Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d636f59-be71-3ddf-9016-a20a24a59d0c.roa
File: 7d636f59-be71-3ddf-9016-a20a24a59d0c.roa (raw, json)
Hash identifier: Fehd2YTZqOPN0iljsqVjp/HJUX05EW7mXJFLADiwXSU=
Subject key identifier: 59:DF:02:51:16:88:4D:88:AE:8F:75:8E:54:8A:78:34:87:9F:85:89
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C175C3A9E3DFB3292ECB7850
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d636f59-be71-3ddf-9016-a20a24a59d0c.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.249.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:75:c3:a9:e3:df:b3:29:2e:cb:78:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=6be46741-7b3c-45bb-8d72-bb7be5eb7dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:59:57:a2:4c:55:ff:52:ad:41:d5:97:20:
fb:a5:a5:a4:69:cd:05:67:16:e8:4c:34:d5:46:5f:
94:04:01:35:62:6e:09:3e:b9:9d:7f:24:fd:4d:39:
b0:c7:1b:42:2f:d4:e0:69:14:88:09:8f:69:9f:ad:
44:01:65:0f:4b:03:90:5a:09:84:5b:25:47:a1:fa:
e8:53:3e:51:10:3b:26:0e:a6:c5:41:5c:97:27:40:
eb:af:2a:05:8e:b9:83:c6:fb:68:ec:a2:77:af:7c:
70:5a:a2:5e:ed:55:b2:02:32:b3:5b:2e:5f:58:5a:
d7:e3:1e:40:09:85:f8:e5:a7:a5:d9:b9:4a:56:e2:
ee:96:82:bb:ec:26:35:be:a5:e0:38:2b:98:71:89:
3e:f4:0b:44:33:09:d9:81:9c:2d:ea:c1:ac:c7:8b:
e8:70:b9:53:03:18:c3:ea:7b:be:1f:5b:78:58:c8:
9a:57:1d:70:b5:a5:41:95:5f:bd:10:52:24:8e:30:
b8:7c:17:ed:cd:27:ff:b1:f5:8c:4b:28:7c:d7:ac:
31:da:89:3c:28:c4:b2:23:c7:54:be:48:90:6d:c1:
e0:aa:86:81:00:94:d4:a3:f3:f6:7a:b5:ee:e6:38:
2e:00:2e:9f:d8:40:40:35:78:aa:dc:b1:74:71:0e:
1e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DF:02:51:16:88:4D:88:AE:8F:75:8E:54:8A:78:34:87:9F:85:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7d636f59-be71-3ddf-9016-a20a24a59d0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.249.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:a3:f5:79:c9:cc:c5:b6:65:1a:0b:ca:3f:4c:4b:93:8c:f2:
13:d4:85:00:d1:7c:ef:ff:e4:78:42:94:f9:5d:e4:ae:8c:68:
d0:5d:4f:df:ca:8e:31:c1:2f:2b:72:7d:9c:fb:8f:ab:b1:bb:
70:64:3c:f6:88:f2:0b:ac:c5:8c:dd:aa:d3:d8:7d:e5:62:8c:
3c:9d:c9:5c:18:fe:67:42:ff:e2:e2:ba:d1:d5:90:97:73:8d:
69:c9:e7:a0:85:35:b5:63:59:3f:c5:10:03:3e:1d:2f:bc:59:
aa:75:6e:4d:38:87:37:d4:4b:94:55:dc:af:48:3e:c7:af:15:
a7:29:de:63:5e:90:84:da:00:b5:ba:d2:d4:44:fa:c2:69:0e:
52:e6:d4:c0:1b:75:43:fa:4b:97:34:62:88:ee:eb:a5:6d:f8:
41:aa:ee:6a:74:b4:cf:a1:0a:3d:b4:1a:32:67:13:e2:21:db:
81:a8:7b:bf:43:81:62:8d:af:39:b1:61:c6:52:0f:c3:82:96:
33:b3:91:cf:d8:e9:62:56:e8:11:cf:2d:3c:e8:e5:f3:e4:d4:
8e:37:43:9a:b5:5e:54:7a:83:77:24:24:ed:d0:b2:2e:39:c5:
19:ea:9d:94:49:0d:bd:96:ed:bc:4d:a8:b5:02:0b:1c:8e:66:
c6:4a:1d:c9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDBdcOp49+zKS7LeFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEzMDIyNDIwN1oXDTIzMDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk
NmJlNDY3NDEtN2IzYy00NWJiLThkNzItYmI3YmU1ZWI3ZGVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaNZV6JMVf9SrUHVlyD7paWkac0FZxboTDTV
Rl+UBAE1Ym4JPrmdfyT9TTmwxxtCL9TgaRSICY9pn61EAWUPSwOQWgmEWyVHofro
Uz5REDsmDqbFQVyXJ0DrryoFjrmDxvto7KJ3r3xwWqJe7VWyAjKzWy5fWFrX4x5A
CYX45ael2blKVuLuloK77CY1vqXgOCuYcYk+9AtEMwnZgZwt6sGsx4vocLlTAxjD
6nu+H1t4WMiaVx1wtaVBlV+9EFIkjjC4fBftzSf/sfWMSyh816wx2ok8KMSyI8dU
vkiQbcHgqoaBAJTUo/P2erXu5jguAC6f2EBANXiq3LF0cQ4eOQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFnfAlEWiE2Iro91jlSKeDSHn4WJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvN2Q2MzZmNTktYmU3MS0z
ZGRmLTkwMTYtYTIwYTI0YTU5ZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOPkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAq6P1ecnMxbZlGgvKP0xLk4zyE9SFANF87//keEKU+V3kroxo0F1P38qO
McEvK3J9nPuPq7G7cGQ89ojyC6zFjN2q09h95WKMPJ3JXBj+Z0L/4uK60dWQl3ON
acnnoIU1tWNZP8UQAz4dL7xZqnVuTTiHN9RLlFXcr0g+x68VpyneY16QhNoAtbrS
1ET6wmkOUubUwBt1Q/pLlzRiiO7rpW34QaruanS0z6EKPbQaMmcT4iHbgah7v0OB
Yo2vObFhxlIPw4KWM7ORz9jpYlboEc8tPOjl8+TUjjdDmrVeVHqDdyQk7dCyLjnF
GeqdlEkNvZbtvE2otQILHI5mxkodyQ==
-----END CERTIFICATE-----
Generated at Tue Apr 15 17:52:39 2025 by rpki-client