Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/170dcef6-b7f3-3419-8840-764c6f2f2c30.roa
File: 170dcef6-b7f3-3419-8840-764c6f2f2c30.roa (raw, json)
Hash identifier: gXhlsuvEv3wj3Tg6jh+1lvir68UQoOtxHCP+ZIXXyGk=
Subject key identifier: 46:5D:D8:05:F1:FE:33:85:69:FD:47:29:A5:BD:48:5D:DC:AF:7D:E0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA4B3FFB4942252FDEB481A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/170dcef6-b7f3-3419-8840-764c6f2f2c30.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a4:b3:ff:b4:94:22:52:fd:eb:48:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=32e5edb3-c2fb-49fe-b22c-1d98a51482b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2a:fb:0a:e0:9f:1e:53:ba:fe:66:b2:6d:fd:
cc:98:c6:9f:87:33:27:96:68:ce:74:ee:7a:8e:74:
d9:86:35:7f:cf:fd:dc:cc:b2:ae:6b:04:82:6a:c3:
5d:6a:a9:55:7a:65:88:0b:a0:7f:43:91:49:97:6f:
99:b9:ff:2e:cc:bc:8f:c9:53:4c:d1:c4:7a:fe:76:
23:d9:aa:73:fe:14:5d:8b:a8:fd:17:b4:37:c1:2e:
bc:33:97:31:5e:e4:90:74:22:1e:3d:cb:fa:e2:7c:
e6:67:df:a8:7c:35:11:4d:f4:d9:89:b2:db:84:88:
eb:58:2f:47:7b:2d:20:68:4a:0a:08:7a:99:4b:9a:
f6:db:e0:89:eb:15:70:f0:7a:30:8e:42:3f:80:46:
d2:24:4e:c8:0f:bc:1b:fb:2e:a8:20:6e:ef:59:a2:
9e:9b:db:88:c5:0b:94:9d:f7:1e:4f:78:16:98:43:
1a:91:72:4a:64:89:04:db:f2:aa:f0:a8:fc:9d:b2:
09:49:a2:df:68:6b:72:52:b3:a8:c6:be:12:43:69:
4e:9a:e7:b4:e7:8f:54:79:75:af:e6:62:2c:b0:53:
45:b4:ce:e1:5c:ea:64:9d:d7:ae:f0:f6:73:50:16:
02:2a:23:cd:59:e7:c9:45:04:0f:33:c8:35:23:65:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5D:D8:05:F1:FE:33:85:69:FD:47:29:A5:BD:48:5D:DC:AF:7D:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/170dcef6-b7f3-3419-8840-764c6f2f2c30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:4f:b4:c6:2b:5d:8e:98:91:71:30:f1:98:c0:89:ad:fd:fc:
5e:01:35:6b:a8:ad:f6:65:51:e5:ec:37:a0:ce:e8:b3:4c:fe:
00:d4:56:4c:99:ba:c5:eb:92:2a:fb:0c:12:ae:41:5c:44:a5:
c6:e2:dd:54:7f:e5:43:ab:5f:4c:cb:7d:55:77:d6:14:c5:6e:
31:67:99:53:c2:47:b3:69:53:dd:3d:1f:32:70:e5:3b:5d:ef:
41:eb:c7:ad:f0:7c:34:1a:f1:80:e6:f4:a1:83:f7:93:c5:07:
c7:a2:2d:dc:18:17:e9:3e:0d:76:d3:3a:d9:06:22:38:9d:53:
53:9d:62:e9:44:08:f3:64:d2:3d:61:3a:bf:a7:dd:3c:aa:59:
d8:ac:f7:ab:07:ff:9a:d1:8f:53:97:52:01:e9:dd:b0:f3:db:
db:12:46:03:e8:74:8a:8d:aa:8b:64:f1:7d:a1:24:78:c3:11:
fa:b0:90:8e:86:36:3b:8e:1f:33:ef:08:6a:c3:f1:cd:5f:8a:
b6:37:72:95:95:16:d8:ab:6f:f4:8c:11:37:48:2e:e6:8c:b1:
ca:aa:60:13:66:9b:cd:74:d0:96:95:e4:9d:65:4f:d9:d1:84:
01:d3:d9:82:74:54:ca:2e:10:dd:27:71:f3:e4:86:52:2b:72:
fb:92:10:75
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+ks/+0lCJS/etIGoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyMDEyMDAwMFoXDTIyMTEyNTA1MDAwMFowLzEtMCsGA1UEAxMk
MzJlNWVkYjMtYzJmYi00OWZlLWIyMmMtMWQ5OGE1MTQ4MmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSr7CuCfHlO6/maybf3MmMafhzMnlmjOdO56
jnTZhjV/z/3czLKuawSCasNdaqlVemWIC6B/Q5FJl2+Zuf8uzLyPyVNM0cR6/nYj
2apz/hRdi6j9F7Q3wS68M5cxXuSQdCIePcv64nzmZ9+ofDURTfTZibLbhIjrWC9H
ey0gaEoKCHqZS5r22+CJ6xVw8HowjkI/gEbSJE7ID7wb+y6oIG7vWaKem9uIxQuU
nfceT3gWmEMakXJKZIkE2/Kq8Kj8nbIJSaLfaGtyUrOoxr4SQ2lOmue0549UeXWv
5mIssFNFtM7hXOpkndeu8PZzUBYCKiPNWefJRQQPM8g1I2U8mQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEZd2AXx/jOFaf1HKaW9SF3cr33gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTcwZGNlZjYtYjdmMy0z
NDE5LTg4NDAtNzY0YzZmMmYyYzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANhUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoU+0xitdjpiRcTDxmMCJrf38XgE1a6it9mVR5ew3oM7os0z+ANRWTJm6
xeuSKvsMEq5BXESlxuLdVH/lQ6tfTMt9VXfWFMVuMWeZU8JHs2lT3T0fMnDlO13v
QevHrfB8NBrxgOb0oYP3k8UHx6It3BgX6T4NdtM62QYiOJ1TU51i6UQI82TSPWE6
v6fdPKpZ2Kz3qwf/mtGPU5dSAendsPPb2xJGA+h0io2qi2TxfaEkeMMR+rCQjoY2
O44fM+8IasPxzV+KtjdylZUW2Ktv9IwRN0gu5oyxyqpgE2abzXTQlpXknWVP2dGE
AdPZgnRUyi4Q3Sdx8+SGUity+5IQdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:26 2025 by rpki-client