Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0259fcad-99b3-3e00-a535-b77d2ebba6de.roa
File: 0259fcad-99b3-3e00-a535-b77d2ebba6de.roa (raw, json)
Hash identifier: b+QtuVLTpGSw7uBuQvJw8CzU0bGR3VnQdP2ErDqaB5w=
Subject key identifier: 1D:92:1C:FD:46:4B:A0:C1:74:7F:9A:F6:D6:5F:F8:E2:56:C6:C1:1F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D0C6BA5CFD1F4EDEBFFEE2200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0259fcad-99b3-3e00-a535-b77d2ebba6de.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 158.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0c:6b:a5:cf:d1:f4:ed:eb:ff:ee:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=80d9d799-aff2-456a-b734-0243793f4158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b3:b4:84:3c:13:78:4e:70:c1:dc:aa:f5:85:
db:b3:65:b3:db:40:86:63:86:b9:03:d3:37:b7:46:
d8:46:0c:b7:79:3d:52:0c:ff:a1:f5:9e:62:a9:48:
63:45:b9:a6:8a:b4:ad:51:0e:98:a2:c8:95:e0:45:
d7:fd:b8:4f:c4:a4:9c:8a:75:7e:9c:1e:00:69:eb:
f4:a6:e0:3f:73:c1:ff:75:ef:39:a7:66:56:93:b3:
53:c6:c8:3e:dd:4d:e5:86:fc:fa:38:0a:05:a7:ca:
1b:a3:37:8b:18:eb:77:2d:98:49:5a:bb:ea:c1:e1:
6a:57:83:2e:6f:93:c1:57:66:12:09:72:b4:de:27:
52:fe:8c:f9:45:bf:f2:fb:f6:d3:a7:43:5f:35:a4:
d4:5d:a3:ff:f7:78:34:e9:71:54:9a:a3:02:16:7d:
49:41:10:59:74:5a:54:2c:f7:c1:8e:14:70:c4:c5:
b6:7b:24:cd:b5:50:10:86:35:82:3a:de:e5:fa:df:
0e:28:ad:57:5f:c3:3b:86:40:22:ea:b9:7a:15:5f:
99:d1:b1:15:14:34:e6:ec:7f:60:2f:53:2b:5d:f5:
32:92:73:aa:fd:5f:d1:eb:ad:fb:40:81:c4:8c:90:
16:88:c7:4d:3e:23:03:e8:61:0e:50:b1:9e:b8:65:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:92:1C:FD:46:4B:A0:C1:74:7F:9A:F6:D6:5F:F8:E2:56:C6:C1:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0259fcad-99b3-3e00-a535-b77d2ebba6de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:6b:b0:95:7c:34:61:f2:f4:42:4b:57:fc:09:ef:bd:b5:f5:
10:f1:ed:b9:28:2a:55:88:cb:4a:e2:ef:e8:ae:89:ac:54:1a:
af:d0:f4:f7:29:3c:59:bc:40:17:9f:6e:d7:58:49:f0:12:97:
31:c5:6e:02:89:27:c5:ce:92:26:30:85:3c:90:69:c3:68:3e:
9d:36:a9:53:eb:d7:f3:a5:22:b1:27:f6:d1:1f:4d:59:a3:5b:
f6:a6:f7:7d:d8:ce:7c:35:2e:a1:02:75:ee:f0:61:48:83:b6:
c0:a8:e8:a9:c6:30:23:47:29:3c:78:91:e8:dc:92:33:a5:c7:
a6:ed:d7:9c:18:89:74:3a:fc:5c:09:5b:fa:2a:71:b8:2d:c9:
98:e6:f8:f2:7f:e9:11:57:cb:90:d9:45:01:ab:39:c9:61:cf:
0f:bf:36:25:9c:af:e9:a4:4d:df:94:d7:c4:c0:1c:ed:3c:ce:
8a:4b:9f:25:35:52:8e:66:a3:00:f0:98:bb:0c:d2:d0:c9:6a:
0f:0a:f6:2f:ea:4c:22:55:39:1c:0e:94:c1:97:40:09:b5:69:
5d:c7:4e:10:a4:ed:85:2b:2a:59:c3:5f:26:7b:12:8e:7d:bb:
59:c9:13:71:32:4a:aa:32:99:90:0b:1e:23:d5:0e:b6:60:26:
47:3a:7c:b4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0Ma6XP0fTt6//uIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
ODBkOWQ3OTktYWZmMi00NTZhLWI3MzQtMDI0Mzc5M2Y0MTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLO0hDwTeE5wwdyq9YXbs2Wz20CGY4a5A9M3
t0bYRgy3eT1SDP+h9Z5iqUhjRbmmirStUQ6YosiV4EXX/bhPxKScinV+nB4Aaev0
puA/c8H/de85p2ZWk7NTxsg+3U3lhvz6OAoFp8obozeLGOt3LZhJWrvqweFqV4Mu
b5PBV2YSCXK03idS/oz5Rb/y+/bTp0NfNaTUXaP/93g06XFUmqMCFn1JQRBZdFpU
LPfBjhRwxMW2eyTNtVAQhjWCOt7l+t8OKK1XX8M7hkAi6rl6FV+Z0bEVFDTm7H9g
L1MrXfUyknOq/V/R6637QIHEjJAWiMdNPiMD6GEOULGeuGW7EQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB2SHP1GS6DBdH+a9tZf+OJWxsEfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDI1OWZjYWQtOTliMy0z
ZTAwLWE1MzUtYjc3ZDJlYmJhNmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnjgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkWuwlXw0YfL0QktX/AnvvbX1EPHtuSgqVYjLSuLv6K6JrFQar9D09yk8
WbxAF59u11hJ8BKXMcVuAoknxc6SJjCFPJBpw2g+nTapU+vX86UisSf20R9NWaNb
9qb3fdjOfDUuoQJ17vBhSIO2wKjoqcYwI0cpPHiR6NySM6XHpu3XnBiJdDr8XAlb
+ipxuC3JmOb48n/pEVfLkNlFAas5yWHPD782JZyv6aRN35TXxMAc7TzOikufJTVS
jmajAPCYuwzS0MlqDwr2L+pMIlU5HA6UwZdACbVpXcdOEKTthSsqWcNfJnsSjn27
WckTcTJKqjKZkAseI9UOtmAmRzp8tA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:57:43 2025 by rpki-client