Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58d2ea67-48be-31e8-837a-509600b306e9.roa
File: 58d2ea67-48be-31e8-837a-509600b306e9.roa (raw, json)
Hash identifier: +ZvUwb9lC9jlpuXBJrZJiX5LsG2DRt38N9WwOzB5Qzc=
Subject key identifier: 65:9B:77:21:3C:35:E9:FB:72:51:F4:57:FE:B4:FA:28:CB:E9:A3:2E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF515344B12A2D6CAB22799C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58d2ea67-48be-31e8-837a-509600b306e9.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 108.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f5:15:34:4b:12:a2:d6:ca:b2:27:99:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=f2cbc555-6582-4e1e-8631-d2673a7b5d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:73:3e:b0:a6:81:9e:8e:66:7c:85:d6:84:5e:
cb:ac:c4:2d:96:e9:29:fd:7a:56:46:bf:d9:c6:1b:
17:d1:5e:32:7a:af:ad:2f:3c:5e:bb:40:89:f4:f7:
55:8e:aa:63:6d:89:68:79:af:49:fb:72:ce:a4:86:
e6:cd:95:c3:40:85:23:8a:5e:a4:0f:48:36:99:b3:
d9:b3:02:11:a7:62:82:ba:82:4c:d4:07:2f:61:81:
00:c0:a9:a0:c3:1e:51:3b:13:8f:ed:cb:42:a7:93:
03:e0:39:be:45:fb:ff:48:88:c4:b1:38:bf:84:85:
03:41:94:91:9a:93:04:d1:9f:8c:02:d4:76:4b:ca:
48:e1:5b:8a:8c:12:7c:3e:6d:6a:cf:f6:ff:28:a3:
58:e6:de:9e:37:4d:f8:c4:97:38:6a:a2:c2:43:c6:
88:3f:9f:12:37:50:29:78:03:b9:9a:92:78:8b:c5:
bb:6a:69:3d:d1:63:13:7c:7a:c9:4b:13:04:4e:2b:
66:cc:e7:2c:d3:6b:13:d9:1e:58:8d:79:9f:fd:9d:
0f:9e:c1:38:a9:0a:51:b6:f0:71:9c:c5:b6:f7:74:
0a:6d:fd:53:99:41:10:88:1e:c8:5c:36:f4:ae:d0:
15:ce:b3:30:ec:2e:76:56:d0:eb:ad:5f:de:5a:78:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9B:77:21:3C:35:E9:FB:72:51:F4:57:FE:B4:FA:28:CB:E9:A3:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58d2ea67-48be-31e8-837a-509600b306e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
108.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:66:ef:36:e1:34:9d:59:81:01:e4:83:3d:7a:7c:d2:04:f3:
b5:70:30:44:d6:1d:d6:39:8b:f8:a8:0b:a7:f8:7c:03:28:d6:
c6:53:52:c6:16:f8:18:b1:ee:92:3f:2e:26:3d:f5:8a:7e:82:
12:21:80:25:02:1d:dc:6f:70:24:ee:8d:23:49:14:c3:59:4b:
d6:b4:b9:47:25:ac:fe:0c:26:ff:93:58:63:e9:d3:d4:9d:74:
d4:a8:7b:6c:20:13:5d:b4:1d:30:a9:6f:01:f2:00:48:bf:f3:
a8:9c:11:51:e9:21:1b:32:13:8b:e8:84:db:2c:6d:3e:84:ef:
a9:a8:d5:85:cf:bc:52:a6:3d:ab:8f:fe:29:45:28:03:af:19:
05:29:7c:51:0f:27:a6:33:57:33:03:c4:76:bc:fb:8b:aa:7d:
3e:3a:85:92:b8:8d:50:ec:3f:e4:db:86:9a:8b:22:c3:be:26:
7a:d4:3c:3b:08:f8:3d:9f:96:bb:9a:07:65:3e:a7:24:d4:ed:
db:22:80:d9:be:f8:fa:2d:a5:c1:79:a3:e7:21:c7:be:1e:0c:
fd:31:67:ac:53:ca:18:4d:c2:30:c5:e0:f6:66:95:8f:67:32:
86:bf:74:e6:e5:59:5a:4b:8e:d2:5f:34:4f:c7:5a:6e:4d:2f:
75:19:50:10
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/1FTRLEqLWyrInmcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExODEyMDAwMFoXDTIyMTIyNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZjJjYmM1NTUtNjU4Mi00ZTFlLTg2MzEtZDI2NzNhN2I1ZDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHM+sKaBno5mfIXWhF7LrMQtlukp/XpWRr/Z
xhsX0V4yeq+tLzxeu0CJ9PdVjqpjbYloea9J+3LOpIbmzZXDQIUjil6kD0g2mbPZ
swIRp2KCuoJM1AcvYYEAwKmgwx5ROxOP7ctCp5MD4Dm+Rfv/SIjEsTi/hIUDQZSR
mpME0Z+MAtR2S8pI4VuKjBJ8Pm1qz/b/KKNY5t6eN034xJc4aqLCQ8aIP58SN1Ap
eAO5mpJ4i8W7amk90WMTfHrJSxMETitmzOcs02sT2R5YjXmf/Z0PnsE4qQpRtvBx
nMW293QKbf1TmUEQiB7IXDb0rtAVzrMw7C52VtDrrV/eWnjdjwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGWbdyE8Nen7clH0V/60+ijL6aMuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNThkMmVhNjctNDhiZS0z
MWU4LTgzN2EtNTA5NjAwYjMwNmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCbJwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAC2bvNuE0nVmBAeSDPXp80gTztXAwRNYd1jmL+KgLp/h8AyjWxlNSxhb4
GLHukj8uJj31in6CEiGAJQId3G9wJO6NI0kUw1lL1rS5RyWs/gwm/5NYY+nT1J10
1Kh7bCATXbQdMKlvAfIASL/zqJwRUekhGzITi+iE2yxtPoTvqajVhc+8UqY9q4/+
KUUoA68ZBSl8UQ8npjNXMwPEdrz7i6p9PjqFkriNUOw/5NuGmosiw74metQ8Owj4
PZ+Wu5oHZT6nJNTt2yKA2b74+i2lwXmj5yHHvh4M/TFnrFPKGE3CMMXg9maVj2cy
hr905uVZWkuO0l80T8dabk0vdRlQEA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:09 2025 by rpki-client