Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3607fc3-a8d8-3cdd-af42-b68135305dcf.roa
File: c3607fc3-a8d8-3cdd-af42-b68135305dcf.roa (raw, json)
Hash identifier: let3iZLVQDBhNqxho8LyojaGWtSYFpZV21eSkkDPYOM=
Subject key identifier: 8C:37:04:CB:AB:26:E9:3C:B2:02:DC:D0:DB:B1:D4:97:C7:CF:05:6E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C700D374C1913D8985BB28000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3607fc3-a8d8-3cdd-af42-b68135305dcf.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 138.240.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:70:0d:37:4c:19:13:d8:98:5b:b2:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=fa9d9b61-f081-4ea9-8b6e-feb87bbfae59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c9:df:e0:bc:82:5b:d2:23:3c:58:6d:5f:99:
4a:dd:49:26:35:56:ec:33:27:5f:96:1f:a9:17:c9:
18:fc:1d:be:05:4c:2d:f0:f8:42:39:55:98:5f:42:
88:37:9a:3b:23:9b:de:85:e2:cf:a1:7b:07:fe:91:
7a:54:e6:da:e4:04:f6:1b:c6:d3:79:ba:51:11:85:
44:da:3b:6b:87:b2:16:2a:a0:30:4f:de:b4:93:cc:
8d:44:47:64:30:0c:1e:9d:06:3f:8b:01:a8:6a:01:
83:37:26:46:08:5e:00:9f:2e:15:dd:29:f8:d3:82:
a2:d8:76:2e:d1:3c:05:ec:69:22:a9:75:ef:d7:9d:
3e:6e:84:46:d4:70:2f:17:e5:a4:12:67:17:46:2f:
27:78:c5:da:8c:ab:74:5c:7e:97:7c:82:18:7e:8f:
4e:a9:1d:15:43:6f:98:ab:83:c5:8f:e7:ed:ee:fc:
34:e6:33:fb:be:86:8f:58:50:38:31:42:a9:89:aa:
b2:ce:55:23:bc:b0:5f:54:17:92:20:9c:db:bd:80:
6b:25:7f:06:fb:55:a3:27:dc:3f:44:f3:e0:e4:eb:
c3:bf:2d:9b:05:44:ee:c1:b5:46:56:fb:6d:8c:de:
49:9a:12:4e:57:0e:68:79:b4:7c:21:3e:03:b1:97:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:37:04:CB:AB:26:E9:3C:B2:02:DC:D0:DB:B1:D4:97:C7:CF:05:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3607fc3-a8d8-3cdd-af42-b68135305dcf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
138.240.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:54:35:04:9b:ea:ec:c1:f4:50:9f:d2:bd:1f:44:01:25:29:
12:85:89:b8:e4:ab:77:2a:af:39:e2:94:19:ea:d3:18:d4:b3:
4f:31:6b:bc:5a:ac:62:f2:d8:fe:5c:72:29:d6:cf:57:9d:98:
0b:17:69:ba:22:fa:f9:0c:9d:bf:0d:9a:a6:4e:9a:83:9f:79:
61:56:43:00:42:5f:8c:b9:ee:6d:00:25:e0:f3:2c:f6:e7:b3:
51:0a:de:99:d8:8f:7c:94:86:d9:fd:f1:a9:4d:64:70:f8:95:
fe:36:d6:b4:2c:61:76:b6:1a:f2:93:61:2a:9d:2e:e3:c8:8e:
17:e4:f8:7b:44:1e:f1:7b:b8:75:e3:7d:59:42:5b:d4:8b:0d:
50:ba:30:23:64:84:c0:d3:77:c7:90:61:b1:5f:ca:98:da:bf:
a5:9b:c2:29:82:6c:c8:e3:6b:ed:93:6d:ca:89:19:a3:de:ef:
6a:bc:aa:13:a4:09:aa:3d:b7:16:96:a3:87:1a:f2:fc:87:17:
bc:72:15:a6:d6:59:05:2b:b2:ac:6a:a2:2a:af:15:e5:ab:fa:
9b:35:ec:05:7f:04:ef:2e:70:f3:21:06:36:74:de:90:f6:78:
5d:fa:f9:f5:04:c5:b6:e4:d3:e4:c2:80:d9:6c:3a:d9:f4:01:
93:39:c7:f5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxwDTdMGRPYmFuygAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZmE5ZDliNjEtZjA4MS00ZWE5LThiNmUtZmViODdiYmZhZTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcnf4LyCW9IjPFhtX5lK3UkmNVbsMydflh+p
F8kY/B2+BUwt8PhCOVWYX0KIN5o7I5veheLPoXsH/pF6VOba5AT2G8bTebpREYVE
2jtrh7IWKqAwT960k8yNREdkMAwenQY/iwGoagGDNyZGCF4Any4V3Sn404Ki2HYu
0TwF7GkiqXXv150+boRG1HAvF+WkEmcXRi8neMXajKt0XH6XfIIYfo9OqR0VQ2+Y
q4PFj+ft7vw05jP7voaPWFA4MUKpiaqyzlUjvLBfVBeSIJzbvYBrJX8G+1WjJ9w/
RPPg5OvDvy2bBUTuwbVGVvttjN5JmhJOVw5oebR8IT4DsZdYAwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIw3BMurJuk8sgLc0Nux1JfHzwVuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzM2MDdmYzMtYThkOC0z
Y2RkLWFmNDItYjY4MTM1MzA1ZGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAivAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAglQ1BJvq7MH0UJ/SvR9EASUpEoWJuOSrdyqvOeKUGerTGNSzTzFrvFqs
YvLY/lxyKdbPV52YCxdpuiL6+Qydvw2apk6ag595YVZDAEJfjLnubQAl4PMs9uez
UQremdiPfJSG2f3xqU1kcPiV/jbWtCxhdrYa8pNhKp0u48iOF+T4e0Qe8Xu4deN9
WUJb1IsNULowI2SEwNN3x5BhsV/KmNq/pZvCKYJsyONr7ZNtyokZo97varyqE6QJ
qj23Fpajhxry/IcXvHIVptZZBSuyrGqiKq8V5av6mzXsBX8E7y5w8yEGNnTekPZ4
Xfr59QTFtuTT5MKA2Ww62fQBkznH9Q==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:20 2025 by rpki-client