Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa
File: 7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa (raw, json)
Hash identifier: TDMN4Yvuksn5xPsc37/2upOo2TdvgsmDYvWS/4ggAWw=
Subject key identifier: BD:43:E5:01:FE:92:9B:B5:48:C0:EA:E6:E8:46:E6:09:2F:A8:21:F3
Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial: 010D0C9F432858482EC0104347F6300662F27400
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa
Signing time: Thu 12 Dec 2024 14:00:51 +0000
ROA not before: Thu 12 Dec 2024 14:00:51 +0000
ROA not after: Wed 12 Mar 2025 13:00:51 +0000
asID: 396856
IP address blocks: 172.99.136.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2e:c0:10:43:47:f6:30:06:62:f2:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Validity
Not Before: Dec 12 14:00:51 2024 GMT
Not After : Mar 12 13:00:51 2025 GMT
Subject: CN=d4801c6b-6ef9-4558-9f57-812652b0a823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:7f:ff:40:9d:04:77:c8:e6:f3:89:81:62:
77:f6:b9:29:5a:ea:e0:13:9d:19:4e:e8:56:96:36:
fd:d9:75:ab:0d:18:b9:07:39:5d:0d:45:d5:ea:d6:
f2:80:a2:49:11:06:ca:76:4b:a3:f8:7f:94:26:b4:
30:4c:27:09:45:03:3c:b0:5c:fb:48:08:25:65:f5:
c6:82:b0:12:d6:63:85:f4:13:54:e4:b6:4b:11:1d:
83:65:ad:8b:53:f5:02:c7:69:83:9b:01:67:3d:d0:
ae:c3:21:77:2f:a8:b4:c9:b8:49:5b:f8:d2:cb:78:
29:29:70:c5:37:3e:6b:33:c6:a6:85:d5:3e:0c:12:
b0:23:6c:38:1c:d7:5b:f8:d3:e6:d4:5f:bb:5b:2d:
87:44:fc:64:d8:4e:4c:95:5f:ba:94:17:3e:cd:28:
42:bc:11:40:f8:bb:08:05:a9:f3:ac:4f:69:c5:35:
c0:4f:6d:d5:15:9c:4d:42:3f:21:4b:8c:ce:c4:e4:
67:4a:17:ad:ab:71:0e:cc:57:17:45:43:17:01:ca:
3b:b3:25:85:68:56:92:5d:d8:10:f0:33:53:a0:11:
ee:59:3a:04:60:4f:8e:a0:a7:76:86:d3:05:84:92:
5b:dd:66:76:32:f2:26:cc:b5:66:c0:12:8a:48:d4:
07:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:43:E5:01:FE:92:9B:B5:48:C0:EA:E6:E8:46:E6:09:2F:A8:21:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
X509v3 Authority Key Identifier:
keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
sbgp-ipAddrBlock: critical
IPv4:
172.99.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d1:5e:1e:fa:b6:a9:18:cf:7f:88:79:fa:83:96:21:bf:06:
99:e7:3d:37:b5:8d:46:13:77:6c:19:fe:d1:ca:3f:92:30:70:
93:3f:8b:a3:26:5d:21:70:6c:b1:e5:39:43:28:e2:93:e7:47:
ae:e1:bf:95:9a:87:06:82:6b:f6:ae:92:e3:6f:df:41:94:e2:
00:53:4b:4e:4a:32:07:4b:f1:30:7b:c2:8b:a4:9f:03:0f:eb:
9b:0b:74:58:7e:fb:62:ee:1b:0c:93:1e:91:27:42:5e:e6:57:
80:48:aa:d4:c9:e3:e9:f6:ad:37:21:4a:33:a0:69:71:67:2d:
68:c8:c9:db:4d:cf:e0:90:e4:e5:b9:b9:2e:0a:dc:50:f2:d5:
8b:03:d1:77:59:02:1a:86:e1:5f:44:fd:e7:aa:96:a0:ce:47:
37:11:17:d4:69:c0:54:23:85:62:ad:7a:3c:6e:d5:34:a5:21:
56:5b:5a:dc:f8:81:10:dc:30:e1:87:2f:e8:86:11:6f:51:a7:
60:37:51:48:21:f6:67:2d:2a:a3:cd:36:fc:8d:95:40:0f:77:
8f:55:f6:96:55:d1:ed:70:e1:ed:65:eb:0e:2a:ac:5f:68:ed:
94:3b:c7:58:9d:2c:2a:15:53:25:d5:73:01:cd:1f:6b:60:22:
d6:90:30:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEguwBBDR/YwBmLydAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3
ZTRmMB4XDTI0MTIxMjE0MDA1MVoXDTI1MDMxMjEzMDA1MVowLzEtMCsGA1UEAxMk
ZDQ4MDFjNmItNmVmOS00NTU4LTlmNTctODEyNjUyYjBhODIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvl//0CdBHfI5vOJgWJ39rkpWurgE50ZTuhW
ljb92XWrDRi5BzldDUXV6tbygKJJEQbKdkuj+H+UJrQwTCcJRQM8sFz7SAglZfXG
grAS1mOF9BNU5LZLER2DZa2LU/UCx2mDmwFnPdCuwyF3L6i0ybhJW/jSy3gpKXDF
Nz5rM8amhdU+DBKwI2w4HNdb+NPm1F+7Wy2HRPxk2E5MlV+6lBc+zShCvBFA+LsI
BanzrE9pxTXAT23VFZxNQj8hS4zOxORnShetq3EOzFcXRUMXAco7syWFaFaSXdgQ
8DNToBHuWToEYE+OoKd2htMFhJJb3WZ2MvImzLVmwBKKSNQHJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL1D5QH+kpu1SMDq5uhG5gkvqCHzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2
ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvN2I4YWJhMDYtZWFhYi0z
N2NkLThlYzQtYzlhN2VhYTNjNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz
YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz
N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz
ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvRXh76tqkYz3+IefqDliG/BpnnPTe1jUYTd2wZ/tHKP5IwcJM/i6Mm
XSFwbLHlOUMo4pPnR67hv5WahwaCa/aukuNv30GU4gBTS05KMgdL8TB7wouknwMP
65sLdFh++2LuGwyTHpEnQl7mV4BIqtTJ4+n2rTchSjOgaXFnLWjIydtNz+CQ5OW5
uS4K3FDy1YsD0XdZAhqG4V9E/eeqlqDORzcRF9RpwFQjhWKtejxu1TSlIVZbWtz4
gRDcMOGHL+iGEW9Rp2A3UUgh9mctKqPNNvyNlUAPd49V9pZV0e1w4e1l6w4qrF9o
7ZQ7x1idLCoVUyXVcwHNH2tgItaQMNk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:41:22 2025 by rpki-client