Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfc107c4-670b-31ca-93f3-31505eb1b440.roa
File: bfc107c4-670b-31ca-93f3-31505eb1b440.roa (raw, json)
Hash identifier: sgPXXdToJEoAgqvOzftlvFOF+PS4Vj89m5G1cRW7Yn8=
Subject key identifier: 94:D1:14:45:9B:D2:38:FA:8F:2A:39:84:45:93:A4:57:ED:EE:DE:26
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840166FF27A5FFAAD8491F906C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfc107c4-670b-31ca-93f3-31505eb1b440.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.2.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:6f:f2:7a:5f:fa:ad:84:91:f9:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=cb81f38b-a5e6-4148-884b-cf083c4365f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f6:e6:a5:c0:2b:05:7f:38:ce:0e:74:41:ff:
03:5d:00:30:2f:ec:3f:98:a4:70:1f:f9:50:21:41:
95:fb:ee:e7:3b:b3:63:f9:5e:51:e8:0d:42:95:8a:
10:e6:fe:01:00:f5:9f:0e:4d:41:83:84:39:1f:b8:
20:99:db:ff:9c:f2:4d:9d:02:a0:fe:69:19:d7:70:
92:72:a9:80:d4:61:c8:4f:26:cb:01:a3:86:aa:66:
ac:27:a3:31:7a:89:2f:8d:d2:f3:6c:fa:2e:2d:ef:
2e:60:4b:09:08:bf:2d:8d:06:89:84:ad:29:43:31:
0e:12:51:16:71:80:9a:f1:05:60:55:03:08:4a:6f:
1b:b4:ce:df:f7:b9:a7:90:ac:29:d2:ae:ee:40:96:
51:ff:38:ea:cd:d8:72:25:c6:35:1a:fb:de:a4:21:
21:a7:2f:95:5d:16:fb:ea:3f:a5:39:a5:6c:69:4c:
f1:fa:84:56:d1:0b:28:d7:72:df:28:05:f7:78:37:
35:7b:e9:16:49:75:25:0a:42:34:53:45:6c:a9:20:
f6:e8:1b:a8:51:76:d4:11:11:ef:47:35:cc:e6:7e:
4c:a0:4c:8f:76:a7:e8:4f:30:94:79:c2:a0:70:c7:
3f:52:03:a1:42:49:b9:75:42:85:13:74:fa:78:5e:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D1:14:45:9B:D2:38:FA:8F:2A:39:84:45:93:A4:57:ED:EE:DE:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfc107c4-670b-31ca-93f3-31505eb1b440.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.2.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:98:ce:46:95:34:ec:8c:bc:55:1e:8b:ad:ba:a0:d9:0a:b3:
c1:87:ec:ee:a5:db:87:4d:15:1a:9a:2e:eb:c6:10:97:0b:aa:
25:6a:66:a7:b9:6c:c0:00:39:57:59:71:dd:b3:e0:c0:6b:a5:
1a:32:31:20:34:ae:e4:b1:3c:48:bd:b6:59:8c:4c:0d:6e:7e:
fe:ae:08:c2:fe:14:d6:43:76:4a:c2:bb:d9:3f:03:62:62:77:
f9:26:94:35:bf:52:fb:77:8f:c1:11:34:f6:8f:40:1e:20:10:
db:50:0e:b1:6d:05:f7:b2:4f:bb:3b:88:ed:18:f0:aa:36:ae:
e1:21:a8:e4:e6:9d:f4:98:69:3f:b3:c4:c1:0e:76:98:da:2f:
6f:4c:e3:4a:7b:27:1a:30:24:bc:32:1c:ae:52:ba:37:81:c0:
f3:80:fc:d6:5f:16:0e:9a:f3:08:00:81:7c:57:ab:07:61:00:
9c:f2:f9:2a:7e:7e:64:65:b7:77:87:91:fe:9d:22:b8:55:a8:
a0:2f:68:08:5e:e8:98:cb:f4:06:af:db:39:a0:39:80:85:3f:
52:18:54:35:c0:d5:18:0e:f5:d3:96:2a:af:ed:55:01:ba:e3:
14:f3:16:69:8e:ae:1f:84:50:fe:ed:02:6c:36:05:5f:f2:3b:
1a:27:9d:4c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAWb/J6X/qthJH5BsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEzMDEyMDAwMFoXDTIzMDEwNTA1MDAwMFowLzEtMCsGA1UEAxMk
Y2I4MWYzOGItYTVlNi00MTQ4LTg4NGItY2YwODNjNDM2NWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPbmpcArBX84zg50Qf8DXQAwL+w/mKRwH/lQ
IUGV++7nO7Nj+V5R6A1ClYoQ5v4BAPWfDk1Bg4Q5H7ggmdv/nPJNnQKg/mkZ13CS
cqmA1GHITybLAaOGqmasJ6MxeokvjdLzbPouLe8uYEsJCL8tjQaJhK0pQzEOElEW
cYCa8QVgVQMISm8btM7f97mnkKwp0q7uQJZR/zjqzdhyJcY1GvvepCEhpy+VXRb7
6j+lOaVsaUzx+oRW0Qso13LfKAX3eDc1e+kWSXUlCkI0U0VsqSD26BuoUXbUERHv
RzXM5n5MoEyPdqfoTzCUecKgcMc/UgOhQkm5dUKFE3T6eF5yxQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJTRFEWb0jj6jyo5hEWTpFft7t4mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmZjMTA3YzQtNjcwYi0z
MWNhLTkzZjMtMzE1MDVlYjFiNDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAf5jORpU07Iy8VR6Lrbqg2QqzwYfs7qXbh00VGpou68YQlwuqJWpmp7ls
wAA5V1lx3bPgwGulGjIxIDSu5LE8SL22WYxMDW5+/q4Iwv4U1kN2SsK72T8DYmJ3
+SaUNb9S+3ePwRE09o9AHiAQ21AOsW0F97JPuzuI7Rjwqjau4SGo5Oad9JhpP7PE
wQ52mNovb0zjSnsnGjAkvDIcrlK6N4HA84D81l8WDprzCACBfFerB2EAnPL5Kn5+
ZGW3d4eR/p0iuFWooC9oCF7omMv0Bq/bOaA5gIU/UhhUNcDVGA7105Yqr+1VAbrj
FPMWaY6uH4RQ/u0CbDYFX/I7GiedTA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:51 2025 by rpki-client