Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59f886c4-57f0-3a09-8283-ecccd3bedfb7.roa
File: 59f886c4-57f0-3a09-8283-ecccd3bedfb7.roa (raw, json)
Hash identifier: lwUli8zL/v9Xfj+S9kBc7OZLRMfHwaGRRvtG5vGXNJY=
Subject key identifier: 23:57:40:79:74:D4:0A:28:00:FC:93:CA:77:16:18:88:FE:DC:1C:B2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDBC0A2CA723B265E96FEFA40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59f886c4-57f0-3a09-8283-ecccd3bedfb7.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 56.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:db:c0:a2:ca:72:3b:26:5e:96:fe:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=fe5ea923-41ae-4bc3-91de-540ab4a809b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f9:c2:98:f9:3c:4b:73:0c:ae:e9:63:47:69:
74:19:3a:51:01:80:7b:6d:05:9e:d7:1c:81:3b:99:
a7:8b:9d:05:be:3b:ee:42:3f:9c:44:4f:74:03:ba:
dc:d5:4a:25:40:e5:19:86:a6:79:45:8c:cf:58:e8:
bd:a0:44:00:da:0d:e8:fe:e3:74:38:bb:6c:f3:a9:
26:11:9a:97:37:95:ed:85:f2:82:c6:cf:3c:69:3e:
1c:a6:f5:74:e4:24:04:55:21:3a:a1:b4:ef:ec:cb:
83:79:b5:94:77:bd:84:00:1e:f1:d2:ae:8b:01:60:
6a:aa:91:b1:a6:30:7b:2d:fc:3f:27:e4:3a:ab:55:
68:70:f9:1c:e3:c7:44:9b:ac:09:4f:86:63:72:24:
1d:2c:4a:69:34:43:4c:06:09:e9:83:bc:05:c1:90:
44:4b:fe:c2:d6:bf:6b:26:1a:1a:50:b3:4b:3d:0d:
00:a2:09:59:e2:51:57:c3:9e:26:ff:3d:18:87:13:
69:db:28:29:b3:92:75:48:90:6f:e8:eb:ed:f9:2c:
e8:79:fe:56:59:b3:fb:58:12:92:74:28:13:7a:32:
31:a9:2a:22:08:f4:a7:bd:6c:25:7f:fb:43:3c:0e:
ed:1b:76:a4:1c:21:3f:f0:34:9a:d8:a9:38:27:ac:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:57:40:79:74:D4:0A:28:00:FC:93:CA:77:16:18:88:FE:DC:1C:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/59f886c4-57f0-3a09-8283-ecccd3bedfb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:41:5e:fd:db:91:d3:23:0c:a3:8f:29:1b:09:3f:7f:b5:05:
cc:5f:bc:04:4b:65:99:d4:fe:5d:d3:2a:cb:fd:b6:af:46:ea:
5f:b5:32:91:1f:f5:13:fc:1c:ce:84:c1:49:e0:fb:9f:5e:50:
53:64:36:fe:80:f5:ae:70:6e:7c:d9:50:5d:5c:46:9b:76:b7:
fe:9d:26:09:11:f5:04:07:57:60:73:bf:f9:67:38:93:7e:29:
e9:ec:aa:14:db:24:2a:25:46:3e:50:51:3d:7c:50:ec:2a:db:
e7:1f:ff:74:aa:c0:9d:be:08:86:f5:c1:09:bd:96:ff:93:5e:
18:33:bb:a5:17:b8:28:d3:4f:95:18:9d:49:29:ce:f8:70:ca:
8d:9c:e2:c0:42:d9:e5:3f:3a:28:b8:72:d5:e0:ce:3f:3f:30:
a8:65:5d:e2:8f:55:68:8d:40:fe:8b:ec:22:62:92:06:8c:2d:
2b:b9:ab:54:40:01:6a:b2:38:62:e8:56:18:84:57:b2:47:45:
61:a2:ce:1f:f6:a9:4f:54:2c:04:9b:3a:58:fb:97:54:5d:49:
a7:14:3d:8b:ab:5a:15:23:5d:1c:ca:3c:d7:fa:20:2c:90:47:
55:0e:08:a0:0b:6c:6a:23:ad:ba:cb:0e:6d:08:e4:3d:b4:9e:
42:e5:04:de
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/bwKLKcjsmXpb++kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwOTEyMDAwMFoXDTIyMTIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZmU1ZWE5MjMtNDFhZS00YmMzLTkxZGUtNTQwYWI0YTgwOWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifnCmPk8S3MMruljR2l0GTpRAYB7bQWe1xyB
O5mni50FvjvuQj+cRE90A7rc1UolQOUZhqZ5RYzPWOi9oEQA2g3o/uN0OLts86km
EZqXN5XthfKCxs88aT4cpvV05CQEVSE6obTv7MuDebWUd72EAB7x0q6LAWBqqpGx
pjB7Lfw/J+Q6q1VocPkc48dEm6wJT4ZjciQdLEppNENMBgnpg7wFwZBES/7C1r9r
JhoaULNLPQ0AoglZ4lFXw54m/z0YhxNp2ygps5J1SJBv6Ovt+Szoef5WWbP7WBKS
dCgTejIxqSoiCPSnvWwlf/tDPA7tG3akHCE/8DSa2Kk4J6xgRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCNXQHl01AooAPyTyncWGIj+3ByyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTlmODg2YzQtNTdmMC0z
YTA5LTgyODMtZWNjY2QzYmVkZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOHswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeUFe/duR0yMMo48pGwk/f7UFzF+8BEtlmdT+XdMqy/22r0bqX7UykR/1
E/wczoTBSeD7n15QU2Q2/oD1rnBufNlQXVxGm3a3/p0mCRH1BAdXYHO/+Wc4k34p
6eyqFNskKiVGPlBRPXxQ7Crb5x//dKrAnb4IhvXBCb2W/5NeGDO7pRe4KNNPlRid
SSnO+HDKjZziwELZ5T86KLhy1eDOPz8wqGVd4o9VaI1A/ovsImKSBowtK7mrVEAB
arI4YuhWGIRXskdFYaLOH/apT1QsBJs6WPuXVF1JpxQ9i6taFSNdHMo81/ogLJBH
VQ4IoAtsaiOtussObQjkPbSeQuUE3g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:33 2025 by rpki-client