Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63921116-e6f0-3225-91d7-74ab3a86271b.roa
File: 63921116-e6f0-3225-91d7-74ab3a86271b.roa (raw, json)
Hash identifier: ZLC09ENC0okup1BGvcxnMN3viRD35FBn0yp4xUdOw5A=
Subject key identifier: 70:5A:C6:93:7B:77:CC:7E:C1:5B:30:0E:D0:EF:12:A5:EC:97:42:AE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5B4FDAB66F8D073E2579B740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63921116-e6f0-3225-91d7-74ab3a86271b.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 54.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5b:4f:da:b6:6f:8d:07:3e:25:79:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=0247b75a-b4e9-452b-89a6-e6ec376c309c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:49:fc:cf:1b:14:47:63:a9:4a:5a:99:c6:
c4:aa:67:49:d1:67:bd:08:7f:16:e3:8b:e0:e9:43:
f9:89:c7:2f:69:ec:2e:e9:a3:98:1d:ae:c0:1f:3a:
db:62:55:30:d7:2e:ee:1b:c6:bc:f0:db:0d:df:28:
e2:7d:5d:6c:33:c4:19:45:7a:cc:88:ef:b6:d9:5f:
e8:20:09:8d:b1:53:92:ef:ec:34:a0:35:a6:73:42:
24:05:ae:a3:7c:67:a4:ac:04:00:43:27:0a:80:72:
fd:ab:d7:f0:01:63:29:a4:a5:8b:46:a8:4c:06:ec:
ee:f2:ca:a8:18:7e:5e:c9:a2:32:bc:d6:a7:64:c5:
1f:34:24:5b:61:30:4a:d1:0b:c1:5e:d8:6f:f3:09:
a0:09:a9:cb:14:7c:49:e9:37:ee:ef:dc:6f:df:ab:
97:95:8a:6a:2d:42:17:af:f6:c3:c8:e7:da:f4:30:
aa:41:a3:c6:19:84:ca:5b:94:27:20:f9:df:aa:22:
4f:21:d6:53:10:e4:2c:99:09:f3:1b:5d:4d:47:47:
38:26:14:98:c6:23:93:bc:e8:ab:20:f4:aa:fb:f6:
5f:75:63:f7:c7:0d:30:e0:42:9e:69:1c:b4:8c:cf:
f5:df:08:6b:34:39:1c:2d:f9:5b:87:96:ca:ba:4d:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5A:C6:93:7B:77:CC:7E:C1:5B:30:0E:D0:EF:12:A5:EC:97:42:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/63921116-e6f0-3225-91d7-74ab3a86271b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:03:56:1d:e9:32:d7:3a:e8:91:e8:8c:4d:d3:84:26:b7:79:
e3:c0:27:c8:65:d9:82:f9:4d:ff:e4:27:39:e1:bb:31:6f:b2:
09:29:38:57:c7:e3:6f:11:20:88:60:53:ac:2b:fd:66:59:12:
35:c3:46:eb:0e:16:5d:20:af:14:d6:35:83:43:60:1b:03:14:
7c:5d:66:e9:82:39:91:b1:0a:85:0d:2a:88:ae:07:8b:b8:07:
a0:64:94:c5:aa:92:bf:42:c3:05:48:1e:e5:0c:38:c4:a3:84:
17:3d:bb:9a:c9:39:d2:39:4a:1f:d2:cc:79:2e:46:1e:52:00:
30:5b:3a:94:df:2a:57:a0:7f:ed:ab:20:bc:81:42:b6:28:7c:
cb:4d:8e:ce:ff:f6:63:21:04:2d:2e:86:0f:6c:48:fa:c7:93:
2f:cb:7f:40:18:a5:58:01:6a:98:f0:db:3b:18:ef:98:a0:bc:
55:3a:b3:db:ba:b3:87:ab:c4:f8:3c:ee:1b:ce:4e:58:79:01:
b9:08:5c:95:52:f8:0d:d8:b8:d4:c3:3c:37:d8:82:1c:60:b0:
e8:fa:2c:a0:98:0d:51:e2:f7:e0:65:43:af:35:ab:5c:81:48:
4a:8a:89:9e:59:69:35:17:67:03:9d:0b:df:2a:8a:8f:73:5d:
3a:b4:08:0b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1bT9q2b40HPiV5t0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
MDI0N2I3NWEtYjRlOS00NTJiLTg5YTYtZTZlYzM3NmMzMDljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSlJ/M8bFEdjqUpamcbEqmdJ0We9CH8W44vg
6UP5iccvaewu6aOYHa7AHzrbYlUw1y7uG8a88NsN3yjifV1sM8QZRXrMiO+22V/o
IAmNsVOS7+w0oDWmc0IkBa6jfGekrAQAQycKgHL9q9fwAWMppKWLRqhMBuzu8sqo
GH5eyaIyvNanZMUfNCRbYTBK0QvBXthv8wmgCanLFHxJ6Tfu79xv36uXlYpqLUIX
r/bDyOfa9DCqQaPGGYTKW5QnIPnfqiJPIdZTEOQsmQnzG11NR0c4JhSYxiOTvOir
IPSq+/ZfdWP3xw0w4EKeaRy0jM/13whrNDkcLflbh5bKuk18cQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHBaxpN7d8x+wVswDtDvEqXsl0KuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjM5MjExMTYtZTZmMC0z
MjI1LTkxZDctNzRhYjNhODYyNzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANoowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtQNWHeky1zrokeiMTdOEJrd548AnyGXZgvlN/+QnOeG7MW+yCSk4V8fj
bxEgiGBTrCv9ZlkSNcNG6w4WXSCvFNY1g0NgGwMUfF1m6YI5kbEKhQ0qiK4Hi7gH
oGSUxaqSv0LDBUge5Qw4xKOEFz27msk50jlKH9LMeS5GHlIAMFs6lN8qV6B/7asg
vIFCtih8y02Ozv/2YyEELS6GD2xI+seTL8t/QBilWAFqmPDbOxjvmKC8VTqz27qz
h6vE+DzuG85OWHkBuQhclVL4Ddi41MM8N9iCHGCw6PosoJgNUeL34GVDrzWrXIFI
SoqJnllpNRdnA50L3yqKj3NdOrQICw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:49 2025 by rpki-client