Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c16784c-52b8-3954-84fe-f567c979a748.roa
File: 4c16784c-52b8-3954-84fe-f567c979a748.roa (raw, json)
Hash identifier: S14+BwXqNzEnPwNrstogCH2pmOjFh3IxmG5q5RLDSQc=
Subject key identifier: 0D:22:6F:22:FC:29:D8:93:2B:D0:24:04:E9:E5:75:63:DA:33:41:A0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584034F90E3CAA3F44A86B8E8D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c16784c-52b8-3954-84fe-f567c979a748.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.20.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:34:f9:0e:3c:aa:3f:44:a8:6b:8e:8d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=76954ac2-2a11-42c1-a26a-dfe46a9148a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2f:d2:ce:2a:ff:2b:e5:65:e9:20:b4:c3:83:
7d:31:5c:4d:34:30:17:0c:18:4a:b7:8e:59:4b:4b:
1c:95:f4:56:e7:bd:1c:42:cc:c9:65:64:d5:c6:44:
2a:81:4c:ad:59:b0:ef:58:30:58:b1:e4:04:9c:6c:
18:e8:20:b5:50:e0:ee:e8:e3:e6:1a:60:4c:84:50:
a1:3d:03:0b:f8:ee:69:4d:8f:f1:2d:5b:76:d8:05:
d5:95:02:75:70:f9:5c:4d:f6:0d:c1:31:b8:9b:4d:
6a:cf:cf:18:5c:98:18:10:94:a7:e4:a4:a3:42:86:
a9:cc:90:d6:85:30:eb:14:7a:5f:e5:9b:c7:e5:b3:
58:ca:7e:a3:29:19:0c:20:21:f9:d0:6c:54:a9:19:
b6:8c:67:31:06:49:39:5a:58:22:6b:d6:06:35:cf:
e5:6f:bc:dd:ac:0a:5e:03:0c:a5:de:62:af:2a:6b:
f0:67:52:b1:f4:8d:5a:f2:64:a3:f5:5e:ff:b4:58:
77:3f:20:79:42:bf:4c:61:19:6f:87:aa:fc:12:12:
5f:4f:90:1b:5a:ee:4d:fa:05:d2:13:b6:47:ed:06:
04:f1:4f:e0:59:ce:35:28:5d:05:d6:62:1a:93:8a:
84:92:d9:2a:cc:31:f0:18:cd:d5:58:af:d6:f5:b1:
4c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:22:6F:22:FC:29:D8:93:2B:D0:24:04:E9:E5:75:63:DA:33:41:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4c16784c-52b8-3954-84fe-f567c979a748.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:46:15:52:e9:f8:6d:80:8d:de:6f:3d:6a:41:54:91:1d:f5:
8f:4c:4f:b1:97:08:36:1c:e0:d6:dd:29:2c:92:73:a4:28:ed:
54:2e:65:97:26:35:f5:ea:99:f2:eb:f9:e5:96:64:b1:4b:e9:
71:91:23:45:f1:08:b9:f7:c6:68:e7:05:5a:1c:1e:0b:c0:67:
7e:4f:1d:51:91:37:34:7e:be:7d:23:80:f3:ac:50:1e:b4:37:
bc:74:d8:8c:e6:27:0b:08:fb:ef:8b:2d:d8:4c:44:e7:b7:4c:
86:db:26:86:45:27:ca:45:6c:ad:81:a6:51:32:1e:7a:36:07:
f4:ab:d4:e4:d7:12:f2:6f:10:4e:31:90:5f:6c:f7:df:94:16:
50:e9:ca:4f:18:63:a4:83:48:12:9c:d4:55:dd:6a:e8:be:4c:
4f:44:d2:2b:1f:48:37:be:2c:97:94:c6:01:0e:69:46:8d:7c:
6e:ec:24:d8:b9:4a:95:ea:fd:91:d4:38:3d:26:29:aa:5e:3f:
44:bb:95:6a:22:ad:40:66:ec:12:ce:d9:e3:8f:ec:a8:97:50:
23:2e:ed:c0:93:1a:4b:a4:d8:b9:ad:ed:70:75:c9:db:cd:b9:
20:02:6b:e4:43:04:63:4d:39:07:19:db:f4:4c:ed:3c:e2:14:
bf:cc:4d:67
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA0+Q48qj9EqGuOjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMTEyMDAwMFoXDTIzMDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
NzY5NTRhYzItMmExMS00MmMxLWEyNmEtZGZlNDZhOTE0OGE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S/Szir/K+Vl6SC0w4N9MVxNNDAXDBhKt45Z
S0sclfRW570cQszJZWTVxkQqgUytWbDvWDBYseQEnGwY6CC1UODu6OPmGmBMhFCh
PQML+O5pTY/xLVt22AXVlQJ1cPlcTfYNwTG4m01qz88YXJgYEJSn5KSjQoapzJDW
hTDrFHpf5ZvH5bNYyn6jKRkMICH50GxUqRm2jGcxBkk5Wlgia9YGNc/lb7zdrApe
Awyl3mKvKmvwZ1Kx9I1a8mSj9V7/tFh3PyB5Qr9MYRlvh6r8EhJfT5AbWu5N+gXS
E7ZH7QYE8U/gWc41KF0F1mIak4qEktkqzDHwGM3VWK/W9bFMKQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFA0ibyL8KdiTK9AkBOnldWPaM0GgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGMxNjc4NGMtNTJiOC0z
OTU0LTg0ZmUtZjU2N2M5NzlhNzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBNhQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAkYVUun4bYCN3m89akFUkR31j0xPsZcINhzg1t0pLJJzpCjtVC5llyY1
9eqZ8uv55ZZksUvpcZEjRfEIuffGaOcFWhweC8Bnfk8dUZE3NH6+fSOA86xQHrQ3
vHTYjOYnCwj774st2ExE57dMhtsmhkUnykVsrYGmUTIeejYH9KvU5NcS8m8QTjGQ
X2z335QWUOnKTxhjpINIEpzUVd1q6L5MT0TSKx9IN74sl5TGAQ5pRo18buwk2LlK
ler9kdQ4PSYpql4/RLuVaiKtQGbsEs7Z44/sqJdQIy7twJMaS6TYua3tcHXJ2825
IAJr5EMEY005Bxnb9EztPOIUv8xNZw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:11 2025 by rpki-client