Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3635a6cc-da6f-3703-b7ad-d9c472d4b626.roa
File: 3635a6cc-da6f-3703-b7ad-d9c472d4b626.roa (raw, json)
Hash identifier: 4KpMm/BZHtUt/2kyxwl3s2y/u4go/e9zPVBB6/eMQRc=
Subject key identifier: 80:9B:14:E1:CC:9A:D6:54:A5:99:A5:B0:0E:75:73:5A:8C:F1:66:11
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840738DAF6E7483E0645A28461A
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3635a6cc-da6f-3703-b7ad-d9c472d4b626.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.36.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:8d:af:6e:74:83:e0:64:5a:28:46:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=3b48bee4-64cc-4313-bbf9-c9a1af1d390e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:59:a7:ff:8c:2f:c9:d1:26:f5:fc:bd:e1:f9:
97:85:a3:c4:34:df:7d:49:33:1c:47:e2:a8:df:f9:
93:d1:06:c7:6c:c9:31:f8:b1:87:17:4b:55:e7:04:
51:a6:21:cf:28:ff:38:e8:7d:98:24:50:49:9d:19:
fd:af:91:87:af:f9:42:88:a3:73:07:5c:e5:41:c9:
d9:2f:4b:82:a6:c2:5a:0c:b5:6d:ea:bc:d2:38:ea:
44:0b:6d:40:17:17:21:8f:42:d1:e5:c4:bf:c1:b0:
8e:4f:f1:71:a7:d4:a5:79:e3:41:4c:b6:7a:1b:48:
a7:39:dd:7f:d1:d5:fa:c0:3a:5d:80:f6:93:29:e1:
a9:31:47:e0:fe:d5:f6:80:1b:43:95:89:4b:b8:cb:
07:f1:2c:48:45:63:43:21:f0:57:56:69:2e:26:c1:
6e:6f:9e:22:98:d2:f1:93:0e:79:56:e2:c9:f1:2d:
5b:40:fc:00:bb:5a:46:95:88:6e:81:2f:77:ca:ec:
27:86:a8:64:37:56:64:41:ce:93:f5:b6:08:36:65:
56:07:37:b9:11:f9:e0:e1:79:9a:d4:fa:fe:58:36:
e5:31:6d:66:19:2a:4e:6c:d8:51:fd:bb:26:78:be:
04:bb:89:a6:69:a5:27:86:f4:ac:82:66:ab:1c:20:
d9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9B:14:E1:CC:9A:D6:54:A5:99:A5:B0:0E:75:73:5A:8C:F1:66:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3635a6cc-da6f-3703-b7ad-d9c472d4b626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.36.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:4f:c3:ca:b2:a6:f1:88:d5:9b:23:32:40:f9:f2:61:e9:ce:
28:a9:e5:e7:fc:ed:5f:0a:ca:fd:2f:4f:0f:34:6b:b6:ae:d5:
ab:43:d5:a5:ba:35:06:1b:79:e6:02:e5:e0:ea:58:b6:e0:e1:
cc:70:e9:f4:51:26:dd:51:c8:59:3f:dd:03:75:11:cf:f1:46:
f9:f1:aa:c8:1e:80:67:ee:9c:18:3f:49:1a:a5:f7:10:58:16:
a4:fc:09:cb:05:3e:2f:4e:4c:bf:8f:c4:12:2d:33:6f:9a:a8:
19:00:64:a1:37:d7:27:23:53:ec:c5:e6:94:d5:23:23:65:b6:
45:c8:67:38:3e:8e:ca:e9:c2:29:74:49:83:75:6e:7a:cb:9f:
31:28:b9:0c:26:24:4b:4c:fc:b2:6b:bd:a6:37:6d:be:1d:ee:
56:b2:c4:b3:2a:43:05:6a:95:8e:00:da:bd:83:99:a1:2c:75:
dc:74:3d:c6:61:e1:5f:64:7c:8c:d2:54:28:e4:3f:a4:cf:46:
73:87:bd:2d:31:46:53:95:a6:5d:6b:80:da:f3:ef:6e:26:4e:
84:95:37:9e:a1:28:db:4b:b1:38:05:a8:c4:90:28:e8:a7:ec:
e0:91:ac:d1:b1:dd:09:93:76:94:4e:66:af:f3:b4:bc:55:25:
cb:a4:ae:52
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBzja9udIPgZFooRhowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwMjEyMDAwMFoXDTIzMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
M2I0OGJlZTQtNjRjYy00MzEzLWJiZjktYzlhMWFmMWQzOTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1mn/4wvydEm9fy94fmXhaPENN99STMcR+Ko
3/mT0QbHbMkx+LGHF0tV5wRRpiHPKP846H2YJFBJnRn9r5GHr/lCiKNzB1zlQcnZ
L0uCpsJaDLVt6rzSOOpEC21AFxchj0LR5cS/wbCOT/Fxp9SleeNBTLZ6G0inOd1/
0dX6wDpdgPaTKeGpMUfg/tX2gBtDlYlLuMsH8SxIRWNDIfBXVmkuJsFub54imNLx
kw55VuLJ8S1bQPwAu1pGlYhugS93yuwnhqhkN1ZkQc6T9bYINmVWBze5Efng4Xma
1Pr+WDblMW1mGSpObNhR/bsmeL4Eu4mmaaUnhvSsgmarHCDZXwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFICbFOHMmtZUpZmlsA51c1qM8WYRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzYzNWE2Y2MtZGE2Zi0z
NzAzLWI3YWQtZDljNDcyZDRiNjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOCQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMk/DyrKm8YjVmyMyQPnyYenOKKnl5/ztXwrK/S9PDzRrtq7Vq0PVpbo1
Bht55gLl4OpYtuDhzHDp9FEm3VHIWT/dA3URz/FG+fGqyB6AZ+6cGD9JGqX3EFgW
pPwJywU+L05Mv4/EEi0zb5qoGQBkoTfXJyNT7MXmlNUjI2W2RchnOD6OyunCKXRJ
g3VuesufMSi5DCYkS0z8smu9pjdtvh3uVrLEsypDBWqVjgDavYOZoSx13HQ9xmHh
X2R8jNJUKOQ/pM9Gc4e9LTFGU5WmXWuA2vPvbiZOhJU3nqEo20uxOAWoxJAo6Kfs
4JGs0bHdCZN2lE5mr/O0vFUly6SuUg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:08 2025 by rpki-client