Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f086b0fa-63b4-3237-854d-02f8246c6533.roa
File: f086b0fa-63b4-3237-854d-02f8246c6533.roa (raw, json)
Hash identifier: NDOSj9ENcfYEJ+HF9IFOHgylXwc7S3qIE6/Q4shQe28=
Subject key identifier: 33:0A:B9:FC:B7:D6:79:84:B5:6C:98:F7:A2:8B:CB:44:99:43:22:1F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DCB4CF055B874BC1AC5516600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f086b0fa-63b4-3237-854d-02f8246c6533.roa
Signing time: Tue 03 May 2022 12:00:00 +0000
ROA not before: Tue 03 May 2022 12:00:00 +0000
ROA not after: Wed 08 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.18.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cb:4c:f0:55:b8:74:bc:1a:c5:51:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 3 12:00:00 2022 GMT
Not After : Jun 8 04:00:00 2022 GMT
Subject: CN=0ca8a65e-794e-4722-8367-c14d49f78c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:00:c6:b3:17:3f:2b:d7:8c:4f:73:41:a0:da:
00:23:25:d2:32:c8:a7:38:d6:60:97:d6:c9:b9:a9:
c2:6f:c2:9a:d6:a2:05:b0:e4:51:75:44:a3:f0:19:
cc:54:32:6f:ad:22:84:79:1a:c7:73:93:0d:05:bb:
ba:92:d1:e2:bc:8e:ad:f5:bd:ee:ae:f2:6e:70:69:
65:41:f4:6f:d0:08:a4:59:fc:22:53:ab:e8:d9:1b:
c5:2b:c4:1c:e5:56:37:52:6f:b2:01:6d:3b:2f:83:
ea:a3:6a:df:d2:08:ab:6d:dd:fe:68:8e:b0:70:f2:
20:56:f9:ea:e2:19:6b:3e:31:af:b6:49:9b:3e:24:
4a:ff:67:a4:a4:a2:fd:b3:f0:61:1b:1e:61:9a:af:
fb:89:cd:95:d4:00:d8:b1:cf:94:47:0b:2b:61:11:
5f:b0:e7:7d:08:97:93:22:45:2e:6f:08:24:80:8d:
b7:7d:2b:68:60:9f:5c:8b:1a:cc:d6:33:b8:4f:34:
7d:85:e9:51:47:51:d7:1b:4e:fc:f7:0f:30:33:26:
02:2a:9e:8f:c7:ec:67:69:82:d2:f4:55:dd:f6:30:
03:46:1c:8f:2e:f2:39:ad:4f:0e:ea:c1:a8:79:f4:
0c:47:47:98:7b:66:d0:cd:f9:fe:e6:fa:79:12:3f:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0A:B9:FC:B7:D6:79:84:B5:6C:98:F7:A2:8B:CB:44:99:43:22:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f086b0fa-63b4-3237-854d-02f8246c6533.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:d0:61:4d:cb:92:b5:61:a8:c9:b9:33:23:35:a3:c1:1c:53:
f9:4f:1d:90:86:9c:ea:45:dd:20:fb:03:b6:b4:a1:00:8b:74:
42:de:d5:8f:00:07:2a:fc:33:e8:4a:87:34:ec:67:75:cf:12:
a6:2a:0a:0b:90:a2:13:e0:9b:29:6a:34:3b:d7:db:c9:a4:f1:
25:39:b4:a5:e0:cb:59:f1:8c:b6:d8:f0:63:c7:ef:6d:fd:1e:
97:be:fc:99:62:19:1f:91:18:59:17:41:ba:14:6c:c9:fb:22:
96:3b:87:87:75:d7:b3:f4:0f:42:1f:40:a4:f0:16:dd:1e:f6:
49:ca:f5:e6:6d:3d:9e:63:25:e9:26:86:b7:25:f2:da:8e:92:
02:4d:c0:d9:4d:4b:c8:51:55:8d:a9:1f:fd:e3:e0:bb:48:e0:
ee:04:b5:f0:36:63:36:68:b6:43:32:00:ab:00:47:64:11:bc:
f0:20:4e:53:be:d1:e3:62:3b:fd:e2:a6:b3:23:4f:21:eb:08:
a8:0d:21:3a:20:57:13:8d:d9:70:6c:eb:fa:1c:a4:c3:9a:b6:
d5:73:2e:f3:64:1b:8e:e4:40:a3:01:63:95:99:aa:a0:f0:3f:
c2:6d:cc:b9:67:40:76:ef:fb:6b:8f:de:3b:a9:dd:15:c4:db:
fc:b9:14:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3LTPBVuHS8GsVRZgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUwMzEyMDAwMFoXDTIyMDYwODA0MDAwMFowLzEtMCsGA1UEAxMk
MGNhOGE2NWUtNzk0ZS00NzIyLTgzNjctYzE0ZDQ5Zjc4YzkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQDGsxc/K9eMT3NBoNoAIyXSMsinONZgl9bJ
uanCb8Ka1qIFsORRdUSj8BnMVDJvrSKEeRrHc5MNBbu6ktHivI6t9b3urvJucGll
QfRv0AikWfwiU6vo2RvFK8Qc5VY3Um+yAW07L4Pqo2rf0girbd3+aI6wcPIgVvnq
4hlrPjGvtkmbPiRK/2ekpKL9s/BhGx5hmq/7ic2V1ADYsc+URwsrYRFfsOd9CJeT
IkUubwgkgI23fStoYJ9cixrM1jO4TzR9helRR1HXG0789w8wMyYCKp6Px+xnaYLS
9FXd9jADRhyPLvI5rU8O6sGoefQMR0eYe2bQzfn+5vp5Ej91/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMKufy31nmEtWyY96KLy0SZQyIfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjA4NmIwZmEtNjNiNC0z
MjM3LTg1NGQtMDJmODI0NmM2NTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBIUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEXQYU3LkrVhqMm5MyM1o8EcU/lPHZCGnOpF3SD7A7a0oQCLdELe1Y8A
Byr8M+hKhzTsZ3XPEqYqCguQohPgmylqNDvX28mk8SU5tKXgy1nxjLbY8GPH7239
Hpe+/JliGR+RGFkXQboUbMn7IpY7h4d117P0D0IfQKTwFt0e9knK9eZtPZ5jJekm
hrcl8tqOkgJNwNlNS8hRVY2pH/3j4LtI4O4EtfA2YzZotkMyAKsAR2QRvPAgTlO+
0eNiO/3iprMjTyHrCKgNITogVxON2XBs6/ocpMOattVzLvNkG47kQKMBY5WZqqDw
P8JtzLlnQHbv+2uP3jup3RXE2/y5FAg=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:11 2025 by rpki-client