Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68c9bd68-f863-33ce-b6a6-e4184116a17a.roa
File: 68c9bd68-f863-33ce-b6a6-e4184116a17a.roa (raw, json)
Hash identifier: 6ut81yGIGWz/FEG7+gUNOtScSQT8FigwdrG4PwKUV8A=
Subject key identifier: 50:F6:94:0E:DC:D0:3A:6B:D4:93:7D:F3:DA:1A:FB:FE:29:1F:FC:01
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840001AAEABC630D34D521B79D0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68c9bd68-f863-33ce-b6a6-e4184116a17a.roa
Signing time: Tue 22 Nov 2022 12:00:00 +0000
ROA not before: Tue 22 Nov 2022 12:00:00 +0000
ROA not after: Wed 28 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 56.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:00:1a:ae:ab:c6:30:d3:4d:52:1b:79:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 22 12:00:00 2022 GMT
Not After : Dec 28 05:00:00 2022 GMT
Subject: CN=c0252d77-fe4f-4ca5-87e8-ff65de824112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:e0:64:3f:9d:79:77:8d:cf:73:fc:74:4a:
fd:44:ee:43:e5:49:77:83:89:31:c7:b6:3d:79:8b:
6b:9d:20:32:10:9a:4b:6d:d1:46:8e:f8:65:a5:90:
01:93:0e:9e:b7:7d:2a:a8:0c:91:a2:2e:70:2c:b9:
a0:1b:42:33:a0:36:e6:bb:e7:ce:f6:75:cc:e0:62:
ce:4a:7c:00:d1:72:11:9a:15:af:41:f6:2d:34:ff:
28:67:d8:dd:3e:14:01:3c:ca:97:a5:a6:59:47:c7:
cc:de:8a:bd:77:e3:d3:2f:ae:3f:42:bf:e4:ee:ce:
23:22:8c:a6:37:63:03:db:09:fd:b3:f3:89:50:ea:
2e:bf:41:dc:e3:d6:5b:12:60:5e:ce:99:14:0a:c3:
a8:a7:d4:27:45:01:ab:0f:b6:d2:c6:54:77:c5:f2:
b6:a8:1a:92:29:6f:11:bb:4b:13:1f:59:57:59:87:
63:b6:1e:a7:b3:a2:e2:84:a4:57:47:bb:7f:bf:ab:
2b:2a:d6:70:4b:5e:a4:18:46:38:fc:dc:a8:d7:31:
6e:46:b4:c1:bc:ef:87:88:0d:c7:e4:0c:50:b6:71:
a5:51:69:83:03:77:3f:11:78:31:2a:9a:5d:72:d7:
ee:6a:2c:f3:24:32:c4:a9:e1:74:67:b1:65:7c:d7:
4a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F6:94:0E:DC:D0:3A:6B:D4:93:7D:F3:DA:1A:FB:FE:29:1F:FC:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68c9bd68-f863-33ce-b6a6-e4184116a17a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:bc:90:c8:f6:f8:fe:24:9f:72:99:31:bc:25:dc:72:a2:2f:
d7:f9:74:85:94:a3:3d:33:66:03:ba:22:04:c2:e5:0d:e7:47:
38:cd:92:33:a5:08:0c:76:72:48:52:5e:72:96:9b:15:27:af:
e0:70:1a:d9:63:cd:a3:f9:e2:80:a1:10:98:7a:00:21:82:98:
de:6b:10:41:59:34:53:98:f9:a9:31:c3:c5:78:19:a6:8b:9b:
27:02:30:aa:0c:ad:a0:74:fe:a4:35:64:88:ed:bd:79:3f:70:
e9:36:a1:15:48:0c:f2:bc:ee:30:28:c4:2f:dd:ce:89:23:95:
b3:45:b7:a0:54:03:d4:31:47:6a:12:6f:f5:d7:18:cd:99:ab:
d2:69:66:9c:e3:c6:00:bf:6d:ee:6f:0f:24:3e:35:1d:84:eb:
68:0a:fe:c4:3b:ff:c6:5e:4a:fd:27:cf:4e:aa:3a:1a:68:1d:
3b:15:ed:69:30:3c:d2:23:87:77:00:85:20:c6:26:96:2f:38:
3d:7f:8b:2a:3c:fa:8e:f0:60:2c:81:25:26:e0:00:b2:c5:a9:
7b:69:d7:a0:a3:e2:a8:53:38:22:83:71:97:36:0c:cd:fe:37:
88:f9:6b:0d:b3:bd:87:37:7e:b6:a7:ee:e3:c5:13:c8:6b:81:
17:c1:66:a1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAAGq6rxjDTTVIbedAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyMjEyMDAwMFoXDTIyMTIyODA1MDAwMFowLzEtMCsGA1UEAxMk
YzAyNTJkNzctZmU0Zi00Y2E1LTg3ZTgtZmY2NWRlODI0MTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAngZD+deXeNz3P8dEr9RO5D5Ul3g4kxx7Y9
eYtrnSAyEJpLbdFGjvhlpZABkw6et30qqAyRoi5wLLmgG0IzoDbmu+fO9nXM4GLO
SnwA0XIRmhWvQfYtNP8oZ9jdPhQBPMqXpaZZR8fM3oq9d+PTL64/Qr/k7s4jIoym
N2MD2wn9s/OJUOouv0Hc49ZbEmBezpkUCsOop9QnRQGrD7bSxlR3xfK2qBqSKW8R
u0sTH1lXWYdjth6ns6LihKRXR7t/v6srKtZwS16kGEY4/Nyo1zFuRrTBvO+HiA3H
5AxQtnGlUWmDA3c/EXgxKppdctfuaizzJDLEqeF0Z7FlfNdKUwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFD2lA7c0Dpr1JN989oa+/4pH/wBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjhjOWJkNjgtZjg2My0z
M2NlLWI2YTYtZTQxODQxMTZhMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOCswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOLyQyPb4/iSfcpkxvCXccqIv1/l0hZSjPTNmA7oiBMLlDedHOM2SM6UI
DHZySFJecpabFSev4HAa2WPNo/nigKEQmHoAIYKY3msQQVk0U5j5qTHDxXgZpoub
JwIwqgytoHT+pDVkiO29eT9w6TahFUgM8rzuMCjEL93OiSOVs0W3oFQD1DFHahJv
9dcYzZmr0mlmnOPGAL9t7m8PJD41HYTraAr+xDv/xl5K/SfPTqo6GmgdOxXtaTA8
0iOHdwCFIMYmli84PX+LKjz6jvBgLIElJuAAssWpe2nXoKPiqFM4IoNxlzYMzf43
iPlrDbO9hzd+tqfu48UTyGuBF8FmoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:07 2025 by rpki-client