Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59730ffd-2961-3178-8fbb-2a9c9caa6ab5.roa
File: 59730ffd-2961-3178-8fbb-2a9c9caa6ab5.roa (raw, json)
Hash identifier: aaLBBgNfs6YqScIGSzWFsyfQX0Xo6fno+836HyrnVL8=
Subject key identifier: 71:02:45:2C:6E:17:8A:D0:68:36:9F:06:3D:7C:45:5A:92:AE:33:D8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D165AE9DBFADE8DECC21D8C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59730ffd-2961-3178-8fbb-2a9c9caa6ab5.roa
Signing time: Sun 05 Feb 2023 12:00:00 +0000
ROA not before: Sun 05 Feb 2023 12:00:00 +0000
ROA not after: Mon 13 Mar 2023 04:00:00 +0000
asID: 8987
IP address blocks: 158.254.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d1:65:ae:9d:bf:ad:e8:de:cc:21:d8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 5 12:00:00 2023 GMT
Not After : Mar 13 04:00:00 2023 GMT
Subject: CN=63bf250f-57ca-4a50-8d46-98afde4a4678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:92:2d:0a:51:38:f2:74:a6:03:0e:79:08:f0:
81:7f:33:9c:92:00:85:ad:54:98:2d:d9:2b:6b:4e:
99:4b:32:ce:0e:07:da:84:d6:b5:f2:5d:d0:60:9f:
18:86:9a:18:d9:e7:d2:4c:c0:f9:42:0f:df:9c:45:
c7:a7:2f:58:7c:05:7c:0a:f3:33:8f:a2:7f:b6:16:
22:11:3f:74:58:68:b0:50:30:4a:d5:08:8f:41:f4:
0f:b0:99:dc:a3:fc:c2:87:b0:31:44:9b:b8:5c:b5:
57:28:e5:b4:20:4d:70:36:75:72:ad:1f:7f:d4:b8:
fe:77:6a:a1:0b:88:51:8f:23:7c:62:70:4f:1b:bc:
39:dd:2d:11:06:2e:04:38:0f:b7:6a:02:50:12:c7:
83:a0:83:47:c9:67:f6:c3:15:25:5e:47:72:ce:e8:
65:73:9e:96:ab:48:bf:08:a4:f0:cb:e8:f0:94:dc:
b2:c7:68:a4:51:a2:08:25:aa:59:f4:d7:20:10:f8:
43:29:54:07:ce:ff:32:a8:4e:11:57:87:a6:3d:35:
77:f7:2b:98:96:64:3b:d2:d9:64:00:73:0f:a4:dc:
2b:40:14:d2:1d:f7:70:1a:ec:21:e6:39:79:be:65:
08:38:7e:a0:68:02:07:44:c3:9f:3d:38:c9:72:96:
4b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:02:45:2C:6E:17:8A:D0:68:36:9F:06:3D:7C:45:5A:92:AE:33:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59730ffd-2961-3178-8fbb-2a9c9caa6ab5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.254.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:56:a2:35:f2:b8:95:80:19:63:f3:2d:c4:3c:53:28:c5:1f:
40:8d:9a:98:c6:39:d9:47:33:d8:13:ea:b1:bd:b2:42:1d:d4:
37:bc:01:76:21:2d:e0:1e:4a:76:eb:7c:f1:11:ca:71:6d:c3:
17:2f:b5:dc:62:17:13:f8:bd:ff:c5:de:ec:72:2f:22:ec:71:
e3:4e:e7:f7:8e:a2:9a:8c:af:93:91:fd:78:64:e8:99:13:53:
fd:de:00:d9:ba:6a:1e:8f:0a:84:e0:f8:87:34:bb:94:32:0a:
2c:fe:04:8d:37:c5:1b:7d:ab:39:a9:9c:05:18:ce:56:dd:45:
29:92:ea:f8:43:ad:df:f5:9a:0e:ee:9e:20:8e:93:df:8a:35:
e2:a0:f4:cc:85:44:ec:92:b9:66:5f:85:a4:b4:33:77:22:26:
c0:ce:dc:d3:0f:33:d8:6b:99:60:88:f3:73:34:28:f4:cf:f3:
17:07:71:45:8b:bb:f6:2a:e4:e9:65:00:02:ce:98:67:08:0d:
d6:37:53:fc:df:22:c7:4d:a2:36:a1:71:3a:a6:f9:0e:2f:e8:
7d:d8:02:ed:3e:db:bf:19:87:89:f6:f3:ad:3d:dd:b5:a2:35:
95:79:d3:fb:1b:e4:d7:1c:d6:4b:99:77:24:dd:94:c9:8e:78:
2b:66:ed:f0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDRZa6dv63o3swh2MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDIwNTEyMDAwMFoXDTIzMDMxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NjNiZjI1MGYtNTdjYS00YTUwLThkNDYtOThhZmRlNGE0Njc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZItClE48nSmAw55CPCBfzOckgCFrVSYLdkr
a06ZSzLODgfahNa18l3QYJ8YhpoY2efSTMD5Qg/fnEXHpy9YfAV8CvMzj6J/thYi
ET90WGiwUDBK1QiPQfQPsJnco/zCh7AxRJu4XLVXKOW0IE1wNnVyrR9/1Lj+d2qh
C4hRjyN8YnBPG7w53S0RBi4EOA+3agJQEseDoINHyWf2wxUlXkdyzuhlc56Wq0i/
CKTwy+jwlNyyx2ikUaIIJapZ9NcgEPhDKVQHzv8yqE4RV4emPTV39yuYlmQ70tlk
AHMPpNwrQBTSHfdwGuwh5jl5vmUIOH6gaAIHRMOfPTjJcpZLHQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHECRSxuF4rQaDafBj18RVqSrjPYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTk3MzBmZmQtMjk2MS0z
MTc4LThmYmItMmE5YzljYWE2YWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnv4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYlaiNfK4lYAZY/MtxDxTKMUfQI2amMY52Ucz2BPqsb2yQh3UN7wBdiEt
4B5Kdut88RHKcW3DFy+13GIXE/i9/8Xe7HIvIuxx407n946imoyvk5H9eGTomRNT
/d4A2bpqHo8KhOD4hzS7lDIKLP4EjTfFG32rOamcBRjOVt1FKZLq+EOt3/WaDu6e
II6T34o14qD0zIVE7JK5Zl+FpLQzdyImwM7c0w8z2GuZYIjzczQo9M/zFwdxRYu7
9irk6WUAAs6YZwgN1jdT/N8ix02iNqFxOqb5Di/ofdgC7T7bvxmHifbzrT3dtaI1
lXnT+xvk1xzWS5l3JN2UyY54K2bt8A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:25:36 2023 by rpki-client on console-ams.rpki-client.org