Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e57ade9-1f16-33dc-bd8c-ffcd33624bac.roa
File: 3e57ade9-1f16-33dc-bd8c-ffcd33624bac.roa (raw, json)
Hash identifier: 8hjrLBEjYrWtnQsplCOrn1gTEAfIEsV91ShlQFQi428=
Subject key identifier: 3C:7F:68:E1:BD:30:53:32:4F:04:E8:74:47:B0:65:C8:8D:30:E3:6D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402A099DBB5A380DD06AB96300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e57ade9-1f16-33dc-bd8c-ffcd33624bac.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:09:9d:bb:5a:38:0d:d0:6a:b9:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=4b7d1c6f-b8c0-4765-99ed-9adb40022539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e8:84:35:7c:30:2c:d7:2b:29:41:30:ce:31:
59:0a:42:01:b4:18:f3:0e:95:f2:b5:f5:c7:94:94:
69:21:8e:13:a5:aa:ef:f7:e9:4c:ff:64:94:c3:ec:
ba:ab:de:31:d6:c4:57:10:eb:61:5f:5b:20:3c:b9:
d6:98:8b:9e:78:03:8d:1b:07:24:bf:de:72:f5:c8:
f5:a2:5d:ac:ac:84:ca:fc:b2:1c:b4:4d:4d:33:11:
e2:67:e1:2b:e0:eb:b7:a5:d5:05:36:f2:5a:3a:c4:
a7:7f:9f:5b:ec:71:68:db:f7:ad:d2:b2:b0:77:02:
6d:57:d2:f1:e8:aa:37:a7:f1:19:bb:64:f8:3f:4a:
15:0d:63:d2:5f:71:e6:cf:cf:51:aa:c5:49:64:00:
bc:db:23:1a:a6:96:c4:b1:fd:32:12:47:4f:92:47:
20:ac:4f:84:13:b1:f5:8e:96:c0:45:bf:ee:39:b7:
2d:15:73:4d:ce:78:be:14:26:81:73:4e:4e:d3:f7:
90:ea:e5:a5:74:20:ed:5e:bf:de:b0:bd:83:93:3a:
ab:f3:2e:e9:77:bb:c5:df:66:e8:98:f6:fb:aa:ce:
c3:39:76:8f:05:d1:06:0f:d2:20:80:01:aa:fd:86:
42:a3:0d:46:c0:ea:fe:4e:b5:a2:e6:06:39:c5:55:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:7F:68:E1:BD:30:53:32:4F:04:E8:74:47:B0:65:C8:8D:30:E3:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3e57ade9-1f16-33dc-bd8c-ffcd33624bac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:b5:b0:80:0b:2f:0b:3c:fc:6c:9e:a6:59:27:1a:2c:16:1e:
e9:26:28:4f:14:5b:d7:da:7d:3d:ad:50:1e:c9:e9:18:19:90:
68:9f:28:db:35:1f:78:2b:71:bd:73:23:2b:80:59:d2:13:5b:
da:14:3f:4e:37:d6:0a:7d:ba:e5:4b:97:b5:2b:53:26:3b:f3:
2f:5f:a5:04:e1:95:fd:83:28:ac:9b:c8:1a:e9:7f:19:32:51:
6f:41:14:f3:94:39:fc:99:f0:a4:67:02:2c:05:5f:57:49:27:
a6:c3:ba:0f:be:c8:6b:fd:e5:8b:92:a5:50:c5:64:d9:56:ba:
07:1e:41:db:df:64:c3:17:a9:e2:e5:4f:55:4e:d2:e9:02:f3:
c8:a7:5b:d0:f2:65:35:ac:37:ca:81:07:5a:1a:c2:34:86:9a:
8b:03:a2:82:3a:83:a2:06:fa:eb:fd:83:86:bc:e9:1c:b2:31:
eb:89:3a:6c:2d:28:17:e3:89:00:ca:72:c3:3a:25:e3:e7:d0:
c8:2c:04:6d:8a:38:b2:5f:2c:e0:e7:c5:cd:b5:72:99:29:3e:
d0:fd:1a:4c:21:c9:93:e7:90:b8:1e:96:64:c2:6d:ef:4c:18:
a8:f8:81:bc:7b:0a:75:d7:09:69:3d:23:7c:5c:aa:64:01:a3:
9c:6d:e2:9f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAqCZ27WjgN0Gq5YwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwNzEyMDAwMFoXDTIzMDExMjA1MDAwMFowLzEtMCsGA1UEAxMk
NGI3ZDFjNmYtYjhjMC00NzY1LTk5ZWQtOWFkYjQwMDIyNTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+iENXwwLNcrKUEwzjFZCkIBtBjzDpXytfXH
lJRpIY4Tparv9+lM/2SUw+y6q94x1sRXEOthX1sgPLnWmIueeAONGwckv95y9cj1
ol2srITK/LIctE1NMxHiZ+Er4Ou3pdUFNvJaOsSnf59b7HFo2/et0rKwdwJtV9Lx
6Ko3p/EZu2T4P0oVDWPSX3Hmz89RqsVJZAC82yMappbEsf0yEkdPkkcgrE+EE7H1
jpbARb/uObctFXNNzni+FCaBc05O0/eQ6uWldCDtXr/esL2Dkzqr8y7pd7vF32bo
mPb7qs7DOXaPBdEGD9IggAGq/YZCow1GwOr+TrWi5gY5xVUUOwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDx/aOG9MFMyTwTodEewZciNMONtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2U1N2FkZTktMWYxNi0z
M2RjLWJkOGMtZmZjZDMzNjI0YmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOHswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJLWwgAsvCzz8bJ6mWScaLBYe6SYoTxRb19p9Pa1QHsnpGBmQaJ8o2zUf
eCtxvXMjK4BZ0hNb2hQ/TjfWCn265UuXtStTJjvzL1+lBOGV/YMorJvIGul/GTJR
b0EU85Q5/JnwpGcCLAVfV0knpsO6D77Ia/3li5KlUMVk2Va6Bx5B299kwxep4uVP
VU7S6QLzyKdb0PJlNaw3yoEHWhrCNIaaiwOigjqDogb66/2DhrzpHLIx64k6bC0o
F+OJAMpywzol4+fQyCwEbYo4sl8s4OfFzbVymSk+0P0aTCHJk+eQuB6WZMJt70wY
qPiBvHsKddcJaT0jfFyqZAGjnG3inw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:02 2025 by rpki-client