Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/76140e54-b6e6-37bd-a009-abcde1cc4d5b.roa
File: 76140e54-b6e6-37bd-a009-abcde1cc4d5b.roa (raw, json)
Hash identifier: tD8BsViYxhte+Ge4Yw+hNPmRFib36tEMiX9yiu0ECUw=
Subject key identifier: 05:32:9F:19:6B:DE:10:E8:32:10:71:B8:D9:93:7C:70:0E:31:D2:02
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584091195EDDC03BFFBEFF7FCB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/76140e54-b6e6-37bd-a009-abcde1cc4d5b.roa
Signing time: Fri 13 Jan 2023 12:00:00 +0000
ROA not before: Fri 13 Jan 2023 12:00:00 +0000
ROA not after: Sat 18 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 71.152.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:91:19:5e:dd:c0:3b:ff:be:ff:7f:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 13 12:00:00 2023 GMT
Not After : Feb 18 05:00:00 2023 GMT
Subject: CN=940a7fca-b2b3-45f5-9a50-74a5b90c5710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:e9:ea:62:b9:ed:3c:b9:90:8a:dd:99:f0:
16:3a:99:9d:44:b2:58:33:76:a4:87:7a:2f:b3:eb:
d6:10:06:ba:76:19:d1:1b:cb:d1:6f:6b:6f:07:d0:
ae:9b:fd:3e:e8:e6:8a:c4:20:2b:7a:83:66:4d:53:
88:7f:45:77:bd:3e:52:de:28:e5:de:c4:ef:1a:cf:
8c:d4:15:d8:40:5c:de:49:fe:5a:b8:49:72:d6:39:
f3:05:63:d7:7d:42:fd:7c:e5:4c:e8:b1:02:bb:ee:
87:ff:93:24:52:39:2f:fc:c7:b7:92:d8:8f:48:23:
95:f4:35:2b:98:ce:2b:3a:6f:c7:78:ec:54:7f:8f:
0b:18:ce:98:1e:02:91:ae:b6:b2:7a:f6:e8:3b:01:
58:77:9d:d7:87:8f:de:e1:43:69:45:f4:23:78:8c:
3c:d8:94:de:5e:71:80:9d:a7:ac:8e:94:ac:d4:cc:
49:e1:e7:3e:ab:c6:1a:d4:47:e4:06:21:94:33:46:
fa:79:75:2b:79:cb:52:8e:f2:9b:16:3b:e7:66:5e:
66:fb:86:21:74:48:c1:d9:2f:f7:03:d7:29:87:5d:
71:0d:a1:d0:69:52:a2:74:8b:0b:b5:36:14:76:d3:
b2:04:ae:52:57:80:ed:2f:1f:18:5a:25:76:92:c9:
ef:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:32:9F:19:6B:DE:10:E8:32:10:71:B8:D9:93:7C:70:0E:31:D2:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/76140e54-b6e6-37bd-a009-abcde1cc4d5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:72:57:3b:2c:46:a5:e1:8e:ba:0d:c4:08:10:a3:2e:50:9c:
37:c8:e8:f9:ce:29:4c:98:b5:21:8b:e7:50:fe:d2:a2:21:18:
8f:41:ee:e3:d7:c2:0f:a1:a6:31:fd:45:7e:82:c8:d0:f6:bb:
bc:f9:73:82:be:9c:92:09:cd:fb:2f:ae:a3:ff:ef:6f:cf:9a:
70:dc:9c:83:d5:1c:88:cf:99:c8:26:02:52:e9:8a:37:7a:d1:
f3:bf:ca:57:72:82:ce:70:9b:24:96:65:66:15:65:97:ea:ad:
20:56:78:0d:ce:54:54:68:d1:99:49:39:70:62:12:d8:bc:7c:
4a:c2:0b:1c:e4:ce:29:21:53:c4:45:e0:66:f6:b3:29:ac:55:
06:2e:85:08:47:fc:8d:96:7b:58:cc:c8:e0:3e:eb:9f:e7:d1:
ef:47:63:dc:b6:0d:ba:b5:62:e5:4f:f6:4d:7a:ee:7e:1c:b6:
c7:70:9b:03:b8:09:30:6d:00:b0:4a:38:ec:6d:bf:9b:85:56:
76:c8:e6:ec:a4:7d:b1:6a:e2:24:d7:93:8a:ef:f8:7e:ba:74:
3f:da:f8:38:56:e1:4a:55:8c:7f:8d:2f:94:ae:88:e6:ac:92:
4b:27:b5:cf:95:21:df:8c:ad:8c:b8:47:a0:00:1b:eb:69:33:
32:d3:be:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECRGV7dwDv/vv9/y4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMzEyMDAwMFoXDTIzMDIxODA1MDAwMFowLzEtMCsGA1UEAxMk
OTQwYTdmY2EtYjJiMy00NWY1LTlhNTAtNzRhNWI5MGM1NzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWvp6mK57Ty5kIrdmfAWOpmdRLJYM3akh3ov
s+vWEAa6dhnRG8vRb2tvB9Cum/0+6OaKxCAreoNmTVOIf0V3vT5S3ijl3sTvGs+M
1BXYQFzeSf5auEly1jnzBWPXfUL9fOVM6LECu+6H/5MkUjkv/Me3ktiPSCOV9DUr
mM4rOm/HeOxUf48LGM6YHgKRrrayevboOwFYd53Xh4/e4UNpRfQjeIw82JTeXnGA
naesjpSs1MxJ4ec+q8Ya1EfkBiGUM0b6eXUrectSjvKbFjvnZl5m+4YhdEjB2S/3
A9cph11xDaHQaVKidIsLtTYUdtOyBK5SV4DtLx8YWiV2ksnvhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAUynxlr3hDoMhBxuNmTfHAOMdICMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzYxNDBlNTQtYjZlNi0z
N2JkLWEwMDktYWJjZGUxY2M0ZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHR5gAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1yVzssRqXhjroNxAgQoy5QnDfI6PnOKUyYtSGL51D+0qIhGI9B7uPX
wg+hpjH9RX6CyND2u7z5c4K+nJIJzfsvrqP/72/PmnDcnIPVHIjPmcgmAlLpijd6
0fO/yldygs5wmySWZWYVZZfqrSBWeA3OVFRo0ZlJOXBiEti8fErCCxzkzikhU8RF
4Gb2symsVQYuhQhH/I2We1jMyOA+65/n0e9HY9y2Dbq1YuVP9k167n4ctsdwmwO4
CTBtALBKOOxtv5uFVnbI5uykfbFq4iTXk4rv+H66dD/a+DhW4UpVjH+NL5SuiOas
kksntc+VId+MrYy4R6AAG+tpMzLTvko=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:13:57 2024 by rpki-client on console-ams.rpki-client.org