Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f38fa9c9-0cb8-350e-b3d5-f088fc95d586.roa
File: f38fa9c9-0cb8-350e-b3d5-f088fc95d586.roa (raw, json)
Hash identifier: PpOVooaEy8Uq7O3rVwzJsdQD0o4KaXPJMde1mXBYjT8=
Subject key identifier: 07:0B:EB:2B:EC:6A:8B:E0:0B:F1:AF:2B:A6:47:97:9D:D4:9A:A0:ED
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D813C71B5A8E0F54003A22E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f38fa9c9-0cb8-350e-b3d5-f088fc95d586.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 75.101.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:81:3c:71:b5:a8:e0:f5:40:03:a2:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=3e24f962-2cda-4ad5-b6f9-ae85235bc7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:52:5f:21:a6:2b:83:10:66:f7:b6:2a:e7:
a1:b8:f6:b8:e5:1a:87:f7:a1:e5:a0:5c:9e:6d:bb:
c1:56:d6:2e:6b:cc:0c:ee:7e:07:f4:a1:0f:64:32:
80:27:13:db:b1:37:44:af:e4:79:c5:ea:9b:ae:8d:
82:e4:09:66:44:6b:f0:c0:8e:01:31:70:d1:16:4a:
76:8c:26:a8:82:8c:45:e1:1f:e3:34:d3:66:36:8f:
c8:01:66:77:0c:bf:db:46:26:6d:1c:55:0c:48:cf:
dc:9b:e0:84:1e:46:2a:01:1c:88:84:c3:f3:ab:5d:
eb:30:20:f2:0f:b9:24:c1:02:8e:38:46:d4:dd:9e:
99:60:c9:e8:89:04:4a:f5:dc:64:54:04:1c:2d:4d:
49:47:40:4d:9e:fc:33:81:e2:25:e2:9e:b3:e2:d7:
2d:b8:d6:d0:98:aa:26:09:4d:b5:a1:83:cf:80:23:
e6:18:1e:6f:a0:b3:15:52:f1:48:78:1f:73:94:30:
d2:01:b5:9e:ba:c6:e9:b4:1f:52:d3:a5:44:d8:35:
91:87:4e:a2:47:db:83:b1:98:74:26:dd:ad:dc:81:
02:b9:f9:ac:ad:6b:28:6e:08:9c:54:32:9c:24:81:
84:6a:a6:2d:40:5e:e5:57:6f:4c:c9:25:76:03:2c:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0B:EB:2B:EC:6A:8B:E0:0B:F1:AF:2B:A6:47:97:9D:D4:9A:A0:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f38fa9c9-0cb8-350e-b3d5-f088fc95d586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
75.101.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:e5:bb:5f:37:cd:ea:de:43:c3:1a:aa:4a:6b:c8:4f:10:04:
c3:6d:62:e3:3f:15:4a:13:cf:ea:c5:d0:29:16:ab:db:f4:97:
2f:ce:7e:3a:84:88:3d:08:37:ae:eb:b7:15:e6:fd:c4:23:4f:
25:90:03:eb:6d:32:08:5b:93:f8:4f:dd:a8:1a:ed:8c:78:5c:
88:25:89:7b:90:2c:b6:f7:d2:0b:aa:cb:4f:b4:72:b8:11:8e:
2d:b2:49:4c:3d:51:47:fd:f3:f8:4c:4e:8f:96:ec:a1:21:1f:
f7:01:a2:89:a7:94:db:69:0f:84:03:9f:e8:88:c3:f5:db:e7:
51:c0:c5:16:55:ec:dd:d8:2a:99:58:0d:77:6a:06:2a:f1:6c:
e7:31:83:6a:55:4b:ef:df:2f:ee:83:9f:26:46:08:8d:b7:6a:
39:1c:a3:54:84:50:31:d2:1e:de:6b:53:2e:25:bb:bf:f2:ce:
7a:74:f7:82:bb:d6:c1:54:2a:a1:0f:1a:32:c0:d2:b7:11:7b:
1e:97:64:ea:de:6b:37:80:ad:14:11:d7:c4:f7:71:93:36:e0:
54:64:36:20:47:e7:d5:29:36:45:10:13:08:d7:1f:97:ac:9e:
19:37:6e:6c:08:27:1e:1a:9d:64:e8:fa:a6:d4:1a:cc:d8:c0:
81:89:18:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2BPHG1qOD1QAOiLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
M2UyNGY5NjItMmNkYS00YWQ1LWI2ZjktYWU4NTIzNWJjN2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdNSXyGmK4MQZve2KuehuPa45RqH96HloFye
bbvBVtYua8wM7n4H9KEPZDKAJxPbsTdEr+R5xeqbro2C5AlmRGvwwI4BMXDRFkp2
jCaogoxF4R/jNNNmNo/IAWZ3DL/bRiZtHFUMSM/cm+CEHkYqARyIhMPzq13rMCDy
D7kkwQKOOEbU3Z6ZYMnoiQRK9dxkVAQcLU1JR0BNnvwzgeIl4p6z4tctuNbQmKom
CU21oYPPgCPmGB5voLMVUvFIeB9zlDDSAbWeusbptB9S06VE2DWRh06iR9uDsZh0
Jt2t3IECufmsrWsobgicVDKcJIGEaqYtQF7lV29MySV2AyyeRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAcL6yvsaovgC/GvK6ZHl53UmqDtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjM4ZmE5YzktMGNiOC0z
NTBlLWIzZDUtZjA4OGZjOTVkNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHS2WAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADblu183zereQ8MaqkpryE8QBMNtYuM/FUoTz+rF0CkWq9v0ly/OfjqE
iD0IN67rtxXm/cQjTyWQA+ttMghbk/hP3aga7Yx4XIgliXuQLLb30guqy0+0crgR
ji2ySUw9UUf98/hMTo+W7KEhH/cBoomnlNtpD4QDn+iIw/Xb51HAxRZV7N3YKplY
DXdqBirxbOcxg2pVS+/fL+6DnyZGCI23ajkco1SEUDHSHt5rUy4lu7/yznp094K7
1sFUKqEPGjLA0rcRex6XZOreazeArRQR18T3cZM24FRkNiBH59UpNkUQEwjXH5es
nhk3bmwIJx4anWTo+qbUGszYwIGJGNY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:19 2025 by rpki-client