Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8c8d0d2-cc67-34e1-9209-29082528906e.roa
File: f8c8d0d2-cc67-34e1-9209-29082528906e.roa (raw, json)
Hash identifier: 7lRrhlfszFQ7GCOBur10/UgaS0TW4JFsZq8DZAwN4bg=
Subject key identifier: B9:AD:56:6C:91:BB:97:79:1E:89:ED:C9:95:A2:E0:61:98:F2:83:81
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EB618D85420FB47AED2B221A9
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8c8d0d2-cc67-34e1-9209-29082528906e.roa
Signing time: Wed 27 Jul 2022 12:00:00 +0000
ROA not before: Wed 27 Jul 2022 12:00:00 +0000
ROA not after: Thu 01 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 136.18.56.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b6:18:d8:54:20:fb:47:ae:d2:b2:21:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 27 12:00:00 2022 GMT
Not After : Sep 1 04:00:00 2022 GMT
Subject: CN=8754387b-f8dc-4497-9579-3bb8abba7bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:38:68:4e:10:1a:60:00:1f:c0:bb:34:80:
fc:63:db:48:32:a6:33:20:9c:e8:32:74:6b:3b:d1:
8c:47:8a:ac:2e:02:99:35:76:db:37:73:1f:39:d5:
53:fb:80:67:fd:bb:40:1a:2f:a7:2b:f1:4b:d4:fb:
71:6c:ad:f6:20:17:ee:3c:9f:e4:8b:0d:03:43:60:
3e:66:e4:c8:bd:2e:ab:39:fd:c2:47:92:0c:6b:21:
83:b3:7a:4c:6d:87:7c:c8:fb:24:ae:ec:a4:eb:b0:
a1:7c:4b:20:37:fb:72:7c:bb:e3:d7:bf:bd:ed:35:
d0:36:53:8b:51:87:18:b0:7d:9c:0b:01:93:36:50:
86:a3:9f:7f:21:59:ff:f6:67:e6:ab:f2:70:c3:d6:
f3:77:eb:51:36:80:e2:34:6a:00:a6:ad:2a:5f:53:
15:2e:0a:d3:c7:62:45:0d:75:80:68:06:b1:04:39:
69:53:c8:9e:82:fd:a0:93:24:c8:8e:77:a5:38:ee:
8b:1e:2e:9b:a6:20:84:42:f2:94:1f:08:e5:c0:1f:
30:63:35:db:34:b3:9d:a0:ad:ba:bc:18:83:21:b5:
39:d1:ec:c9:ae:0a:be:5f:2e:c8:6b:40:26:4e:d0:
0b:d1:b4:44:09:05:ea:26:e0:f2:e9:00:d4:f5:38:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AD:56:6C:91:BB:97:79:1E:89:ED:C9:95:A2:E0:61:98:F2:83:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f8c8d0d2-cc67-34e1-9209-29082528906e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
136.18.56.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:4b:d1:d0:8d:a7:49:f2:9c:c1:04:0c:b0:8a:cf:70:e0:3d:
da:9a:b2:5d:3f:83:c6:61:9f:fa:8a:1f:f0:83:b6:0c:31:98:
8e:bf:d6:96:04:40:3e:e9:b8:cc:8e:7a:9b:34:53:66:c9:d2:
a5:fe:27:b4:6f:23:87:2c:f1:be:68:83:24:7a:01:52:88:76:
d0:4f:c9:3c:ba:f4:be:d6:1f:10:e2:cf:62:8b:55:81:80:31:
93:e6:3a:c3:d2:93:6a:62:d1:d9:9a:68:3b:c4:82:57:4d:c6:
cf:28:8f:46:e9:6c:83:c5:c1:a9:34:c8:7a:20:d0:b0:12:19:
c8:c4:88:85:33:d6:5e:69:7f:08:21:ec:d5:43:f2:9f:86:f6:
7b:65:10:7c:7a:af:d7:94:8c:09:ef:aa:03:1a:38:4e:7d:a4:
f5:13:9b:22:12:d7:4c:57:28:79:d7:9c:42:de:f1:09:04:38:
bc:1f:c0:0f:d2:73:14:4b:5f:ff:6c:61:d5:52:ec:1a:44:01:
be:3c:2e:58:18:a6:f2:f5:ad:57:ed:47:54:32:9a:ef:8e:fc:
ed:e7:3d:0a:e5:91:62:d7:e0:eb:a7:5e:cf:57:3c:f7:4d:40:
17:78:5d:b4:b5:a1:b5:ac:40:28:53:bd:3d:8f:92:5e:68:d4:
b5:fd:f1:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD62GNhUIPtHrtKyIakwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcyNzEyMDAwMFoXDTIyMDkwMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODc1NDM4N2ItZjhkYy00NDk3LTk1NzktM2JiOGFiYmE3YmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6o4aE4QGmAAH8C7NID8Y9tIMqYzIJzoMnRr
O9GMR4qsLgKZNXbbN3MfOdVT+4Bn/btAGi+nK/FL1PtxbK32IBfuPJ/kiw0DQ2A+
ZuTIvS6rOf3CR5IMayGDs3pMbYd8yPskruyk67ChfEsgN/tyfLvj17+97TXQNlOL
UYcYsH2cCwGTNlCGo59/IVn/9mfmq/Jww9bzd+tRNoDiNGoApq0qX1MVLgrTx2JF
DXWAaAaxBDlpU8iegv2gkyTIjnelOO6LHi6bpiCEQvKUHwjlwB8wYzXbNLOdoK26
vBiDIbU50ezJrgq+Xy7Ia0AmTtAL0bRECQXqJuDy6QDU9Tj8kwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmtVmyRu5d5HontyZWi4GGY8oOBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjhjOGQwZDItY2M2Ny0z
NGUxLTkyMDktMjkwODI1Mjg5MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBI4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEdL0dCNp0nynMEEDLCKz3DgPdqasl0/g8Zhn/qKH/CDtgwxmI6/1pYE
QD7puMyOeps0U2bJ0qX+J7RvI4cs8b5ogyR6AVKIdtBPyTy69L7WHxDiz2KLVYGA
MZPmOsPSk2pi0dmaaDvEgldNxs8oj0bpbIPFwak0yHog0LASGcjEiIUz1l5pfwgh
7NVD8p+G9ntlEHx6r9eUjAnvqgMaOE59pPUTmyIS10xXKHnXnELe8QkEOLwfwA/S
cxRLX/9sYdVS7BpEAb48LlgYpvL1rVftR1Qymu+O/O3nPQrlkWLX4OunXs9XPPdN
QBd4XbS1obWsQChTvT2Pkl5o1LX98bs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:41 2025 by rpki-client