Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/09f5098a-0bb3-3d4e-8650-5fa7fdc0656e.roa
File: 09f5098a-0bb3-3d4e-8650-5fa7fdc0656e.roa (raw, json)
Hash identifier: LpbGl+heAeAykjvfPVi/no71MFBszecILMuBX1vRsDc=
Subject key identifier: 9E:7C:56:A1:26:66:45:6B:36:BB:73:96:D6:10:80:5A:AE:F2:00:7B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FEC5BD1E6A7C3BD35E82E7900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/09f5098a-0bb3-3d4e-8650-5fa7fdc0656e.roa
Signing time: Tue 15 Nov 2022 15:06:07 +0000
ROA not before: Tue 15 Nov 2022 15:06:07 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 56.234.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ec:5b:d1:e6:a7:c3:bd:35:e8:2e:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 15 15:06:07 2022 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=71fc47d0-406f-4c0e-bc09-f0ec217477f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:5d:62:9c:5c:79:a9:ac:5a:05:e4:40:e3:
05:53:df:26:e0:3c:c4:c0:3d:51:58:59:de:4c:4e:
da:e3:4c:c5:04:eb:25:b1:04:ce:89:92:be:f8:7f:
91:9e:2f:15:21:8e:f8:13:51:69:d9:33:06:c1:9e:
34:45:83:9c:92:89:69:b6:a9:f3:af:26:e8:b7:56:
77:5b:20:bc:38:46:c4:1f:8a:a0:7b:c8:dc:b2:f8:
33:fb:07:51:91:77:df:73:83:85:3d:74:c9:d1:03:
68:2b:8c:b0:c6:c9:b5:e7:22:06:cf:12:6b:4b:1d:
68:c5:72:53:dc:f5:43:94:70:70:59:28:96:60:e5:
8c:59:98:50:89:ef:ee:96:9c:09:b4:f2:b5:86:a6:
51:16:d2:e2:b4:29:7c:e4:cd:20:70:6d:ba:98:f1:
66:83:95:9b:9f:e9:92:91:49:5b:cd:0f:98:52:b7:
97:3c:23:d7:56:8e:c9:15:1d:c1:2d:c2:44:e7:a8:
19:12:12:0e:81:c1:d4:0f:56:97:0b:54:57:46:cd:
91:ae:24:48:2a:87:53:c9:94:dd:0f:d0:16:23:09:
10:02:38:70:02:64:74:80:64:85:30:19:72:dd:0f:
67:d9:b7:33:f3:cd:01:06:5c:41:a3:21:41:cc:c0:
8c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7C:56:A1:26:66:45:6B:36:BB:73:96:D6:10:80:5A:AE:F2:00:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/09f5098a-0bb3-3d4e-8650-5fa7fdc0656e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.234.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:6d:f3:25:8e:50:a3:8c:73:71:eb:9b:b7:b8:b0:dc:af:2c:
1d:f7:ab:9e:c1:2c:fa:35:b7:c4:89:17:7f:05:3b:99:29:8f:
f3:68:df:95:77:56:08:bf:bc:c1:e2:2f:d6:31:43:d9:f8:7c:
e6:f9:d6:e2:07:c8:8a:4b:cc:63:bf:75:b8:d0:28:0d:00:62:
b0:02:2b:d2:39:58:72:e3:77:bf:fd:27:f5:12:55:a6:5a:3c:
5e:36:06:94:47:a1:1b:79:e1:35:ce:b2:c8:6c:97:73:77:65:
fb:03:4b:1b:8c:92:95:06:92:90:c1:b3:5a:97:1e:92:c7:89:
86:d8:1a:2d:01:63:f7:28:1d:a8:6c:5b:68:e3:00:ae:b6:1c:
5d:b5:d9:97:17:8d:8a:90:0d:3a:a0:db:53:23:a2:80:22:31:
1a:e7:c0:67:7e:20:b5:b8:d9:60:c8:ac:39:45:ac:b3:e4:e2:
84:6a:b6:95:d6:61:ea:71:81:a0:55:dd:21:c3:06:a1:ee:d2:
0f:a7:93:a1:aa:37:77:8d:57:c8:a5:e3:8d:f6:29:98:57:91:
26:ea:83:00:4a:7e:38:6f:1f:94:8b:7c:54:e3:55:a7:ee:c1:
91:d8:d5:d0:2b:b3:12:42:e1:9f:64:d0:68:f4:4a:21:a6:6b:
8b:cc:86:b1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/sW9Hmp8O9NegueQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNTE1MDYwN1oXDTIyMTIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
NzFmYzQ3ZDAtNDA2Zi00YzBlLWJjMDktZjBlYzIxNzQ3N2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrtdYpxceamsWgXkQOMFU98m4DzEwD1RWFne
TE7a40zFBOslsQTOiZK++H+Rni8VIY74E1Fp2TMGwZ40RYOckolptqnzrybot1Z3
WyC8OEbEH4qge8jcsvgz+wdRkXffc4OFPXTJ0QNoK4ywxsm15yIGzxJrSx1oxXJT
3PVDlHBwWSiWYOWMWZhQie/ulpwJtPK1hqZRFtLitCl85M0gcG26mPFmg5Wbn+mS
kUlbzQ+YUreXPCPXVo7JFR3BLcJE56gZEhIOgcHUD1aXC1RXRs2RriRIKodTyZTd
D9AWIwkQAjhwAmR0gGSFMBly3Q9n2bcz880BBlxBoyFBzMCMlQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ58VqEmZkVrNrtzltYQgFqu8gB7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDlmNTA5OGEtMGJiMy0z
ZDRlLTg2NTAtNWZhN2ZkYzA2NTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOOowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEALm3zJY5Qo4xzceubt7iw3K8sHfernsEs+jW3xIkXfwU7mSmP82jflXdW
CL+8weIv1jFD2fh85vnW4gfIikvMY791uNAoDQBisAIr0jlYcuN3v/0n9RJVplo8
XjYGlEehG3nhNc6yyGyXc3dl+wNLG4ySlQaSkMGzWpcekseJhtgaLQFj9ygdqGxb
aOMArrYcXbXZlxeNipANOqDbUyOigCIxGufAZ34gtbjZYMisOUWss+TihGq2ldZh
6nGBoFXdIcMGoe7SD6eToao3d41XyKXjjfYpmFeRJuqDAEp+OG8flIt8VONVp+7B
kdjV0CuzEkLhn2TQaPRKIaZri8yGsQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:18:53 2025 by rpki-client