Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d74c5bb-c308-3d5f-af49-7ac0ec341385.roa
File: 3d74c5bb-c308-3d5f-af49-7ac0ec341385.roa (raw, json)
Hash identifier: f6V8uM7rTvzH23xxsoyEOgj5hKXTRN4iMwWA1DJ3H8k=
Subject key identifier: 26:D0:65:3B:F6:8B:48:AC:17:01:CD:E9:D3:E8:E3:7B:1A:A5:B3:85
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584010DAE3CB3CB0B0B819994500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d74c5bb-c308-3d5f-af49-7ac0ec341385.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.26.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:10:da:e3:cb:3c:b0:b0:b8:19:99:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=951bd288-6b48-450b-b202-3d869a3b30cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:76:16:09:bc:45:f5:2d:a9:57:e9:a7:c3:5f:
df:cb:7c:ae:c5:c9:a1:a0:cf:99:ee:4b:13:ad:b4:
b4:ca:67:01:64:19:b4:08:bb:fd:45:a3:69:fe:43:
c2:3f:d0:27:7b:26:2d:00:ac:91:d9:82:05:78:e3:
7c:3d:7a:d4:15:a4:19:3e:0d:38:b1:90:b2:9f:43:
b0:85:12:ce:7f:63:e1:26:8c:1f:c4:d6:16:8e:56:
1f:c8:96:28:40:b3:2b:7a:c5:4d:0c:47:b3:c0:21:
db:42:34:1e:d2:0e:0a:86:0d:d6:35:03:c1:3d:ce:
3d:a5:57:4c:c8:82:bd:84:85:f3:07:b1:22:4b:1a:
ba:5d:3c:3f:cd:55:75:8f:b4:c5:a2:7e:3d:93:47:
cb:1e:bf:a5:7b:e1:1a:7a:46:75:bc:a8:ff:1f:e8:
b5:cd:ac:5f:cb:60:24:e4:48:5b:63:0b:a0:4b:a8:
bb:19:3e:0a:a2:dc:c0:ee:01:7d:a3:01:d9:f1:03:
66:8f:74:6e:a4:df:2c:a8:2a:f2:fd:4a:a6:fd:e9:
c6:a9:df:6a:07:f1:3a:dc:db:54:a8:15:82:24:a4:
a2:ee:3a:25:ef:01:95:a1:0d:fa:0a:ce:a4:cb:76:
83:0a:87:f7:c4:2b:99:5c:1a:be:31:aa:63:ae:e2:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D0:65:3B:F6:8B:48:AC:17:01:CD:E9:D3:E8:E3:7B:1A:A5:B3:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d74c5bb-c308-3d5f-af49-7ac0ec341385.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.26.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:32:af:1d:c5:56:1e:e4:6d:1f:ad:07:90:8a:09:b6:70:59:
5b:6e:62:7f:0e:25:45:d0:ca:58:38:32:5e:e8:ba:ed:62:65:
5f:f3:7f:07:d1:e5:9c:20:ef:7b:91:c3:54:cb:9e:81:17:5e:
5f:d4:04:a0:11:d0:79:09:e7:3f:b8:f8:ff:f3:a1:b5:b3:48:
9c:bb:1d:a4:25:e5:c0:7b:81:2e:b8:a5:d3:08:2a:73:9a:46:
24:82:15:60:0b:b8:53:8a:94:0b:07:00:dd:70:39:8f:37:30:
bd:0f:59:d7:8d:9f:ac:fe:3a:ae:35:18:9c:8a:eb:6c:cb:71:
71:e8:f1:3f:fb:0f:e1:bb:8e:28:20:51:cb:68:99:5b:a0:c4:
6c:37:95:44:b7:7f:6e:a2:3c:f0:e6:57:ad:8a:62:c5:27:9f:
a6:7d:4e:5b:e9:45:30:76:cd:d7:6e:96:a2:77:a2:92:16:de:
04:c1:22:f6:05:49:b8:ed:5b:a4:0c:0c:b6:92:46:87:ce:d7:
31:39:96:9d:fe:fd:a2:c5:f2:44:7a:57:eb:c0:0e:98:15:d5:
53:c3:6b:78:c2:f3:aa:ef:f4:65:05:03:71:d3:17:e2:0b:ce:
4c:c1:4f:b1:09:58:53:ae:56:7f:30:ac:db:3c:a4:6c:d8:3d:
7c:5e:86:ff
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAQ2uPLPLCwuBmZRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyODEyMDAwMFoXDTIzMDEwMzA1MDAwMFowLzEtMCsGA1UEAxMk
OTUxYmQyODgtNmI0OC00NTBiLWIyMDItM2Q4NjlhM2IzMGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHYWCbxF9S2pV+mnw1/fy3yuxcmhoM+Z7ksT
rbS0ymcBZBm0CLv9RaNp/kPCP9AneyYtAKyR2YIFeON8PXrUFaQZPg04sZCyn0Ow
hRLOf2PhJowfxNYWjlYfyJYoQLMresVNDEezwCHbQjQe0g4Khg3WNQPBPc49pVdM
yIK9hIXzB7EiSxq6XTw/zVV1j7TFon49k0fLHr+le+EaekZ1vKj/H+i1zaxfy2Ak
5EhbYwugS6i7GT4KotzA7gF9owHZ8QNmj3RupN8sqCry/Uqm/enGqd9qB/E63NtU
qBWCJKSi7jol7wGVoQ36Cs6ky3aDCof3xCuZXBq+MapjruJGrwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCbQZTv2i0isFwHN6dPo43sapbOFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2Q3NGM1YmItYzMwOC0z
ZDVmLWFmNDktN2FjMGVjMzQxMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANhowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhzKvHcVWHuRtH60HkIoJtnBZW25ifw4lRdDKWDgyXui67WJlX/N/B9Hl
nCDve5HDVMuegRdeX9QEoBHQeQnnP7j4//OhtbNInLsdpCXlwHuBLril0wgqc5pG
JIIVYAu4U4qUCwcA3XA5jzcwvQ9Z142frP46rjUYnIrrbMtxcejxP/sP4buOKCBR
y2iZW6DEbDeVRLd/bqI88OZXrYpixSefpn1OW+lFMHbN126WoneikhbeBMEi9gVJ
uO1bpAwMtpJGh87XMTmWnf79osXyRHpX68AOmBXVU8NreMLzqu/0ZQUDcdMX4gvO
TMFPsQlYU65WfzCs2zykbNg9fF6G/w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:31:04 2025 by rpki-client