Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22eea0c8-b542-3d3b-bdf8-7f232e415b03.roa
File: 22eea0c8-b542-3d3b-bdf8-7f232e415b03.roa (raw, json)
Hash identifier: 2VroGRQMf5f15x5esz9qmaktPB7f0Z4xFRUsPTUquOg=
Subject key identifier: F1:35:C7:91:80:E3:42:C4:94:CE:BA:EE:74:B3:C5:8D:37:C3:7A:B9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584079144C923B7436DE4C584E40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22eea0c8-b542-3d3b-bdf8-7f232e415b03.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.16.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:79:14:4c:92:3b:74:36:de:4c:58:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=5e12145b-fd4e-434b-83e6-c04d0949e135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:ee:35:16:ac:e1:d0:7f:79:62:98:aa:32:
af:d6:ce:1a:bf:34:78:e9:bb:13:36:f8:6e:05:c8:
69:2d:8a:ec:35:29:25:7c:c8:a6:24:43:b3:af:6e:
31:0d:b8:18:86:96:b0:7c:db:32:f5:42:90:8a:72:
22:78:9d:76:16:98:82:88:46:d8:b8:cf:1d:dc:2e:
3c:59:47:24:76:6c:e9:9a:c5:d7:b2:26:8d:99:04:
b4:aa:ee:47:44:ab:cd:f2:19:af:b3:4c:28:9c:db:
fb:60:83:59:e1:66:99:6e:b1:e8:c0:5b:7b:db:ea:
9c:ad:ba:e2:57:69:7d:88:e2:16:0a:e8:0a:e1:7e:
79:08:07:40:d9:96:31:07:ac:28:93:c3:f7:b7:78:
0b:3d:f0:77:b7:42:20:55:11:c3:7b:44:21:98:56:
7a:5a:4a:3f:79:7f:fc:a6:06:97:b6:c6:ba:90:ec:
4d:ad:47:33:ed:d4:a9:41:9f:dd:78:60:ee:52:87:
f5:f7:9c:c6:35:81:cb:46:33:19:5b:e1:2b:7e:74:
0d:0e:9d:f9:fe:4b:bf:92:d3:76:c7:50:a0:4a:56:
09:44:a0:f0:35:ff:6d:f0:f1:a3:57:91:36:0c:31:
0d:64:92:2e:4b:bc:f8:ca:3e:e0:d9:1e:f0:59:7d:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:35:C7:91:80:E3:42:C4:94:CE:BA:EE:74:B3:C5:8D:37:C3:7A:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/22eea0c8-b542-3d3b-bdf8-7f232e415b03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:c2:ef:1e:1f:e1:12:25:c7:f7:3c:1f:ee:35:e6:b5:0b:0f:
32:e4:7c:03:87:65:e1:88:51:1c:01:b0:5c:cc:8d:bc:22:80:
74:f6:6e:c5:d2:8e:bc:f9:42:ac:19:bc:38:92:3d:79:52:e6:
78:a0:c1:eb:08:76:fe:ff:da:db:11:8a:4e:8a:29:62:7d:cb:
a5:f1:d0:ba:22:84:3f:85:4a:d7:07:71:8b:35:4b:ab:74:a3:
71:98:bf:bf:97:96:1e:f2:5e:bb:6c:8f:81:45:88:36:d4:e0:
ab:66:ff:2a:d7:66:a0:64:4b:48:ee:65:d7:33:14:12:90:7d:
fe:e4:d9:cb:e2:de:e5:bc:03:df:e8:2c:3d:54:73:a1:d4:90:
fe:a2:68:3a:60:89:57:f3:ba:43:64:40:ca:df:85:c2:5f:54:
87:84:53:2f:7a:7c:7e:5d:b7:2c:bb:ae:39:c7:a8:7c:a9:94:
9a:43:0a:54:f4:b0:3a:0b:5e:b5:20:a1:1a:65:d7:0d:70:bc:
42:a6:ec:2f:f8:03:69:68:e2:cb:44:ba:7e:77:a3:d2:65:b6:
cb:c9:9d:91:86:64:88:23:64:e6:3a:15:ca:a2:3d:55:8e:62:
ba:fd:da:1e:5a:60:22:f3:4e:4b:de:54:bd:af:49:5c:c9:70:
71:b4:ac:95
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB5FEySO3Q23kxYTkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwNDEyMDAwMFoXDTIzMDIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
NWUxMjE0NWItZmQ0ZS00MzRiLTgzZTYtYzA0ZDA5NDllMTM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JnuNRas4dB/eWKYqjKv1s4avzR46bsTNvhu
BchpLYrsNSklfMimJEOzr24xDbgYhpawfNsy9UKQinIieJ12FpiCiEbYuM8d3C48
WUckdmzpmsXXsiaNmQS0qu5HRKvN8hmvs0wonNv7YINZ4WaZbrHowFt72+qcrbri
V2l9iOIWCugK4X55CAdA2ZYxB6wok8P3t3gLPfB3t0IgVRHDe0QhmFZ6Wko/eX/8
pgaXtsa6kOxNrUcz7dSpQZ/deGDuUof195zGNYHLRjMZW+ErfnQNDp35/ku/ktN2
x1CgSlYJRKDwNf9t8PGjV5E2DDENZJIuS7z4yj7g2R7wWX2nWwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPE1x5GA40LElM667nSzxY03w3q5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjJlZWEwYzgtYjU0Mi0z
ZDNiLWJkZjgtN2YyMzJlNDE1YjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOBAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFsLvHh/hEiXH9zwf7jXmtQsPMuR8A4dl4YhRHAGwXMyNvCKAdPZuxdKO
vPlCrBm8OJI9eVLmeKDB6wh2/v/a2xGKToopYn3LpfHQuiKEP4VK1wdxizVLq3Sj
cZi/v5eWHvJeu2yPgUWINtTgq2b/KtdmoGRLSO5l1zMUEpB9/uTZy+Le5bwD3+gs
PVRzodSQ/qJoOmCJV/O6Q2RAyt+Fwl9Uh4RTL3p8fl23LLuuOceofKmUmkMKVPSw
OgtetSChGmXXDXC8QqbsL/gDaWjiy0S6fnej0mW2y8mdkYZkiCNk5joVyqI9VY5i
uv3aHlpgIvNOS95Uva9JXMlwcbSslQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:54 2025 by rpki-client