Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71244d0c-dbe8-3226-b679-fe1fe36e594a.roa
File: 71244d0c-dbe8-3226-b679-fe1fe36e594a.roa (raw, json)
Hash identifier: KMqDmEE7q7LbtbfgG34HzS4dCM3STDjpkl9Smc3ydu0=
Subject key identifier: 55:08:A0:95:4C:01:A7:4E:E4:82:5F:C1:D1:F1:1A:D6:A9:C0:79:39
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584099F0D266C033CDE0AF693108
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71244d0c-dbe8-3226-b679-fe1fe36e594a.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.35.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:99:f0:d2:66:c0:33:cd:e0:af:69:31:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=4f5a6d89-73ad-44a1-98be-6bf02a64cfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:88:fa:ec:71:1b:87:ea:a8:23:74:1c:ce:
78:86:cf:af:98:95:2e:e4:ed:2e:b0:d6:cf:e2:32:
e5:78:61:02:a3:16:a8:c4:72:bc:b7:2f:91:7d:23:
91:89:bf:31:58:5c:b6:2f:a1:02:d4:23:60:4a:0c:
d6:ed:b2:50:b1:2c:32:c8:b1:ff:43:31:93:af:79:
8c:86:74:38:1d:ed:52:34:76:60:c1:e6:6e:a2:f2:
02:fe:37:d6:86:c8:90:6b:06:1c:b2:bc:1b:d2:51:
5b:0b:d4:b0:17:72:12:7a:0e:68:d3:53:be:64:10:
67:ec:73:ec:c3:89:59:89:cd:6b:97:42:a3:51:10:
44:05:c8:a3:e8:d4:c9:c0:3b:fe:d9:c4:a1:75:07:
17:2d:a3:41:e8:48:72:26:61:55:6d:88:bf:7c:b5:
eb:85:79:b6:0e:0d:61:3c:a2:4a:80:d2:c7:37:b3:
ec:ab:51:e6:c5:05:47:19:0b:25:c5:c0:13:40:fe:
6d:4f:6c:b8:7f:81:86:84:26:d3:62:8e:48:4b:f9:
a0:ee:61:af:54:18:6a:c1:19:5f:8b:64:5f:41:da:
ea:1f:43:9d:d8:08:83:35:35:c6:aa:fa:7d:1e:36:
90:18:a5:40:b7:84:88:0e:f2:18:12:59:ca:3e:ff:
78:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:08:A0:95:4C:01:A7:4E:E4:82:5F:C1:D1:F1:1A:D6:A9:C0:79:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/71244d0c-dbe8-3226-b679-fe1fe36e594a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.35.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:af:55:6c:79:f7:7f:f7:34:86:35:2b:4e:5e:8f:c7:72:97:
7f:7d:79:f6:71:d3:d0:e2:17:05:ad:eb:08:16:49:c4:8d:19:
f5:bd:d2:eb:6a:12:1c:df:5f:49:94:ca:7a:c9:21:c1:85:f7:
5c:db:61:9d:b2:ff:b1:69:34:08:2e:1d:83:33:6f:60:16:77:
57:31:53:a2:97:b2:32:8c:00:8f:06:ef:a8:72:f2:7f:19:14:
fb:78:1e:76:fb:7c:33:f5:ab:ed:8c:75:62:d5:31:87:91:8d:
80:bb:f7:91:06:78:c9:f6:f1:56:b8:74:14:60:62:70:e6:d9:
8d:a8:99:4d:fb:7f:17:3f:49:c9:4d:01:2e:d1:6f:cc:be:6e:
65:65:3f:cf:e8:1f:7c:95:e8:be:14:e3:93:c5:41:8e:a4:2c:
82:0d:cb:61:dc:79:bd:4e:65:37:0b:cf:e9:bf:46:dc:bf:7f:
8b:4a:6e:0d:57:94:8f:91:9f:36:2a:b3:a2:6b:4b:98:03:38:
1d:41:a0:0b:78:e1:1b:a4:91:8f:4f:c8:76:03:56:f2:e9:f1:
f8:d0:76:77:eb:fb:db:64:d0:d3:1c:04:82:36:f2:9b:29:70:
a1:86:dd:72:57:83:e9:b2:0e:71:a3:db:ec:46:19:02:c8:84:
ec:ba:49:96
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECZ8NJmwDPN4K9pMQgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExNjEyMDAwMFoXDTIzMDIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
NGY1YTZkODktNzNhZC00NGExLTk4YmUtNmJmMDJhNjRjZmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRGI+uxxG4fqqCN0HM54hs+vmJUu5O0usNbP
4jLleGECoxaoxHK8ty+RfSORib8xWFy2L6EC1CNgSgzW7bJQsSwyyLH/QzGTr3mM
hnQ4He1SNHZgweZuovIC/jfWhsiQawYcsrwb0lFbC9SwF3ISeg5o01O+ZBBn7HPs
w4lZic1rl0KjURBEBcij6NTJwDv+2cShdQcXLaNB6EhyJmFVbYi/fLXrhXm2Dg1h
PKJKgNLHN7Psq1HmxQVHGQslxcATQP5tT2y4f4GGhCbTYo5IS/mg7mGvVBhqwRlf
i2RfQdrqH0Od2AiDNTXGqvp9HjaQGKVAt4SIDvIYElnKPv94KQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFUIoJVMAadO5IJfwdHxGtapwHk5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzEyNDRkMGMtZGJlOC0z
MjI2LWI2NzktZmUxZmUzNmU1OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOCMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAEa9VbHn3f/c0hjUrTl6Px3KXf3159nHT0OIXBa3rCBZJxI0Z9b3S62oS
HN9fSZTKeskhwYX3XNthnbL/sWk0CC4dgzNvYBZ3VzFTopeyMowAjwbvqHLyfxkU
+3gedvt8M/Wr7Yx1YtUxh5GNgLv3kQZ4yfbxVrh0FGBicObZjaiZTft/Fz9JyU0B
LtFvzL5uZWU/z+gffJXovhTjk8VBjqQsgg3LYdx5vU5lNwvP6b9G3L9/i0puDVeU
j5GfNiqzomtLmAM4HUGgC3jhG6SRj0/IdgNW8unx+NB2d+v722TQ0xwEgjbymylw
oYbdcleD6bIOcaPb7EYZAsiE7LpJlg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:21:36 2025 by rpki-client