Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aff0a331-8203-35e1-8ebb-bc8c6fa24436.roa
File: aff0a331-8203-35e1-8ebb-bc8c6fa24436.roa (raw, json)
Hash identifier: dUr7Vjqow4G+5arMQSeKEhaitforalJF0RCvLB+0qVo=
Subject key identifier: 9B:17:72:19:D4:95:43:A0:1C:C1:08:71:33:CA:69:76:11:56:82:77
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403DC1243CFEB4F6D8F3307400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aff0a331-8203-35e1-8ebb-bc8c6fa24436.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 136.18.50.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:c1:24:3c:fe:b4:f6:d8:f3:30:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=37d843f3-8d4d-44c5-bb3a-2895c5189e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b1:5e:e8:f9:d8:b6:9b:d0:aa:1c:23:dd:50:
c8:dc:88:ac:68:3a:4c:6d:a1:11:b4:c0:23:ae:56:
25:be:77:c4:26:f3:0b:e9:29:85:43:e9:6b:d4:7f:
5a:01:1c:e6:4e:e8:b8:65:be:5a:8e:9d:50:11:11:
4c:9e:98:3f:d0:2d:5d:ea:a0:c0:72:e7:78:9b:12:
af:56:01:b1:2e:ac:0b:38:c2:92:75:d7:bf:a8:02:
c0:6a:59:d9:eb:42:2e:a6:14:45:6e:0e:cd:e3:72:
a4:02:78:f3:53:37:5a:18:94:2d:2e:bb:39:5a:0e:
32:47:cf:d4:a0:90:3f:01:e4:e7:89:c3:a6:49:b4:
94:24:ea:bf:9c:e5:b4:dd:73:fe:58:ae:ba:6d:4f:
09:05:17:2b:49:00:e1:0c:38:7c:6f:8b:84:19:16:
c1:bb:9a:98:c0:3d:d2:7b:8e:57:62:24:82:5b:16:
38:02:2f:e0:84:e1:4e:a5:27:be:60:c7:5c:a6:0a:
ba:0b:8b:f9:ac:b0:97:31:20:3a:8e:3b:f4:f9:f0:
93:c5:ba:9d:04:1b:34:13:9f:aa:69:31:be:b8:3c:
2b:3a:1e:32:52:40:9c:21:17:c5:4b:11:2e:d9:74:
c9:7e:de:cd:1f:1e:f0:86:d7:e7:b0:bd:34:cb:58:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:17:72:19:D4:95:43:A0:1C:C1:08:71:33:CA:69:76:11:56:82:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aff0a331-8203-35e1-8ebb-bc8c6fa24436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.50.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:fe:7c:ab:05:bc:d8:8b:8a:af:30:b9:14:c5:47:46:fe:77:
27:a0:6a:76:65:3c:f9:1d:35:f1:16:93:d1:a4:6c:86:74:36:
6f:9e:61:37:d1:0f:c3:21:d6:86:51:b7:00:c0:3e:d2:a9:56:
71:e0:4d:63:12:c3:a7:94:50:08:c3:27:9f:6e:18:49:d6:32:
f0:11:58:67:8b:af:35:b2:ca:d5:fb:ae:7d:c9:a5:b8:59:80:
a4:b8:82:ee:c6:39:bc:b6:53:8e:71:cf:ac:ae:4d:cf:87:04:
33:47:91:b9:b7:6e:90:70:84:5b:a6:04:70:60:41:2f:e2:9b:
29:ff:a4:ac:31:65:bf:55:60:14:8c:a0:f2:98:4b:fe:f7:82:
ce:12:ca:d7:4f:0e:9f:d5:09:f3:45:ec:d3:70:ee:47:b4:4a:
83:b1:99:66:68:14:1a:27:11:60:08:56:c7:69:6d:ad:03:9c:
01:9d:41:78:10:d2:8f:d3:98:2c:29:c2:c9:74:67:20:4a:bf:
17:d7:c4:b4:6e:90:22:a0:64:5a:c9:d1:19:c7:3a:d9:24:ff:
ef:5b:87:3b:7e:be:49:b9:3d:8c:ce:60:9a:ee:12:ca:79:fd:
42:b9:12:7e:64:17:18:50:d6:94:4b:36:37:24:82:b8:31:92:
e3:9d:2e:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEA9wSQ8/rT22PMwdAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
MzdkODQzZjMtOGQ0ZC00NGM1LWJiM2EtMjg5NWM1MTg5ZTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbFe6PnYtpvQqhwj3VDI3IisaDpMbaERtMAj
rlYlvnfEJvML6SmFQ+lr1H9aARzmTui4Zb5ajp1QERFMnpg/0C1d6qDAcud4mxKv
VgGxLqwLOMKSdde/qALAalnZ60IuphRFbg7N43KkAnjzUzdaGJQtLrs5Wg4yR8/U
oJA/AeTnicOmSbSUJOq/nOW03XP+WK66bU8JBRcrSQDhDDh8b4uEGRbBu5qYwD3S
e45XYiSCWxY4Ai/ghOFOpSe+YMdcpgq6C4v5rLCXMSA6jjv0+fCTxbqdBBs0E5+q
aTG+uDwrOh4yUkCcIRfFSxEu2XTJft7NHx7whtfnsL00y1jW2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJsXchnUlUOgHMEIcTPKaXYRVoJ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWZmMGEzMzEtODIwMy0z
NWUxLThlYmItYmM4YzZmYTI0NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBIyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFT+fKsFvNiLiq8wuRTFR0b+dyeganZlPPkdNfEWk9GkbIZ0Nm+eYTfR
D8Mh1oZRtwDAPtKpVnHgTWMSw6eUUAjDJ59uGEnWMvARWGeLrzWyytX7rn3JpbhZ
gKS4gu7GOby2U45xz6yuTc+HBDNHkbm3bpBwhFumBHBgQS/imyn/pKwxZb9VYBSM
oPKYS/73gs4SytdPDp/VCfNF7NNw7ke0SoOxmWZoFBonEWAIVsdpba0DnAGdQXgQ
0o/TmCwpwsl0ZyBKvxfXxLRukCKgZFrJ0RnHOtkk/+9bhzt+vkm5PYzOYJruEsp5
/UK5En5kFxhQ1pRLNjckgrgxkuOdLjw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:36 2025 by rpki-client