Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/69cd6b45-0b77-3cfb-91eb-4098d01208ad.roa
File: 69cd6b45-0b77-3cfb-91eb-4098d01208ad.roa (raw, json)
Hash identifier: /lWo4k8PH/lecAdijUsCGzYj7VH1LWnW4nMDWk7CJgE=
Subject key identifier: 2C:28:33:41:38:EC:06:E3:D8:86:75:12:AD:B3:B0:59:55:15:25:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405EE7EF9477C8F6615F3B0620
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/69cd6b45-0b77-3cfb-91eb-4098d01208ad.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 68.217.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5e:e7:ef:94:77:c8:f6:61:5f:3b:06:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=449b2525-74a6-49af-a5b0-bc6961406baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:65:4f:cb:59:9c:cd:b5:68:ea:97:09:4a:
0d:e1:21:d8:09:f3:b4:98:ee:db:56:42:1f:97:c5:
29:6f:fe:f5:8b:0d:66:27:15:81:97:cf:94:58:87:
5d:33:71:b6:20:b5:3b:98:83:cb:51:65:6e:db:96:
97:17:f7:db:61:35:33:e3:7b:91:28:a5:9d:cf:a2:
46:4e:1a:9a:a0:20:18:45:d9:ea:30:39:83:05:b9:
d6:2d:51:4d:43:aa:eb:2d:05:25:b7:04:0a:17:31:
f2:96:e4:dc:81:b0:67:23:48:ec:ec:e7:37:fe:39:
f1:be:1d:1c:35:a6:42:ab:9e:da:3e:77:30:84:e8:
49:20:78:89:0d:02:f9:9c:6c:7c:0f:71:30:ea:b5:
35:2a:40:31:03:ad:45:bd:e0:bc:6c:f9:02:db:95:
3d:17:7b:36:7b:41:22:4e:55:f7:ef:8f:d7:fa:28:
42:f5:b1:2a:33:1e:72:19:ab:a7:a2:c7:cf:65:72:
70:4a:87:37:47:c5:46:a7:07:43:58:db:ce:26:86:
b2:46:0f:3e:2a:c0:01:9e:f1:5f:cb:aa:ac:0c:7d:
0a:70:9c:c5:a2:fb:98:7f:51:19:c6:1c:53:25:33:
88:70:2b:8e:43:4a:38:d2:50:26:97:c6:16:ee:48:
f5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:28:33:41:38:EC:06:E3:D8:86:75:12:AD:B3:B0:59:55:15:25:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/69cd6b45-0b77-3cfb-91eb-4098d01208ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
68.217.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:a5:2e:55:5a:45:d9:35:d5:8e:07:85:8b:c3:f1:99:5a:22:
81:c7:26:2d:14:6f:0d:b4:3e:be:1e:47:10:43:05:9e:2d:97:
f5:f9:71:40:68:2e:30:f7:51:ee:16:27:3b:fb:80:e9:fd:78:
fd:2a:85:87:71:c1:6b:da:d4:83:b3:18:71:a7:9a:3f:23:e6:
e2:fb:cd:b6:e9:22:03:d3:62:e9:f9:3f:27:f8:0d:dd:2b:ec:
71:86:bc:32:35:56:0c:4c:4d:b5:6c:56:8f:50:f2:eb:c7:3b:
c7:2a:08:eb:0c:71:ff:41:31:00:96:87:28:ad:ed:30:ff:82:
5f:8e:7d:7f:14:64:a5:43:03:5d:58:d8:a6:4d:ed:53:e1:f6:
3a:c6:c1:6d:58:67:c7:3b:b4:ea:ef:b6:97:6f:11:a6:33:ac:
b8:c6:79:94:8a:67:49:d4:32:c3:9f:f7:f0:9b:4e:37:38:cd:
f9:2d:42:41:05:69:70:fb:a4:c4:ae:62:2a:b5:cd:25:56:e3:
96:c2:16:55:d4:a8:d0:42:e5:85:75:db:e3:d1:4e:66:d4:0c:
3c:bd:8a:1c:18:3f:61:e5:37:f2:5c:e9:eb:5d:a0:9a:5d:96:
7b:ec:d0:e0:ca:d4:56:19:4f:a3:2c:1c:2c:76:f7:7e:03:d5:
1b:4c:b2:e4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBe5++Ud8j2YV87BiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNjEyMDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
NDQ5YjI1MjUtNzRhNi00OWFmLWE1YjAtYmM2OTYxNDA2YmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqallT8tZnM21aOqXCUoN4SHYCfO0mO7bVkIf
l8Upb/71iw1mJxWBl8+UWIddM3G2ILU7mIPLUWVu25aXF/fbYTUz43uRKKWdz6JG
ThqaoCAYRdnqMDmDBbnWLVFNQ6rrLQUltwQKFzHyluTcgbBnI0js7Oc3/jnxvh0c
NaZCq57aPncwhOhJIHiJDQL5nGx8D3Ew6rU1KkAxA61FveC8bPkC25U9F3s2e0Ei
TlX374/X+ihC9bEqMx5yGaunosfPZXJwSoc3R8VGpwdDWNvOJoayRg8+KsABnvFf
y6qsDH0KcJzFovuYf1EZxhxTJTOIcCuOQ0o40lAml8YW7kj1oQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCwoM0E47Abj2IZ1Eq2zsFlVFSWIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjljZDZiNDUtMGI3Ny0z
Y2ZiLTkxZWItNDA5OGQwMTIwOGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARNkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASaUuVVpF2TXVjgeFi8PxmVoigccmLRRvDbQ+vh5HEEMFni2X9flxQGgu
MPdR7hYnO/uA6f14/SqFh3HBa9rUg7MYcaeaPyPm4vvNtukiA9Ni6fk/J/gN3Svs
cYa8MjVWDExNtWxWj1Dy68c7xyoI6wxx/0ExAJaHKK3tMP+CX459fxRkpUMDXVjY
pk3tU+H2OsbBbVhnxzu06u+2l28RpjOsuMZ5lIpnSdQyw5/38JtONzjN+S1CQQVp
cPukxK5iKrXNJVbjlsIWVdSo0ELlhXXb49FOZtQMPL2KHBg/YeU38lzp612gml2W
e+zQ4MrUVhlPoywcLHb3fgPVG0yy5A==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:36:36 2025 by rpki-client