Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6448bfb8-175e-326e-9baf-d21140e9adab.roa
File: 6448bfb8-175e-326e-9baf-d21140e9adab.roa (raw, json)
Hash identifier: hHN+UiQBSGHS3ezxZ+DjcKw9jpcHDQI2cl5Pr/auZQc=
Subject key identifier: FD:A0:1D:1A:0F:D3:CF:B6:35:17:09:29:0B:63:B3:1E:BC:17:36:09
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5B23355BBE4E9D69578DFC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6448bfb8-175e-326e-9baf-d21140e9adab.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5b:23:35:5b:be:4e:9d:69:57:8d:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=08f35532-e278-4a7a-afc4-f8b998b29fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:f1:f9:af:ab:29:bd:00:5a:9a:f4:e0:24:
5b:2e:ab:03:79:4e:91:ee:77:95:61:ed:2e:ee:88:
7e:43:8c:56:46:ec:4f:7c:e0:26:f4:8a:68:7b:a1:
6e:55:63:28:83:03:91:40:60:07:78:65:21:a8:ea:
57:c1:68:1f:4d:db:27:cb:24:8b:2a:40:84:e7:17:
c0:d5:fe:31:a4:69:80:16:96:de:86:98:cb:05:90:
92:10:90:e1:fd:0e:02:58:0a:bd:15:be:db:9e:36:
5f:c0:77:b8:ea:05:08:ed:0c:61:db:16:e1:04:71:
79:fe:b4:8d:cb:4f:1a:d1:b2:7b:25:b4:02:54:90:
bd:5c:8f:79:da:ef:be:73:0c:27:6b:b3:16:06:5e:
6a:b9:ef:53:ce:c4:7f:de:ac:6d:90:ed:fd:05:fa:
1c:a1:f2:f1:f9:1d:e5:4a:de:10:52:17:7e:85:ec:
77:25:7c:34:34:13:d2:59:ca:79:40:db:06:68:94:
12:3b:4b:09:58:1b:06:9f:f7:2d:fd:18:d9:68:1e:
26:02:06:29:1f:b3:d1:71:60:12:bc:9d:74:8b:46:
fa:ea:51:96:10:72:20:cd:e4:7f:21:7a:85:63:5e:
06:5c:0e:8f:90:30:1e:40:8f:dd:a9:06:15:83:ed:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:1D:1A:0F:D3:CF:B6:35:17:09:29:0B:63:B3:1E:BC:17:36:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6448bfb8-175e-326e-9baf-d21140e9adab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:31:64:bb:36:3c:c2:ad:b9:d8:4d:32:a5:77:88:1f:4c:bf:
a0:52:7f:eb:0f:e3:26:13:bf:d6:48:a4:56:de:a6:16:8c:9c:
04:3c:18:d6:e8:66:82:f0:47:d8:46:4c:4e:7f:d3:f6:78:1e:
96:de:76:47:9a:dc:83:76:04:4d:d1:47:e9:1f:64:27:88:3c:
8d:59:c2:08:82:5e:c7:36:98:13:ea:08:ca:03:81:83:49:b7:
ff:d7:6f:7b:52:c7:f1:de:1d:ce:3b:5f:bf:1e:2e:e1:6c:d1:
49:3c:fe:0f:b1:53:fa:ed:7a:6b:8e:42:22:af:56:95:8b:bb:
0d:87:da:b5:9e:52:3d:0b:fc:d3:bb:4f:a0:06:e5:45:d2:f1:
24:3d:5b:31:4c:79:40:89:fa:b5:bf:9f:41:11:36:55:ee:53:
90:0b:84:30:9d:6a:54:d8:15:16:97:a2:c2:dd:fa:07:0d:a9:
d4:2a:6f:1f:0e:00:bf:3c:e6:bc:62:94:50:31:71:05:85:28:
e0:6c:a7:14:34:04:5e:fa:4f:e9:ac:21:7b:04:bc:c0:a4:3c:
78:45:43:12:1d:86:fc:cf:05:c6:c8:29:9b:8e:e9:80:5a:ff:
d6:63:ea:f0:02:4c:11:22:c9:5c:87:8d:97:c3:37:d4:c7:00:
c7:67:04:5b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1bIzVbvk6daVeN/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
MDhmMzU1MzItZTI3OC00YTdhLWFmYzQtZjhiOTk4YjI5ZmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+fx+a+rKb0AWpr04CRbLqsDeU6R7neVYe0u
7oh+Q4xWRuxPfOAm9Ipoe6FuVWMogwORQGAHeGUhqOpXwWgfTdsnyySLKkCE5xfA
1f4xpGmAFpbehpjLBZCSEJDh/Q4CWAq9Fb7bnjZfwHe46gUI7Qxh2xbhBHF5/rSN
y08a0bJ7JbQCVJC9XI952u++cwwna7MWBl5que9TzsR/3qxtkO39BfocofLx+R3l
St4QUhd+hex3JXw0NBPSWcp5QNsGaJQSO0sJWBsGn/ct/RjZaB4mAgYpH7PRcWAS
vJ10i0b66lGWEHIgzeR/IXqFY14GXA6PkDAeQI/dqQYVg+2SVwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP2gHRoP08+2NRcJKQtjsx68FzYJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjQ0OGJmYjgtMTc1ZS0z
MjZlLTliYWYtZDIxMTQwZTlhZGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANhQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApzFkuzY8wq252E0ypXeIH0y/oFJ/6w/jJhO/1kikVt6mFoycBDwY1uhm
gvBH2EZMTn/T9ngelt52R5rcg3YETdFH6R9kJ4g8jVnCCIJexzaYE+oIygOBg0m3
/9dve1LH8d4dzjtfvx4u4WzRSTz+D7FT+u16a45CIq9WlYu7DYfatZ5SPQv807tP
oAblRdLxJD1bMUx5QIn6tb+fQRE2Ve5TkAuEMJ1qVNgVFpeiwt36Bw2p1CpvHw4A
vzzmvGKUUDFxBYUo4GynFDQEXvpP6awhewS8wKQ8eEVDEh2G/M8Fxsgpm47pgFr/
1mPq8AJMESLJXIeNl8M31McAx2cEWw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:34 2025 by rpki-client