Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fb2ed6e-9685-3e45-93ad-142c696b2096.roa
File: 4fb2ed6e-9685-3e45-93ad-142c696b2096.roa (raw, json)
Hash identifier: HggfjgrpPDt5U7CBqbzTJe9DNobpbWY7btif/l0/9mY=
Subject key identifier: 21:1A:40:2C:C7:B7:18:8C:C2:42:ED:27:36:71:50:57:20:1D:3E:9D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840ADFA0679A07C38D1698D9170
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fb2ed6e-9685-3e45-93ad-142c696b2096.roa
Signing time: Mon 23 Jan 2023 12:00:00 +0000
ROA not before: Mon 23 Jan 2023 12:00:00 +0000
ROA not after: Tue 28 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:ad:fa:06:79:a0:7c:38:d1:69:8d:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 23 12:00:00 2023 GMT
Not After : Feb 28 05:00:00 2023 GMT
Subject: CN=b04cdff4-eda8-4d45-8d03-8bbb02081ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:bd:2d:6b:ee:19:0b:8b:ff:0b:1e:3f:ef:
23:e5:db:b2:72:d1:7d:db:7f:70:b8:37:5e:0f:aa:
05:14:2a:9d:e2:a8:e2:d8:94:19:ea:0d:8f:03:b0:
ed:ce:14:e0:a2:87:84:3e:9a:8a:fb:a9:4b:d9:79:
c2:20:97:3a:46:8b:60:bb:eb:1c:6a:f0:77:15:87:
1d:6a:30:77:8b:81:cf:76:76:00:da:88:f8:7e:b1:
e7:f9:01:eb:a3:3f:94:e8:3b:bd:cc:f9:51:b8:04:
f2:33:c3:12:a2:cf:8f:22:dd:3d:cd:86:58:73:35:
b8:8b:13:af:98:c0:bd:3c:a9:27:a2:ec:be:9a:5e:
38:f4:d4:1c:93:54:4d:15:ef:89:78:fc:36:1d:f6:
6a:e4:ca:11:3f:1d:18:44:bb:00:6a:29:3d:9b:c6:
21:0d:4b:73:63:bf:63:66:25:0e:63:47:4d:5f:e5:
a0:3d:d3:9a:30:6b:01:c9:64:81:84:bf:d3:c6:98:
2f:5b:e6:d4:ed:79:4c:35:cf:01:01:c9:ba:b8:58:
06:f4:50:06:f8:59:cc:a7:27:ca:ee:23:43:7f:c9:
05:59:c6:b0:49:ee:17:26:58:15:0d:a2:65:54:9c:
2d:40:09:29:d5:f6:c8:ee:4c:b1:63:4f:8d:33:e5:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1A:40:2C:C7:B7:18:8C:C2:42:ED:27:36:71:50:57:20:1D:3E:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fb2ed6e-9685-3e45-93ad-142c696b2096.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:84:07:b4:06:04:98:5b:ff:ca:3c:bf:43:5f:6b:70:b3:2c:
ae:52:9c:f1:d1:12:7d:d4:eb:31:db:7b:e4:da:45:99:6f:46:
96:3d:44:d3:ea:ba:ca:4d:79:74:29:e5:c2:e7:43:82:ce:cc:
32:95:48:8b:40:5e:92:15:f5:a6:ea:e5:3f:6b:42:2a:1b:f3:
82:47:88:3e:0f:b9:34:93:7c:03:90:50:0d:6d:53:9a:39:73:
01:f5:5b:2f:57:ac:57:99:a7:5a:36:e9:57:14:cc:2a:82:f3:
38:78:62:90:85:e2:e4:f8:08:db:71:3a:e4:62:92:dd:09:aa:
df:81:69:f4:d9:dd:54:78:b1:6e:de:4c:aa:a1:fc:e9:86:d5:
00:24:fd:7b:b6:4d:75:10:18:fd:3a:a9:73:f3:af:75:db:b8:
c3:92:8f:e2:6a:bb:7a:4c:8d:32:f7:53:6f:df:f5:6c:98:31:
f1:a8:ba:2e:48:0a:c4:ca:2e:a1:94:50:ea:3e:12:3c:ce:35:
bd:5b:7e:62:0c:5c:88:c7:66:fc:67:08:dd:35:fc:42:b3:de:
c3:28:2a:cb:c0:5b:da:6d:0f:06:a7:f4:b4:9b:01:c0:17:a9:
03:ff:95:d3:f6:af:65:12:50:6f:5c:a6:3f:f4:da:60:66:57:
1e:be:8b:31
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECt+gZ5oHw40WmNkXAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyMzEyMDAwMFoXDTIzMDIyODA1MDAwMFowLzEtMCsGA1UEAxMk
YjA0Y2RmZjQtZWRhOC00ZDQ1LThkMDMtOGJiYjAyMDgxZWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojO9LWvuGQuL/wseP+8j5duyctF9239wuDde
D6oFFCqd4qji2JQZ6g2PA7DtzhTgooeEPpqK+6lL2XnCIJc6Rotgu+scavB3FYcd
ajB3i4HPdnYA2oj4frHn+QHroz+U6Du9zPlRuATyM8MSos+PIt09zYZYczW4ixOv
mMC9PKknouy+ml449NQck1RNFe+JePw2HfZq5MoRPx0YRLsAaik9m8YhDUtzY79j
ZiUOY0dNX+WgPdOaMGsByWSBhL/TxpgvW+bU7XlMNc8BAcm6uFgG9FAG+FnMpyfK
7iNDf8kFWcawSe4XJlgVDaJlVJwtQAkp1fbI7kyxY0+NM+VRlwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCEaQCzHtxiMwkLtJzZxUFcgHT6dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNGZiMmVkNmUtOTY4NS0z
ZTQ1LTkzYWQtMTQyYzY5NmIyMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANokwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdoQHtAYEmFv/yjy/Q19rcLMsrlKc8dESfdTrMdt75NpFmW9Glj1E0+q6
yk15dCnlwudDgs7MMpVIi0BekhX1purlP2tCKhvzgkeIPg+5NJN8A5BQDW1Tmjlz
AfVbL1esV5mnWjbpVxTMKoLzOHhikIXi5PgI23E65GKS3Qmq34Fp9NndVHixbt5M
qqH86YbVACT9e7ZNdRAY/Tqpc/Ovddu4w5KP4mq7ekyNMvdTb9/1bJgx8ai6LkgK
xMouoZRQ6j4SPM41vVt+YgxciMdm/GcI3TX8QrPewygqy8Bb2m0PBqf0tJsBwBep
A/+V0/avZRJQb1ymP/TaYGZXHr6LMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:10 2025 by rpki-client