Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/54b3d32c-7581-3f98-bec5-be5db30a5025.roa
File: 54b3d32c-7581-3f98-bec5-be5db30a5025.roa (raw, json)
Hash identifier: 2YlaX2dInEHguLkfFE6ILIde6iTTvMkNlN+8pQxEy5Y=
Subject key identifier: 30:D7:60:D1:F5:08:D5:12:2E:91:8E:F6:31:8C:21:E4:51:96:28:A1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C667916A84C2BEE99D406F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/54b3d32c-7581-3f98-bec5-be5db30a5025.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.66.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c6:67:91:6a:84:c2:be:e9:9d:40:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=45136547-ebfd-49c0-b7bf-8c414dc5f6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9b:e2:18:e4:e3:05:6c:0a:82:7b:9c:28:7c:
90:e5:89:b4:db:d5:89:75:bf:3a:02:f7:b9:cf:45:
65:bb:22:4e:e8:d8:83:5c:ba:a3:6a:3f:39:79:d4:
b7:12:a4:78:8c:e6:ed:9c:11:8b:fe:42:70:df:52:
c4:d5:0b:8f:02:1e:09:83:b5:86:95:49:9f:46:af:
7c:31:18:9c:5b:f6:9c:57:eb:2f:09:9e:2e:a6:3d:
95:6f:51:08:1b:0c:a3:94:c2:57:25:9d:3e:49:49:
91:2d:5f:88:52:4c:72:f7:49:74:57:72:c7:20:a2:
3d:ad:96:61:f2:ac:3d:36:d2:10:af:f9:1a:c0:23:
fb:34:4e:6d:ea:24:c9:02:88:6c:f4:ca:9c:99:41:
e0:df:c9:d9:02:80:92:21:07:a9:bb:23:29:fa:23:
60:d0:18:53:17:18:24:6a:6c:97:34:63:a9:93:bb:
21:9c:4a:ff:2b:3b:7c:23:6e:80:a3:d3:6b:8d:c4:
b1:8d:b8:de:c5:b8:4a:ae:e6:13:07:ff:70:90:63:
45:dc:08:2c:47:03:7e:46:5f:d2:69:dc:43:33:ee:
d6:63:1e:79:31:83:94:f3:01:12:a1:8e:8f:24:32:
7c:ad:a5:da:49:4d:17:79:a1:42:1b:47:c5:ee:2c:
38:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:60:D1:F5:08:D5:12:2E:91:8E:F6:31:8C:21:E4:51:96:28:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/54b3d32c-7581-3f98-bec5-be5db30a5025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.66.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:f8:ed:b4:04:b1:db:46:a1:b3:f2:04:96:40:e7:77:8e:22:
1a:6c:33:5a:4a:d1:a7:1f:57:b1:47:38:9b:11:33:3d:4b:fc:
ac:91:5e:a0:bc:57:b7:37:f3:1a:59:a0:39:77:da:e5:eb:8b:
5b:8a:dc:01:55:18:6d:93:a0:d9:77:cb:49:d7:0c:ab:6a:86:
5d:e2:2a:d9:b1:7a:29:fb:a7:ee:70:2d:8e:d4:c2:2c:2b:52:
72:1b:ba:bb:62:d9:ca:d1:bd:01:00:77:c1:41:42:e0:b1:46:
ec:99:ad:9d:72:89:82:4f:4e:64:4a:8e:49:40:4a:be:a7:98:
61:ac:21:7c:16:57:b3:d4:26:fb:0b:40:f5:e2:f2:4c:9e:6a:
d2:29:46:c9:40:48:23:a4:91:48:7c:19:33:2a:2c:61:d3:8e:
e2:50:2a:9d:a3:70:33:e0:fd:91:2c:8d:bf:45:22:61:2f:c8:
fa:6e:68:c6:a0:ef:b6:d0:d0:51:a9:cd:9e:06:5d:08:62:dd:
46:48:fc:0e:ee:89:0f:69:71:2a:df:f7:88:59:9a:43:b4:7b:
bd:00:44:18:03:20:7e:49:7c:e6:c4:fa:ca:5b:8e:b7:84:53:
90:13:d9:a1:49:00:23:06:ae:89:9f:e2:f8:ec:d3:03:4d:49:
d4:3b:eb:1e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDGZ5FqhMK+6Z1Ab0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDIwMTEyMDAwMFoXDTIzMDMwOTA1MDAwMFowLzEtMCsGA1UEAxMk
NDUxMzY1NDctZWJmZC00OWMwLWI3YmYtOGM0MTRkYzVmNmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35viGOTjBWwKgnucKHyQ5Ym029WJdb86Ave5
z0VluyJO6NiDXLqjaj85edS3EqR4jObtnBGL/kJw31LE1QuPAh4Jg7WGlUmfRq98
MRicW/acV+svCZ4upj2Vb1EIGwyjlMJXJZ0+SUmRLV+IUkxy90l0V3LHIKI9rZZh
8qw9NtIQr/kawCP7NE5t6iTJAohs9MqcmUHg38nZAoCSIQepuyMp+iNg0BhTFxgk
amyXNGOpk7shnEr/Kzt8I26Ao9NrjcSxjbjexbhKruYTB/9wkGNF3AgsRwN+Rl/S
adxDM+7WYx55MYOU8wESoY6PJDJ8raXaSU0XeaFCG0fF7iw42QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDDXYNH1CNUSLpGO9jGMIeRRliihMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTRiM2QzMmMtNzU4MS0z
Zjk4LWJlYzUtYmU1ZGIzMGE1MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOEIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAg/jttASx20ahs/IElkDnd44iGmwzWkrRpx9XsUc4mxEzPUv8rJFeoLxX
tzfzGlmgOXfa5euLW4rcAVUYbZOg2XfLSdcMq2qGXeIq2bF6Kfun7nAtjtTCLCtS
chu6u2LZytG9AQB3wUFC4LFG7JmtnXKJgk9OZEqOSUBKvqeYYawhfBZXs9Qm+wtA
9eLyTJ5q0ilGyUBII6SRSHwZMyosYdOO4lAqnaNwM+D9kSyNv0UiYS/I+m5oxqDv
ttDQUanNngZdCGLdRkj8Du6JD2lxKt/3iFmaQ7R7vQBEGAMgfkl85sT6yluOt4RT
kBPZoUkAIwauiZ/i+OzTA01J1DvrHg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:25:28 2023 by rpki-client on console-ams.rpki-client.org