Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3dbe4709-9710-3a65-83fd-1b7078305cfd.roa
File: 3dbe4709-9710-3a65-83fd-1b7078305cfd.roa (raw, json)
Hash identifier: 7iGiSPSkPDL6cvL2X3H11gVZIOX+EuB35ohkpQMPnbU=
Subject key identifier: 7A:3E:D0:BC:01:E9:14:8D:52:BB:00:17:86:3A:BD:79:12:65:EC:0A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404B20B419ACB6AA5BCF15AC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3dbe4709-9710-3a65-83fd-1b7078305cfd.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.40.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:20:b4:19:ac:b6:aa:5b:cf:15:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=b35484cb-c643-42bc-b78b-4e20c90bc1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:aa:8e:ad:ac:a2:53:f3:79:23:81:52:dd:
bb:2c:64:5a:9c:ea:0c:90:41:e1:08:2b:ac:54:c7:
f4:51:82:26:fa:9a:5a:92:b3:96:65:aa:31:a6:43:
ee:65:4a:a7:45:b1:03:6a:6c:66:22:53:21:39:9a:
34:23:e4:71:67:68:9f:d6:05:49:9e:e0:f5:95:09:
0f:2d:8a:76:3f:56:70:76:40:13:a5:63:d7:9e:6f:
57:07:9c:a5:c8:f7:20:e0:1a:74:49:06:ce:b0:10:
cd:e2:7a:0b:49:15:ed:10:df:91:cd:b4:ac:68:f1:
73:13:65:b8:c0:17:d3:8c:51:be:dc:4f:cc:3c:15:
c1:9c:b3:87:dd:56:21:65:35:7c:9b:90:d6:da:3c:
91:78:cb:e9:b5:1f:61:a0:da:39:db:9d:83:70:ed:
91:2f:f4:32:0b:49:88:e2:0b:c5:f9:52:6e:6e:24:
2c:0e:13:ad:ef:56:0b:99:70:7e:76:e2:5d:de:5e:
10:a4:07:ff:6d:59:c1:2f:2d:3a:a7:7a:fa:49:eb:
f2:97:d0:5d:8e:52:c1:5e:ea:63:9f:95:93:16:22:
cc:2a:fc:7b:32:dd:5e:df:5d:ef:04:80:54:ef:fb:
82:d5:09:a5:c9:66:5b:d7:5e:37:04:5c:c7:25:cc:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3E:D0:BC:01:E9:14:8D:52:BB:00:17:86:3A:BD:79:12:65:EC:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3dbe4709-9710-3a65-83fd-1b7078305cfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.40.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:08:17:7a:dc:12:72:f0:31:63:ef:d5:9f:dd:f9:f4:f7:59:
c2:96:60:eb:cc:fb:1c:52:ad:05:86:55:dc:7e:52:e9:7e:c9:
6f:38:9d:94:00:b8:35:fb:a5:5e:48:c2:dc:05:ab:4f:6d:79:
4b:05:43:18:ca:b3:9a:e7:74:6e:f5:38:60:da:97:ae:4d:0c:
c4:68:ff:31:f4:d8:99:3f:e9:74:2c:d2:aa:4e:d0:53:12:16:
5f:1f:9f:68:09:3a:02:8b:4c:98:e7:f2:3a:fc:5f:31:21:93:
1a:3e:86:e7:39:55:ed:6d:80:ae:25:a4:c0:a8:56:e7:c0:e0:
a7:e7:f4:72:f8:31:e4:56:e2:b5:80:2c:c6:28:e4:e0:13:04:
4d:8a:a0:e8:a7:9a:1d:af:8a:df:1e:b0:e9:5d:84:3f:16:a9:
91:14:e3:17:57:e9:40:5e:a2:0f:f9:86:6b:39:92:8b:11:2e:
d1:35:13:1b:f7:3e:de:7d:08:5a:d4:4b:b3:f9:f4:68:1d:bb:
aa:fb:26:be:bf:69:c8:13:76:d9:18:4d:5b:eb:73:93:d9:87:
51:8e:87:85:1f:b9:a3:8d:02:fc:25:ef:09:45:94:d4:ff:af:
26:7b:6d:c7:c7:e8:cd:0b:49:f3:5c:1b:8c:aa:c6:11:f7:54:
9d:c2:00:07
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBLILQZrLaqW88VrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxOTE2NTQwOFoXDTIzMDEyNDA1MDAwMFowLzEtMCsGA1UEAxMk
YjM1NDg0Y2ItYzY0My00MmJjLWI3OGItNGUyMGM5MGJjMWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yWqjq2solPzeSOBUt27LGRanOoMkEHhCCus
VMf0UYIm+ppakrOWZaoxpkPuZUqnRbEDamxmIlMhOZo0I+RxZ2if1gVJnuD1lQkP
LYp2P1ZwdkATpWPXnm9XB5ylyPcg4Bp0SQbOsBDN4noLSRXtEN+RzbSsaPFzE2W4
wBfTjFG+3E/MPBXBnLOH3VYhZTV8m5DW2jyReMvptR9hoNo5252DcO2RL/QyC0mI
4gvF+VJubiQsDhOt71YLmXB+duJd3l4QpAf/bVnBLy06p3r6Sevyl9BdjlLBXupj
n5WTFiLMKvx7Mt1e313vBIBU7/uC1QmlyWZb1143BFzHJcyAuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHo+0LwB6RSNUrsAF4Y6vXkSZewKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2RiZTQ3MDktOTcxMC0z
YTY1LTgzZmQtMWI3MDc4MzA1Y2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOCgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAcggXetwScvAxY+/Vn9359PdZwpZg68z7HFKtBYZV3H5S6X7JbzidlAC4
NfulXkjC3AWrT215SwVDGMqzmud0bvU4YNqXrk0MxGj/MfTYmT/pdCzSqk7QUxIW
Xx+faAk6AotMmOfyOvxfMSGTGj6G5zlV7W2AriWkwKhW58Dgp+f0cvgx5FbitYAs
xijk4BMETYqg6KeaHa+K3x6w6V2EPxapkRTjF1fpQF6iD/mGazmSixEu0TUTG/c+
3n0IWtRLs/n0aB27qvsmvr9pyBN22RhNW+tzk9mHUY6HhR+5o40C/CXvCUWU1P+v
Jnttx8fozQtJ81wbjKrGEfdUncIABw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:09 2025 by rpki-client