Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49960f02-ce2f-33e7-a31a-31e72a493287.roa
File: 49960f02-ce2f-33e7-a31a-31e72a493287.roa (raw, json)
Hash identifier: +hRTbTtZ6WUOxZdpZ7K3z/l4hIem59QiZO2MuX+glzI=
Subject key identifier: 70:10:D5:F9:28:F6:69:DE:8B:6A:66:75:EB:8A:6B:D5:45:60:74:CC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401160A139C3A3CA163B174D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49960f02-ce2f-33e7-a31a-31e72a493287.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.109.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:11:60:a1:39:c3:a3:ca:16:3b:17:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=48d17387-4e99-4478-95c1-aeba5506611c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:5e:27:9e:a6:ad:48:24:34:bd:ca:6c:d8:
2d:94:93:e8:dc:8f:1c:04:28:30:dd:12:de:33:4c:
dc:ed:6e:a1:47:04:6d:a6:63:18:2e:a6:f7:da:56:
22:8f:4b:6d:95:9d:f9:f8:66:79:a0:0e:71:9a:b3:
b2:08:32:eb:f0:9f:4b:dd:0e:c9:5e:20:d7:fe:f7:
e7:ca:18:85:32:78:b2:18:00:da:36:69:70:40:41:
bc:c3:5b:2f:f0:e2:de:ad:35:1f:6e:3c:6c:88:65:
55:48:e8:ed:92:92:5d:01:e5:12:1c:13:f9:02:e9:
c5:33:42:75:6a:f0:3a:7d:98:ef:ab:6d:76:55:2e:
a5:13:d0:a6:25:85:46:ae:26:bf:5c:71:a5:fd:81:
1b:af:78:d9:9f:ff:e3:84:93:e9:5a:9f:6f:64:63:
fd:98:e3:56:1f:1d:7b:30:c9:53:01:93:11:b0:45:
25:0d:0e:f0:4b:68:3c:cb:24:6a:4c:c2:16:0a:73:
b6:b9:3d:69:9c:a1:11:d8:e9:6e:d5:53:c8:55:6c:
55:f9:6b:db:43:77:2f:47:38:0d:11:cf:e4:16:60:
fd:af:37:bd:9b:e3:f0:c1:9d:2c:1d:d7:64:3a:28:
40:0f:d5:13:ca:87:0f:f6:85:c3:87:15:2f:75:e2:
ca:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:10:D5:F9:28:F6:69:DE:8B:6A:66:75:EB:8A:6B:D5:45:60:74:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/49960f02-ce2f-33e7-a31a-31e72a493287.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.109.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:09:c8:25:93:97:17:72:3e:cb:6f:cf:0f:35:8b:ab:1f:c0:
a7:70:57:00:28:c5:9d:c1:4c:df:fd:f1:8f:6b:95:64:7c:84:
10:e2:6b:af:d8:1e:f9:7c:fa:f3:6c:17:05:83:37:50:49:b9:
d0:8f:70:7c:2f:e7:94:3e:bc:0d:25:3f:a7:9e:12:aa:35:9b:
5f:73:c0:9a:19:76:f7:39:f7:45:dc:33:4d:6b:88:57:d2:09:
68:5d:9f:b8:7c:6a:71:2d:38:c7:64:a8:10:10:5c:25:ab:27:
dc:58:4e:0f:54:04:84:b4:27:13:ee:3a:ee:5c:2f:06:34:d8:
9e:89:78:94:e8:4d:e9:05:ad:6c:0b:7f:01:eb:6b:95:49:86:
1f:a1:05:95:00:92:26:03:b1:7d:5d:6b:64:f4:14:aa:fc:60:
c0:10:fe:7f:87:dc:06:96:7e:a1:5a:45:d4:14:05:0b:1b:ab:
ec:d9:32:0a:ae:4e:b9:cf:ab:76:1a:81:91:cb:c0:26:dd:91:
4f:78:06:bc:22:fd:10:69:90:2d:57:6c:cf:83:2e:b8:a1:25:
1d:78:da:3a:e1:0b:21:ff:66:fb:23:3d:30:b2:7e:15:72:33:
cf:85:4f:69:b6:bc:46:66:71:b1:c0:5c:31:0a:e8:94:78:c1:
47:f6:51:de
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEARYKE5w6PKFjsXTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyODEyMDAwMFoXDTIzMDEwMzA1MDAwMFowLzEtMCsGA1UEAxMk
NDhkMTczODctNGU5OS00NDc4LTk1YzEtYWViYTU1MDY2MTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzteJ56mrUgkNL3KbNgtlJPo3I8cBCgw3RLe
M0zc7W6hRwRtpmMYLqb32lYij0ttlZ35+GZ5oA5xmrOyCDLr8J9L3Q7JXiDX/vfn
yhiFMniyGADaNmlwQEG8w1sv8OLerTUfbjxsiGVVSOjtkpJdAeUSHBP5AunFM0J1
avA6fZjvq212VS6lE9CmJYVGria/XHGl/YEbr3jZn//jhJPpWp9vZGP9mONWHx17
MMlTAZMRsEUlDQ7wS2g8yyRqTMIWCnO2uT1pnKER2Olu1VPIVWxV+WvbQ3cvRzgN
Ec/kFmD9rze9m+PwwZ0sHddkOihAD9UTyocP9oXDhxUvdeLKnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHAQ1fko9mnei2pmdeuKa9VFYHTMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDk5NjBmMDItY2UyZi0z
M2U3LWEzMWEtMzFlNzJhNDkzMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANm0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWwnIJZOXF3I+y2/PDzWLqx/Ap3BXACjFncFM3/3xj2uVZHyEEOJrr9ge
+Xz682wXBYM3UEm50I9wfC/nlD68DSU/p54SqjWbX3PAmhl29zn3RdwzTWuIV9IJ
aF2fuHxqcS04x2SoEBBcJasn3FhOD1QEhLQnE+467lwvBjTYnol4lOhN6QWtbAt/
AetrlUmGH6EFlQCSJgOxfV1rZPQUqvxgwBD+f4fcBpZ+oVpF1BQFCxur7NkyCq5O
uc+rdhqBkcvAJt2RT3gGvCL9EGmQLVdsz4MuuKElHXjaOuELIf9m+yM9MLJ+FXIz
z4VPaba8RmZxscBcMQrolHjBR/ZR3g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:30 2025 by rpki-client