVS75uGmVjvuRWYbtYyH6IpRQ8r
9tpQuUcKfDJbh/+HY/QT1Dwgz0fVtsoBtPlk5mbutgymOFtx3kNljH5SlAWQ8ZtW
RQ9D0f9NDgjMffoopZmb9aj18+CkVAsZL6aJFaSNiYurAns7FNriCBDcbmvYfziA
Bu3qZ86QcdU/xNugVdf5Rz4ekPYbyw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 15:10:56 2025 by rpki-client