Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a778095-47a1-374d-999f-5b139c7e4ba4.roa
File: 2a778095-47a1-374d-999f-5b139c7e4ba4.roa (raw, json)
Hash identifier: 20aHBjOl2IWTJR5RA1cLiAm87WSGIkNQsRqyZaZFzN4=
Subject key identifier: CF:BC:AB:7E:84:02:37:59:5D:E6:E6:CD:B8:DB:F3:99:29:BD:BB:12
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCB68CFA75FE747F84748B500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a778095-47a1-374d-999f-5b139c7e4ba4.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:68:cf:a7:5f:e7:47:f8:47:48:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=da177236-a8c7-4f12-9f16-4d482a04b977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3e:c6:b9:ed:aa:88:a7:42:ef:08:8b:c5:c0:
e5:55:87:7a:8e:d3:32:ee:73:9e:9a:c3:73:ae:db:
d6:99:69:8c:f8:ec:bf:bb:ae:4e:b8:f3:70:6e:87:
6d:1b:83:40:dc:a8:7b:83:fd:2e:a0:21:97:8f:1c:
5b:04:e8:9f:8c:a0:28:9c:4e:4d:62:5b:3a:3e:aa:
48:65:9c:96:91:76:1a:7d:4e:8b:27:aa:2d:37:fc:
26:3b:8d:55:83:22:44:85:7d:2d:cd:c4:0f:8f:bd:
c6:c0:8d:c9:69:4f:19:57:1d:d6:50:e3:8e:c5:72:
82:43:ba:89:0b:9c:cd:e1:26:77:90:78:25:49:81:
43:7b:62:77:54:0a:2f:cb:6d:02:7d:fc:6d:e1:1b:
02:c4:70:cb:fc:1f:89:0f:fe:63:d8:9c:a3:c7:06:
eb:2a:0f:03:8b:86:23:fd:ae:08:f6:6f:97:25:94:
a7:13:fd:aa:6a:39:e7:36:a4:42:38:4b:f9:82:df:
8a:63:8d:58:65:50:fb:25:8a:2b:bf:f7:6e:0b:a7:
30:2e:b5:5e:ce:71:0a:34:32:b2:f7:db:e6:d3:10:
9e:31:3a:92:38:18:40:b7:5e:5a:c4:5f:a0:11:bf:
88:1a:79:ff:33:08:6b:bb:6d:b4:1b:3a:3f:94:6c:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:BC:AB:7E:84:02:37:59:5D:E6:E6:CD:B8:DB:F3:99:29:BD:BB:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a778095-47a1-374d-999f-5b139c7e4ba4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:a4:a3:14:6b:fd:b7:04:ef:51:66:85:b3:6c:75:98:d3:de:
d2:cf:9b:a0:cf:6d:7d:a8:84:55:e7:c4:1d:21:e4:4c:31:49:
08:2a:a3:50:39:4c:9b:12:2b:2c:81:b6:fc:c4:a5:14:1a:de:
f4:44:25:3d:57:2f:c9:89:20:1a:3f:e0:ca:f2:c3:3b:2d:ac:
c5:26:6e:a1:9c:64:21:e9:e2:4a:22:13:99:6b:59:e6:a1:12:
0d:13:61:7c:3d:e9:5e:e9:26:aa:a5:b1:94:6a:9e:32:c9:b7:
ac:91:bd:19:b8:1f:84:be:23:1a:d8:55:87:e3:0a:da:58:45:
84:95:70:12:d0:3c:8b:e4:28:b2:ca:3a:fb:63:11:6a:9b:b9:
87:b1:e8:d2:d7:28:90:39:89:d2:f1:97:4b:19:69:cb:d4:6f:
85:be:05:03:4a:b9:93:51:e2:9d:14:02:73:2d:0a:30:ae:ef:
70:2e:2b:60:4c:3d:0b:5c:9f:05:2a:1c:f2:f1:2f:d0:f2:c6:
c4:ae:b3:1e:e0:30:c3:60:17:86:e9:da:71:4c:a4:df:8b:23:
dc:87:5b:be:1a:f4:8d:1d:9d:3e:5f:25:c8:7e:10:6b:42:7f:
cf:6e:c0:61:7d:36:06:77:fd:74:a2:e6:86:5a:c1:54:b3:08:
24:18:f2:9b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/LaM+nX+dH+EdItQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZGExNzcyMzYtYThjNy00ZjEyLTlmMTYtNGQ0ODJhMDRiOTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD7Gue2qiKdC7wiLxcDlVYd6jtMy7nOemsNz
rtvWmWmM+Oy/u65OuPNwbodtG4NA3Kh7g/0uoCGXjxxbBOifjKAonE5NYls6PqpI
ZZyWkXYafU6LJ6otN/wmO41VgyJEhX0tzcQPj73GwI3JaU8ZVx3WUOOOxXKCQ7qJ
C5zN4SZ3kHglSYFDe2J3VAovy20Cffxt4RsCxHDL/B+JD/5j2JyjxwbrKg8Di4Yj
/a4I9m+XJZSnE/2qajnnNqRCOEv5gt+KY41YZVD7JYorv/duC6cwLrVeznEKNDKy
99vm0xCeMTqSOBhAt15axF+gEb+IGnn/Mwhru220Gzo/lGwo0QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM+8q36EAjdZXebmzbjb85kpvbsSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmE3NzgwOTUtNDdhMS0z
NzRkLTk5OWYtNWIxMzljN2U0YmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANjcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAM6SjFGv9twTvUWaFs2x1mNPe0s+boM9tfaiEVefEHSHkTDFJCCqjUDlM
mxIrLIG2/MSlFBre9EQlPVcvyYkgGj/gyvLDOy2sxSZuoZxkIeniSiITmWtZ5qES
DRNhfD3pXukmqqWxlGqeMsm3rJG9GbgfhL4jGthVh+MK2lhFhJVwEtA8i+Qosso6
+2MRapu5h7Ho0tcokDmJ0vGXSxlpy9Rvhb4FA0q5k1HinRQCcy0KMK7vcC4rYEw9
C1yfBSoc8vEv0PLGxK6zHuAww2AXhunacUyk34sj3Idbvhr0jR2dPl8lyH4Qa0J/
z27AYX02Bnf9dKLmhlrBVLMIJBjymw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:39 2025 by rpki-client