Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3883080a-8f6b-3692-b7b6-e297af3d2f8c.roa
File: 3883080a-8f6b-3692-b7b6-e297af3d2f8c.roa (raw, json)
Hash identifier: aLviK/Yt9HTrCNO/Et0CQLI9Ens30jv86J4/RanKJB4=
Subject key identifier: 23:B3:B1:1D:95:3B:6C:43:B0:C7:A3:3A:34:DA:13:A5:8A:34:A2:33
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD92A1177D89BCB2F1C7B3500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3883080a-8f6b-3692-b7b6-e297af3d2f8c.roa
Signing time: Tue 08 Nov 2022 12:00:00 +0000
ROA not before: Tue 08 Nov 2022 12:00:00 +0000
ROA not after: Wed 14 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 56.149.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d9:2a:11:77:d8:9b:cb:2f:1c:7b:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 8 12:00:00 2022 GMT
Not After : Dec 14 05:00:00 2022 GMT
Subject: CN=29b98ec8-0ca2-40f6-8448-b880b249c373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:75:b5:58:26:8e:30:25:a0:8c:54:f1:10:
54:e9:09:43:b2:a5:e0:20:5f:60:0a:b6:b3:28:ce:
04:35:32:85:75:65:66:43:a1:6f:3a:96:ba:27:5f:
43:15:93:12:1c:1b:7d:29:d1:31:89:be:a9:7d:df:
36:62:1a:2f:e6:13:26:17:73:3a:f0:34:29:33:78:
0d:58:cc:58:91:45:67:f2:c8:60:ba:98:00:ac:ad:
99:7a:7b:23:7b:9c:b2:34:f2:84:98:0d:cf:10:d2:
92:bc:5c:e7:9e:8b:4e:d6:c4:9a:93:5b:cb:aa:47:
9b:da:b6:f3:ad:d5:37:e0:0c:ed:5b:d1:fc:2d:1f:
25:1e:0a:ed:3b:06:aa:b4:da:a2:59:26:b1:c6:05:
06:7e:fc:3d:44:d8:5d:31:0f:d0:15:82:a7:f0:d2:
7a:8f:66:43:2e:91:f1:09:5f:e4:e0:7a:b2:5a:46:
a5:53:92:ec:95:23:b9:cb:c1:04:b5:2e:89:5e:89:
b8:c1:d6:65:1f:5f:df:9f:bc:81:3b:41:91:e2:eb:
b0:c4:0f:fd:de:c6:d3:a9:48:b6:ee:ce:43:af:64:
b8:f3:7a:e6:2b:01:c4:c2:3e:7c:91:ab:4b:76:11:
4e:14:b8:7d:29:d5:a1:45:82:a1:b7:46:1d:f1:81:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B3:B1:1D:95:3B:6C:43:B0:C7:A3:3A:34:DA:13:A5:8A:34:A2:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3883080a-8f6b-3692-b7b6-e297af3d2f8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.149.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:41:ff:d3:8a:01:de:47:79:c6:38:c6:2b:44:2a:5d:97:ba:
04:13:bd:05:cc:33:10:ac:57:c7:19:f7:fe:2f:c3:0b:0e:c2:
f2:46:4c:32:1d:9e:49:b4:1c:bc:87:2f:45:28:b2:6c:5e:87:
3b:41:b8:19:e9:24:d4:eb:ec:fc:0d:a7:c8:83:40:3d:60:8f:
aa:8c:1b:e6:0f:c1:28:c1:18:a1:3f:e5:e2:bc:67:db:b7:b3:
50:2c:25:bf:df:60:70:d1:5c:42:ff:3a:9a:2b:50:ea:1d:67:
97:83:bb:0c:29:bf:79:6d:49:32:d2:9e:40:9b:27:84:57:ce:
9b:88:54:a2:49:b1:18:41:93:33:05:da:6d:90:f2:13:9d:79:
ef:eb:ac:78:2b:82:b4:05:1f:e0:94:4a:ec:03:84:a4:f9:cf:
c2:87:05:a5:2e:18:a5:8c:53:75:ac:80:eb:b5:46:1a:97:b8:
47:87:d5:23:09:fe:1d:c7:8c:46:8d:22:26:b3:c9:41:46:42:
0c:e9:3b:95:ae:4a:f8:4a:5a:6e:21:77:c9:f8:77:10:6b:41:
b4:1e:e4:07:f5:a8:e1:20:0b:4b:74:ea:dd:63:68:e7:a1:22:
d9:62:59:df:b9:d0:ac:34:88:04:ee:11:d0:70:3b:6e:2f:46:
04:57:a3:ee
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/ZKhF32JvLLxx7NQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwODEyMDAwMFoXDTIyMTIxNDA1MDAwMFowLzEtMCsGA1UEAxMk
MjliOThlYzgtMGNhMi00MGY2LTg0NDgtYjg4MGIyNDljMzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCt1tVgmjjAloIxU8RBU6QlDsqXgIF9gCraz
KM4ENTKFdWVmQ6FvOpa6J19DFZMSHBt9KdExib6pfd82Yhov5hMmF3M68DQpM3gN
WMxYkUVn8shgupgArK2Zensje5yyNPKEmA3PENKSvFznnotO1sSak1vLqkeb2rbz
rdU34AztW9H8LR8lHgrtOwaqtNqiWSaxxgUGfvw9RNhdMQ/QFYKn8NJ6j2ZDLpHx
CV/k4HqyWkalU5LslSO5y8EEtS6JXom4wdZlH1/fn7yBO0GR4uuwxA/93sbTqUi2
7s5Dr2S483rmKwHEwj58katLdhFOFLh9KdWhRYKht0Yd8YEcrQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCOzsR2VO2xDsMejOjTaE6WKNKIzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzg4MzA4MGEtOGY2Yi0z
NjkyLWI3YjYtZTI5N2FmM2QyZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOJUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADkH/04oB3kd5xjjGK0QqXZe6BBO9BcwzEKxXxxn3/i/DCw7C8kZMMh2e
SbQcvIcvRSiybF6HO0G4Gekk1Ovs/A2nyINAPWCPqowb5g/BKMEYoT/l4rxn27ez
UCwlv99gcNFcQv86mitQ6h1nl4O7DCm/eW1JMtKeQJsnhFfOm4hUokmxGEGTMwXa
bZDyE5157+useCuCtAUf4JRK7AOEpPnPwocFpS4YpYxTdayA67VGGpe4R4fVIwn+
HceMRo0iJrPJQUZCDOk7la5K+EpabiF3yfh3EGtBtB7kB/Wo4SALS3Tq3WNo56Ei
2WJZ37nQrDSIBO4R0HA7bi9GBFej7g==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:21 2025 by rpki-client