Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec9f8c0d-1b16-3783-8efa-2eefb40da0be.roa
File: ec9f8c0d-1b16-3783-8efa-2eefb40da0be.roa (raw, json)
Hash identifier: RLjCY74cyRPMNlYcEtaazyPFpTaHOl8vX2CkcgY1TZ8=
Subject key identifier: 46:A3:03:26:C5:04:53:CA:E0:C3:8F:A8:71:15:DF:8A:89:9F:76:03
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403DC89465DA84B2AEB2B25D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec9f8c0d-1b16-3783-8efa-2eefb40da0be.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.1.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:c8:94:65:da:84:b2:ae:b2:b2:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=222abe8c-2671-43cb-a650-da0d63193efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:81:3a:62:a0:41:95:37:98:ac:b8:b9:1c:
c3:e0:84:cc:d1:87:3b:1d:c9:ef:27:ef:03:b0:3c:
eb:0a:34:f6:4d:80:42:d1:59:fb:b7:ee:b9:72:38:
21:00:9a:55:94:82:e4:af:c7:b4:91:ef:b5:84:ad:
aa:51:9d:09:2e:27:fa:2a:3f:71:8f:3b:b1:ad:dc:
05:ef:e0:0e:8f:0e:7c:ec:e9:db:b9:18:b6:d3:e6:
c4:8e:dd:5c:fe:8f:f1:76:c8:f7:b9:c3:e0:6b:c0:
d9:98:6f:ad:3d:fe:2d:1d:2c:6a:f2:33:d0:91:94:
dc:93:7a:1a:bc:71:29:9c:92:41:0f:c2:6b:7f:b3:
31:bd:3b:37:2c:b8:f4:f3:42:29:8e:0a:56:58:8a:
16:de:82:3d:4f:57:dc:24:7d:96:9f:a5:d2:9b:85:
7b:b0:b4:25:d7:16:d6:3d:73:cf:ab:19:90:d4:05:
64:50:c9:d9:08:53:00:3e:93:95:1b:d3:2f:d8:8d:
fd:db:73:60:d5:6e:1b:2c:59:21:7f:d5:2a:12:27:
bc:ce:85:a2:41:aa:3b:7a:80:19:fe:4d:da:b1:ca:
b1:59:45:a5:4c:97:d7:28:b3:ac:66:7a:56:cf:0a:
2a:0b:99:50:cf:ba:0f:ae:a6:2f:07:9e:03:eb:ef:
e8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A3:03:26:C5:04:53:CA:E0:C3:8F:A8:71:15:DF:8A:89:9F:76:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ec9f8c0d-1b16-3783-8efa-2eefb40da0be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.1.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:dd:69:42:29:fb:eb:04:72:3c:ba:ba:40:4e:07:e9:87:b8:
56:59:3a:4e:4d:b1:04:10:3c:2b:70:d8:69:10:8f:90:48:ba:
3e:47:7b:98:6a:62:6a:d3:bb:0a:c2:20:e3:46:cb:5c:ee:94:
6f:d8:4b:cd:78:1f:9c:e9:b9:b4:92:32:5b:3a:95:58:78:90:
d8:f3:fa:b7:f7:56:d9:96:bb:9b:91:0c:4d:47:cd:de:71:ab:
2d:24:ee:2b:a4:42:0c:66:20:ba:35:c6:ec:6e:8f:d1:54:72:
b5:4b:51:37:9e:1f:ba:9a:d6:c8:5b:b6:4a:7b:f4:a1:e3:67:
8f:3b:4f:76:86:aa:b3:1d:c7:ba:f5:d3:0c:a4:83:2e:12:b8:
51:4f:c2:da:0c:e1:18:ac:eb:bc:df:10:31:93:38:46:2b:31:
6b:80:a6:98:6d:6f:e1:ac:1b:6f:f9:cc:a3:33:d5:4a:4d:69:
4e:55:23:a1:2a:9b:f0:32:fe:91:71:d2:94:b0:9d:8b:a7:ed:
9f:90:72:35:f7:c6:61:eb:40:a7:a3:cd:2f:79:40:87:31:8a:
ed:03:3a:92:fb:57:a6:66:fc:38:7c:f4:0f:6c:e8:b3:32:a7:
62:ef:c4:13:b8:6f:58:1d:12:73:98:7d:0a:dd:ce:50:46:f8:
e7:69:c2:25
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA9yJRl2oSyrrKyXUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
MjIyYWJlOGMtMjY3MS00M2NiLWE2NTAtZGEwZDYzMTkzZWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYCBOmKgQZU3mKy4uRzD4ITM0Yc7HcnvJ+8D
sDzrCjT2TYBC0Vn7t+65cjghAJpVlILkr8e0ke+1hK2qUZ0JLif6Kj9xjzuxrdwF
7+AOjw587OnbuRi20+bEjt1c/o/xdsj3ucPga8DZmG+tPf4tHSxq8jPQkZTck3oa
vHEpnJJBD8Jrf7MxvTs3LLj080IpjgpWWIoW3oI9T1fcJH2Wn6XSm4V7sLQl1xbW
PXPPqxmQ1AVkUMnZCFMAPpOVG9Mv2I3923Ng1W4bLFkhf9UqEie8zoWiQao7eoAZ
/k3ascqxWUWlTJfXKLOsZnpWzwoqC5lQz7oPrqYvB54D6+/oGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEajAybFBFPK4MOPqHEV34qJn3YDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWM5ZjhjMGQtMWIxNi0z
NzgzLThlZmEtMmVlZmI0MGRhMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiAEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcN1pQin76wRyPLq6QE4H6Ye4Vlk6Tk2xBBA8K3DYaRCPkEi6Pkd7mGpi
atO7CsIg40bLXO6Ub9hLzXgfnOm5tJIyWzqVWHiQ2PP6t/dW2Za7m5EMTUfN3nGr
LSTuK6RCDGYgujXG7G6P0VRytUtRN54fuprWyFu2Snv0oeNnjztPdoaqsx3HuvXT
DKSDLhK4UU/C2gzhGKzrvN8QMZM4Risxa4CmmG1v4awbb/nMozPVSk1pTlUjoSqb
8DL+kXHSlLCdi6ftn5ByNffGYetAp6PNL3lAhzGK7QM6kvtXpmb8OHz0D2zoszKn
Yu/EE7hvWB0Sc5h9Ct3OUEb452nCJQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:06 2025 by rpki-client