Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3256457d-ac84-3740-9d80-fc12dd83ec03.roa
File: 3256457d-ac84-3740-9d80-fc12dd83ec03.roa (raw, json)
Hash identifier: 9dT6z67j94Wz+l6HLFbEOKw/j5DiPCrjsLItKlJIczk=
Subject key identifier: 35:DA:3D:1A:17:9E:C3:A0:C0:99:16:22:DF:F1:58:72:24:0C:C8:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C3AB96534EFC7F20A86FC9C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3256457d-ac84-3740-9d80-fc12dd83ec03.roa
Signing time: Tue 31 Jan 2023 12:00:00 +0000
ROA not before: Tue 31 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c3:ab:96:53:4e:fc:7f:20:a8:6f:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 31 12:00:00 2023 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=592446be-2f25-45b6-8751-40138a21162e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7b:06:b8:b7:7d:2b:22:d5:c1:9f:2f:8a:1b:
48:79:b0:14:5c:90:ab:c6:0a:fd:a6:2a:f5:5e:f7:
25:d0:59:dc:1a:a2:5b:d5:41:e3:93:d4:8f:c9:f1:
46:f0:37:41:24:da:40:e1:5f:f1:13:ae:70:4e:14:
88:05:a4:fc:b0:ca:0b:08:20:7a:34:57:85:03:c9:
72:28:fb:7a:d0:41:77:0d:19:68:90:c5:d5:90:23:
ba:27:dd:bf:68:07:79:87:fa:27:d6:29:cf:ee:c1:
2f:15:43:b0:9d:d8:b9:f6:90:cb:17:da:71:9f:78:
0d:32:db:f3:16:5d:93:62:96:65:dc:5d:92:3d:76:
b5:91:72:f3:50:19:0b:81:85:2a:85:3f:31:bb:5f:
c4:88:98:21:09:33:fc:f2:93:2d:2e:0c:b0:af:7c:
61:12:82:5d:be:e3:07:e1:8e:b0:2f:97:47:74:ad:
cc:3f:c3:bf:a7:42:7d:c4:c8:44:43:4e:9e:86:7b:
2f:d2:dd:00:d2:17:22:7f:22:d1:f5:5d:d1:7a:c0:
4e:6d:9a:db:05:87:71:61:9a:cc:cc:a3:4e:eb:bd:
be:67:c2:1e:ae:a8:1f:bd:cd:37:e4:01:08:57:1a:
45:e0:de:5b:bc:5b:9b:0c:61:84:cd:cc:1e:44:41:
6d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DA:3D:1A:17:9E:C3:A0:C0:99:16:22:DF:F1:58:72:24:0C:C8:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3256457d-ac84-3740-9d80-fc12dd83ec03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:24:04:73:94:6f:d9:b4:57:a7:08:2c:92:a8:b3:e8:99:a7:
c2:5e:c1:91:56:d8:c1:5c:8c:42:dc:c7:a2:e8:91:04:60:f7:
ef:cb:8c:f5:f3:88:87:18:7a:79:85:d4:0c:5a:65:d6:02:19:
0d:55:4c:73:32:30:bf:7a:fd:16:59:3a:22:86:b9:d0:b0:92:
df:6d:5e:70:ba:1a:24:0d:3b:29:e8:92:c0:2b:6d:74:c4:ca:
e0:b1:ac:1b:e4:d0:b6:c2:40:63:d3:23:86:13:dc:c7:0b:26:
a6:64:72:b3:31:af:b3:87:7e:9d:44:4b:e4:43:f5:f5:71:38:
16:b0:d5:72:a3:c8:63:ec:d7:5c:a0:58:f4:24:4f:41:60:67:
5a:3d:90:f7:f4:1e:cc:01:dc:7c:66:cc:10:61:22:92:c8:66:
66:88:55:45:29:59:f4:52:c9:72:52:80:fe:99:c9:5e:f7:c6:
dc:0a:59:96:07:8d:bb:50:df:75:6a:87:3b:5b:cb:16:cf:d9:
bc:92:b2:71:23:63:73:57:98:93:27:58:78:87:6f:c7:30:3a:
1e:75:1c:95:57:53:83:6f:37:ec:e6:49:6f:7d:4f:cd:c4:d1:
51:9c:56:e3:c0:4b:a2:57:7b:46:76:38:3a:7d:e6:63:66:2f:
34:fd:01:03
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDDq5ZTTvx/IKhvycAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEzMTEyMDAwMFoXDTIzMDMwODA1MDAwMFowLzEtMCsGA1UEAxMk
NTkyNDQ2YmUtMmYyNS00NWI2LTg3NTEtNDAxMzhhMjExNjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHsGuLd9KyLVwZ8vihtIebAUXJCrxgr9pir1
Xvcl0FncGqJb1UHjk9SPyfFG8DdBJNpA4V/xE65wThSIBaT8sMoLCCB6NFeFA8ly
KPt60EF3DRlokMXVkCO6J92/aAd5h/on1inP7sEvFUOwndi59pDLF9pxn3gNMtvz
Fl2TYpZl3F2SPXa1kXLzUBkLgYUqhT8xu1/EiJghCTP88pMtLgywr3xhEoJdvuMH
4Y6wL5dHdK3MP8O/p0J9xMhEQ06ehnsv0t0A0hcifyLR9V3ResBObZrbBYdxYZrM
zKNO672+Z8Ierqgfvc035AEIVxpF4N5bvFubDGGEzcweREFt7QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDXaPRoXnsOgwJkWIt/xWHIkDMg/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzI1NjQ1N2QtYWM4NC0z
NzQwLTlkODAtZmMxMmRkODNlYzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAODAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAyQEc5Rv2bRXpwgskqiz6Jmnwl7BkVbYwVyMQtzHouiRBGD378uM9fOI
hxh6eYXUDFpl1gIZDVVMczIwv3r9Flk6Ioa50LCS321ecLoaJA07KeiSwCttdMTK
4LGsG+TQtsJAY9MjhhPcxwsmpmRyszGvs4d+nURL5EP19XE4FrDVcqPIY+zXXKBY
9CRPQWBnWj2Q9/QezAHcfGbMEGEikshmZohVRSlZ9FLJclKA/pnJXvfG3ApZlgeN
u1DfdWqHO1vLFs/ZvJKycSNjc1eYkydYeIdvxzA6HnUclVdTg2837OZJb31PzcTR
UZxW48BLold7RnY4On3mY2YvNP0BAw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:08 2025 by rpki-client