Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90839ef2-a8c4-314b-ae6b-4d7e0f8f2a32.roa
File: 90839ef2-a8c4-314b-ae6b-4d7e0f8f2a32.roa (raw, json)
Hash identifier: LPL3NbrMbkHsjmTmkvoG3rtOYpYpqUR2mUJL3xyS1uo=
Subject key identifier: 35:64:C4:0D:4C:B5:85:26:DD:B1:16:D8:FF:A8:B2:E4:B4:13:29:A1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403AF696BCF999B19DC56CA680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90839ef2-a8c4-314b-ae6b-4d7e0f8f2a32.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:f6:96:bc:f9:99:b1:9d:c5:6c:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=ec338a2b-9f03-4110-b6e7-3297bf3e0292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:b5:15:70:da:fb:87:a3:0e:7f:04:1e:6d:
6c:12:22:ab:95:e3:73:fe:d1:b6:02:d8:36:5c:59:
bf:f1:a8:90:ed:6f:f2:73:f5:fb:bf:8b:70:7e:d8:
31:6f:61:ef:ce:97:4a:bc:0c:9d:a1:64:48:f8:2b:
24:ce:4b:71:0f:dd:95:56:f4:0d:ac:57:10:7a:8c:
f6:28:41:d7:a4:f4:9e:8b:e1:db:28:e0:8d:46:c1:
e5:f5:aa:a4:a0:fd:1e:d6:bf:a7:de:cb:0d:38:4b:
31:67:b2:f4:00:21:9a:41:a8:a3:53:3d:cb:e3:d4:
32:f1:2b:1a:c1:af:04:0d:43:5c:2a:82:8c:5d:64:
e0:7e:5a:63:c8:23:2a:3e:0d:53:0d:89:e7:64:d5:
08:fe:87:74:40:16:1d:1d:4d:e5:0b:01:49:dc:ef:
35:8a:99:57:74:1c:2d:ea:06:26:6b:06:5b:4f:3e:
c1:b9:e5:70:79:b1:38:64:30:6f:b9:f1:f5:34:33:
d3:82:e2:64:82:5f:15:c5:40:00:91:fd:bd:75:1c:
c7:f1:8e:92:cc:dd:29:e3:23:c2:6d:3b:9e:38:0f:
93:52:2e:67:75:94:a0:91:67:74:cd:e6:7a:3a:e9:
63:a1:cc:b6:d7:1f:d7:94:27:1e:98:8c:67:1d:18:
4c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:64:C4:0D:4C:B5:85:26:DD:B1:16:D8:FF:A8:B2:E4:B4:13:29:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/90839ef2-a8c4-314b-ae6b-4d7e0f8f2a32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:9e:83:f8:25:08:ba:6b:1f:5f:5a:77:8d:d2:2c:11:af:ac:
b3:19:30:12:3e:db:3c:92:3d:d3:7e:56:da:96:a1:06:9b:0f:
f8:f5:db:78:c2:96:6d:e0:15:50:78:df:6f:ae:95:30:07:81:
fa:f2:11:56:28:35:d0:33:a1:80:8c:04:d8:44:69:10:cd:f2:
ab:43:0f:47:c9:40:b0:d9:83:a7:b9:12:67:2b:8c:a4:87:d8:
1c:6c:0a:0d:28:6a:dc:4e:68:f9:a3:32:31:f5:e1:e7:31:be:
93:74:59:8c:45:b6:d2:f8:dc:98:63:87:1c:3b:70:05:44:16:
a2:40:c6:d5:d3:9f:38:35:88:fa:98:a4:7b:66:2a:44:80:11:
a4:2f:58:0b:f7:85:f6:33:41:79:03:df:44:26:16:3d:87:77:
e6:9d:f7:d5:93:de:f6:11:2f:08:d6:7d:b5:04:b6:6a:db:23:
59:f2:5c:87:c9:0c:bc:c8:90:be:7d:5b:20:0e:ea:0d:36:0c:
8c:f9:7e:79:25:0b:e5:87:52:98:1c:91:2b:91:a0:54:0a:53:
cd:1f:15:6c:cb:0f:a9:0f:71:74:9f:16:5d:7a:0e:c5:d1:b4:
1a:73:a8:97:84:22:9e:d0:68:7b:36:e3:76:89:a8:92:54:d9:
00:2c:56:1f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA69pa8+ZmxncVspoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMzEyMDAwMFoXDTIzMDExODA1MDAwMFowLzEtMCsGA1UEAxMk
ZWMzMzhhMmItOWYwMy00MTEwLWI2ZTctMzI5N2JmM2UwMjkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbW1FXDa+4ejDn8EHm1sEiKrleNz/tG2Atg2
XFm/8aiQ7W/yc/X7v4twftgxb2HvzpdKvAydoWRI+CskzktxD92VVvQNrFcQeoz2
KEHXpPSei+HbKOCNRsHl9aqkoP0e1r+n3ssNOEsxZ7L0ACGaQaijUz3L49Qy8Ssa
wa8EDUNcKoKMXWTgflpjyCMqPg1TDYnnZNUI/od0QBYdHU3lCwFJ3O81iplXdBwt
6gYmawZbTz7BueVwebE4ZDBvufH1NDPTguJkgl8VxUAAkf29dRzH8Y6SzN0p4yPC
bTueOA+TUi5ndZSgkWd0zeZ6Ouljocy21x/XlCcemIxnHRhMkwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDVkxA1MtYUm3bEW2P+osuS0EymhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTA4MzllZjItYThjNC0z
MTRiLWFlNmItNGQ3ZTBmOGYyYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOBEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAR56D+CUIumsfX1p3jdIsEa+ssxkwEj7bPJI9035W2pahBpsP+PXbeMKW
beAVUHjfb66VMAeB+vIRVig10DOhgIwE2ERpEM3yq0MPR8lAsNmDp7kSZyuMpIfY
HGwKDShq3E5o+aMyMfXh5zG+k3RZjEW20vjcmGOHHDtwBUQWokDG1dOfODWI+pik
e2YqRIARpC9YC/eF9jNBeQPfRCYWPYd35p331ZPe9hEvCNZ9tQS2atsjWfJch8kM
vMiQvn1bIA7qDTYMjPl+eSUL5YdSmByRK5GgVApTzR8VbMsPqQ9xdJ8WXXoOxdG0
GnOol4QintBoezbjdomoklTZACxWHw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:22:18 2025 by rpki-client