Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8899e1bc-41eb-3a22-b180-58f1d8e21240.roa
File: 8899e1bc-41eb-3a22-b180-58f1d8e21240.roa (raw, json)
Hash identifier: iiBGz5pp40vvMU5ZlME5HslgUGzwlKUKoQSNWTKd1jU=
Subject key identifier: ED:54:9C:20:58:94:EF:95:22:97:5D:7C:FD:9C:F5:42:81:56:4C:70
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584013E0C3BCA79818E07B1D12E8
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8899e1bc-41eb-3a22-b180-58f1d8e21240.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 56.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:e0:c3:bc:a7:98:18:e0:7b:1d:12:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=b731ecb2-4b43-4c4b-91bd-4b90301c13b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:34:f8:cd:60:d8:29:63:52:35:68:1e:0f:b1:
58:62:d8:2a:5d:55:c0:de:94:10:c9:ee:64:cb:d4:
68:21:fe:0d:93:01:8a:8f:89:6e:f2:ea:2d:24:12:
f0:4c:6b:68:ce:76:87:a2:57:dc:3f:ab:05:f2:42:
4b:b9:43:47:38:f4:40:f5:67:fe:bc:f8:58:be:2d:
39:1d:03:84:33:8a:b8:24:df:37:b0:5c:87:87:d2:
82:ea:85:f9:ec:85:ff:cc:ee:1c:64:f4:ad:6a:8a:
3d:be:b2:f3:1f:3a:1c:9d:28:eb:c6:2b:a2:30:7b:
19:72:eb:45:92:8e:85:cf:03:fb:e4:af:ef:a4:cb:
2f:9b:1f:e3:c8:62:68:64:b9:3b:b6:73:cb:ef:43:
d7:0a:1a:50:28:07:80:63:d7:9b:85:1d:c2:ba:e8:
71:e9:00:9f:8c:f2:f7:5e:8a:8c:96:fc:44:23:ef:
75:fd:10:d6:da:92:8e:5d:8e:99:16:f1:86:f3:1f:
7b:fc:cf:18:40:db:3c:62:0b:59:ca:ac:39:f0:a0:
ac:7b:3d:fe:74:7b:74:82:53:ac:1e:6e:9d:a4:0b:
3f:35:84:47:f6:c1:51:79:69:c0:7f:ff:ef:cb:bc:
28:85:89:ae:e4:3c:ae:4d:7a:de:75:12:07:61:df:
89:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:9C:20:58:94:EF:95:22:97:5D:7C:FD:9C:F5:42:81:56:4C:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8899e1bc-41eb-3a22-b180-58f1d8e21240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:24:76:45:9c:4b:71:8a:24:81:1b:65:37:98:7a:b9:86:2f:
3b:11:cc:87:fe:6a:1f:85:ce:13:d8:42:d9:d8:bd:c9:e1:c6:
e9:ce:96:79:7b:10:c5:9a:cf:2b:82:ab:e8:3b:ad:9c:b6:5e:
70:17:9e:fe:ea:16:50:c4:2d:01:1a:11:28:ea:16:59:1a:70:
b7:8f:65:80:e4:66:d9:7e:df:9e:ce:b9:cb:fa:86:79:1e:09:
3c:fb:ac:ee:d9:12:c7:70:85:53:36:5a:21:de:71:7c:6c:3a:
b2:78:18:e5:b4:14:75:f3:17:ad:b0:3c:55:43:68:61:7e:94:
3d:08:ac:ad:b5:83:c7:fd:2e:37:fa:26:85:1a:45:04:f9:3c:
64:85:cc:7d:84:e9:67:fb:e5:2b:5d:7e:29:66:99:7d:3a:16:
8a:8f:10:7f:1b:04:74:05:3a:20:2f:f4:38:1c:ae:84:e8:8e:
8e:18:87:96:92:13:3c:1b:bb:ce:f2:84:63:1e:8b:e0:48:2e:
5c:8b:9b:98:84:f8:32:fc:ee:6a:a9:f2:fb:e7:8b:96:dd:57:
44:49:91:54:08:25:1f:6e:c9:a4:7f:1f:6d:0b:5d:75:c4:fa:
e9:16:55:db:61:12:8e:e9:2c:eb:ef:bd:9f:b0:35:28:02:b0:
e7:a4:65:ba
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAT4MO8p5gY4HsdEugwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyOTEyMDAwMFoXDTIzMDEwNDA1MDAwMFowLzEtMCsGA1UEAxMk
YjczMWVjYjItNGI0My00YzRiLTkxYmQtNGI5MDMwMWMxM2IzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzT4zWDYKWNSNWgeD7FYYtgqXVXA3pQQye5k
y9RoIf4NkwGKj4lu8uotJBLwTGtoznaHolfcP6sF8kJLuUNHOPRA9Wf+vPhYvi05
HQOEM4q4JN83sFyHh9KC6oX57IX/zO4cZPStaoo9vrLzHzocnSjrxiuiMHsZcutF
ko6FzwP75K/vpMsvmx/jyGJoZLk7tnPL70PXChpQKAeAY9ebhR3Cuuhx6QCfjPL3
XoqMlvxEI+91/RDW2pKOXY6ZFvGG8x97/M8YQNs8YgtZyqw58KCsez3+dHt0glOs
Hm6dpAs/NYRH9sFReWnAf//vy7wohYmu5DyuTXredRIHYd+JcwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFO1UnCBYlO+VIpddfP2c9UKBVkxwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODg5OWUxYmMtNDFlYi0z
YTIyLWIxODAtNThmMWQ4ZTIxMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOBEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtSR2RZxLcYokgRtlN5h6uYYvOxHMh/5qH4XOE9hC2di9yeHG6c6WeXsQ
xZrPK4Kr6DutnLZecBee/uoWUMQtARoRKOoWWRpwt49lgORm2X7fns65y/qGeR4J
PPus7tkSx3CFUzZaId5xfGw6sngY5bQUdfMXrbA8VUNoYX6UPQisrbWDx/0uN/om
hRpFBPk8ZIXMfYTpZ/vlK11+KWaZfToWio8QfxsEdAU6IC/0OByuhOiOjhiHlpIT
PBu7zvKEYx6L4EguXIubmIT4Mvzuaqny++eLlt1XREmRVAglH27JpH8fbQtddcT6
6RZV22ESjuks6++9n7A1KAKw56Rlug==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:41 2025 by rpki-client