Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f89a5896-7d1b-383d-bcf1-62d1c78abcc4.roa
File: f89a5896-7d1b-383d-bcf1-62d1c78abcc4.roa (raw, json)
Hash identifier: X+UzEWL/5GdDwxcZLaHX5/4/10n9EYqEnpkUf+YRlL8=
Subject key identifier: C1:A4:74:35:B4:E7:3C:A9:08:00:72:43:5E:17:70:50:E6:DC:C4:76
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7D3FD4021C5F0EBAB6875380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f89a5896-7d1b-383d-bcf1-62d1c78abcc4.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 136.18.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:3f:d4:02:1c:5f:0e:ba:b6:87:53:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=f45a9cc0-72a3-45f7-9bbd-c1577bec4b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:a4:3a:e7:4c:a9:fd:3d:74:9e:3f:f3:10:
25:6d:1d:26:c2:0a:f1:9a:d1:9c:9f:c0:83:81:11:
d7:86:9e:0d:be:91:e3:8a:b2:e6:14:ac:5e:af:f5:
1e:f6:da:ba:14:e5:5a:dc:85:16:38:ac:19:5a:c6:
30:2c:4b:f0:13:07:39:e8:5a:ab:4e:15:f0:d4:a1:
e3:1f:da:b6:e2:c2:28:3a:41:41:77:3a:04:72:9c:
89:9e:a7:c0:f4:49:ab:08:6d:9d:94:4c:56:dc:60:
27:f3:f3:8f:90:f0:67:5b:f2:2e:d4:bc:eb:6d:b4:
69:17:5c:e3:af:7f:0f:0f:5c:55:0e:bf:6c:62:64:
d3:a6:e5:2d:27:34:24:89:f9:ff:aa:f4:1f:a4:9f:
1d:ee:47:8b:07:d5:bd:a8:59:5c:6c:90:02:ca:0d:
ac:07:68:56:25:c1:b7:2f:7d:ff:24:c7:b4:49:0f:
19:5c:40:f6:8c:ca:f4:4a:f3:eb:22:3d:70:01:8f:
c7:23:77:d3:33:97:7a:ad:c3:7c:47:3e:8e:1c:46:
45:e6:95:c3:a0:2d:13:e2:23:9c:76:09:d3:25:26:
a8:71:47:8b:32:ac:5c:03:59:b4:4b:56:7c:20:47:
b6:12:ad:53:30:3a:ae:22:44:04:11:21:e5:74:d1:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A4:74:35:B4:E7:3C:A9:08:00:72:43:5E:17:70:50:E6:DC:C4:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f89a5896-7d1b-383d-bcf1-62d1c78abcc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:0f:d9:cc:ae:ca:f5:37:e6:7d:41:f1:21:78:e2:f4:99:a2:
7b:b7:f7:56:29:8b:e3:d2:99:83:91:1d:d8:60:fc:b4:c0:4b:
5e:f9:8b:cc:dd:92:a0:d9:e7:3d:ec:07:ef:9a:0a:cb:c3:72:
04:8b:52:b9:a4:da:d0:54:7a:25:9d:e6:19:ee:a1:5b:2c:a4:
3b:4b:74:eb:03:e8:2c:15:21:c9:20:45:fa:1f:4b:e5:90:b7:
11:b6:9e:4d:9f:3a:f4:f0:8a:ba:90:d5:39:85:7e:8d:84:72:
7a:52:ac:6d:fe:cb:a7:24:85:0d:98:ab:ac:3a:1d:e1:7a:cf:
71:af:7b:bf:19:7e:ce:f9:31:36:64:01:32:04:f1:de:e8:80:
56:fe:31:70:ab:a5:d0:46:6e:d0:d4:bf:06:01:0b:e5:75:2d:
9a:51:38:d1:1f:88:b2:59:4b:fb:1e:09:97:e6:b8:9b:54:ed:
bc:23:c7:d2:28:92:8d:ad:02:fe:31:94:7c:8a:75:7d:3e:b9:
b4:cf:4d:47:86:4b:fb:85:e8:0b:8a:19:9e:7a:2e:37:89:e8:
5b:ec:9a:e2:f8:57:e3:10:c3:c9:70:1f:59:68:38:48:2e:47:
de:52:8c:b3:4e:09:bc:aa:0f:e1:67:aa:31:3a:0b:89:81:e8:
81:72:4d:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD19P9QCHF8OuraHU4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQwNzA0MDAwMFoXDTIyMDUxMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZjQ1YTljYzAtNzJhMy00NWY3LTliYmQtYzE1NzdiZWM0YjY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a2kOudMqf09dJ4/8xAlbR0mwgrxmtGcn8CD
gRHXhp4NvpHjirLmFKxer/Ue9tq6FOVa3IUWOKwZWsYwLEvwEwc56FqrThXw1KHj
H9q24sIoOkFBdzoEcpyJnqfA9EmrCG2dlExW3GAn8/OPkPBnW/Iu1LzrbbRpF1zj
r38PD1xVDr9sYmTTpuUtJzQkifn/qvQfpJ8d7keLB9W9qFlcbJACyg2sB2hWJcG3
L33/JMe0SQ8ZXED2jMr0SvPrIj1wAY/HI3fTM5d6rcN8Rz6OHEZF5pXDoC0T4iOc
dgnTJSaocUeLMqxcA1m0S1Z8IEe2Eq1TMDquIkQEESHldNFkOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMGkdDW05zypCAByQ14XcFDm3MR2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjg5YTU4OTYtN2QxYi0z
ODNkLWJjZjEtNjJkMWM3OGFiY2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBISMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIMP2cyuyvU35n1B8SF44vSZonu391Ypi+PSmYORHdhg/LTAS175i8zd
kqDZ5z3sB++aCsvDcgSLUrmk2tBUeiWd5hnuoVsspDtLdOsD6CwVIckgRfofS+WQ
txG2nk2fOvTwirqQ1TmFfo2EcnpSrG3+y6ckhQ2Yq6w6HeF6z3Gve78Zfs75MTZk
ATIE8d7ogFb+MXCrpdBGbtDUvwYBC+V1LZpRONEfiLJZS/seCZfmuJtU7bwjx9Io
ko2tAv4xlHyKdX0+ubTPTUeGS/uF6AuKGZ56LjeJ6FvsmuL4V+MQw8lwH1loOEgu
R95SjLNOCbyqD+FnqjE6C4mB6IFyTSU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:17 2025 by rpki-client