Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96ae8af7-bace-309b-a382-fefcafc3d5e8.roa
File: 96ae8af7-bace-309b-a382-fefcafc3d5e8.roa (raw, json)
Hash identifier: aF0+eXmKoRRF76TdFK36mnbSScamQhEnuOpXLNqL2UM=
Subject key identifier: 62:32:79:ED:5F:9A:90:9F:9C:3B:F7:46:46:22:C0:A7:77:3E:DF:A8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FE9BDC85819C19D28C781DE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96ae8af7-bace-309b-a382-fefcafc3d5e8.roa
Signing time: Mon 14 Nov 2022 12:00:00 +0000
ROA not before: Mon 14 Nov 2022 12:00:00 +0000
ROA not after: Tue 20 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.22.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:e9:bd:c8:58:19:c1:9d:28:c7:81:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 14 12:00:00 2022 GMT
Not After : Dec 20 05:00:00 2022 GMT
Subject: CN=b0d68aa2-ef05-4a23-b315-798dcb286a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:a6:10:30:ae:e7:ab:a7:d2:a0:21:24:6a:
ed:6c:42:29:3d:db:e6:ea:b6:9c:34:1a:6d:65:82:
95:36:68:d0:7c:46:2b:0f:42:a4:21:d8:67:ea:b9:
f9:39:01:10:40:35:c4:84:9d:f4:48:73:87:6d:04:
e0:c3:7f:7c:66:97:08:ea:9e:94:26:99:21:56:ab:
41:c8:cf:b3:04:ca:06:1e:d8:d6:a1:1c:e9:db:dd:
c0:b6:dc:cd:b8:91:d9:9f:18:cd:2d:67:1b:5c:8e:
5d:4d:34:99:20:23:a9:6b:63:5b:18:ff:43:ff:fe:
e9:9e:bd:61:be:d0:6a:07:36:31:e4:f1:66:e8:77:
57:d8:d2:7e:21:e8:35:cc:d1:0c:c0:97:b3:76:47:
c9:14:75:e0:1f:81:89:e9:da:f3:f0:85:25:a1:d7:
fd:f6:c6:e1:cc:2e:91:17:d4:a3:4a:18:4d:e8:55:
5a:9e:b1:eb:b7:0f:27:7e:84:93:53:99:dc:3c:da:
d5:8f:0e:de:8e:cc:ab:6d:4f:63:83:23:96:bf:3e:
36:94:a7:b5:04:b4:db:cb:ea:8b:12:6c:11:51:39:
9e:12:2f:32:6f:cc:64:df:1e:8d:38:f9:02:bd:cc:
2e:d2:6d:6b:17:e8:57:96:d6:ca:3e:39:3e:82:95:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:32:79:ED:5F:9A:90:9F:9C:3B:F7:46:46:22:C0:A7:77:3E:DF:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96ae8af7-bace-309b-a382-fefcafc3d5e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.22.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:c2:bc:16:09:55:1f:4d:e1:b6:49:c8:d8:ff:aa:1a:4d:3b:
ee:52:ee:61:31:03:03:f4:7d:a0:52:dd:73:be:6b:25:33:b6:
0e:9f:29:29:5b:1f:ee:9d:bc:98:33:05:5f:2f:4b:b2:94:ba:
c0:f2:17:5d:97:fa:e2:60:05:d3:d5:9c:91:25:ab:fa:5c:7b:
d3:31:b3:f8:0c:e6:a7:74:4b:45:5e:b8:36:9a:2e:d0:2d:df:
76:3d:37:77:72:54:d5:29:ac:f6:c8:29:2a:80:83:ad:9a:fe:
6f:ba:8d:82:7d:20:75:95:6a:ee:b6:76:b5:90:9c:d7:5c:88:
46:8a:ed:01:f3:da:b5:32:1d:51:55:fb:b5:95:be:4e:e8:89:
c0:a3:03:8a:a2:a0:bb:6a:22:b8:e5:66:f9:f4:80:99:ba:1d:
53:40:04:5c:a8:06:58:99:39:fe:00:71:7c:eb:1d:ea:18:60:
2c:f4:c3:70:4e:d3:9d:54:1d:e9:06:4b:3b:69:d0:d4:2e:ef:
70:b8:e3:bb:43:6e:97:7d:c6:c5:e8:f3:dc:4b:12:97:3f:56:
8e:e7:85:02:f7:e5:9f:7a:43:a0:7d:18:d2:68:df:66:de:df:
d0:69:8a:74:e4:98:77:b7:e2:dd:56:1b:03:75:04:89:0e:c7:
0a:fe:40:fe
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/pvchYGcGdKMeB3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNDEyMDAwMFoXDTIyMTIyMDA1MDAwMFowLzEtMCsGA1UEAxMk
YjBkNjhhYTItZWYwNS00YTIzLWIzMTUtNzk4ZGNiMjg2YTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf+mEDCu56un0qAhJGrtbEIpPdvm6racNBpt
ZYKVNmjQfEYrD0KkIdhn6rn5OQEQQDXEhJ30SHOHbQTgw398ZpcI6p6UJpkhVqtB
yM+zBMoGHtjWoRzp293AttzNuJHZnxjNLWcbXI5dTTSZICOpa2NbGP9D//7pnr1h
vtBqBzYx5PFm6HdX2NJ+Ieg1zNEMwJezdkfJFHXgH4GJ6drz8IUlodf99sbhzC6R
F9SjShhN6FVanrHrtw8nfoSTU5ncPNrVjw7ejsyrbU9jgyOWvz42lKe1BLTby+qL
EmwRUTmeEi8yb8xk3x6NOPkCvcwu0m1rF+hXltbKPjk+gpUwHwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGIyee1fmpCfnDv3RkYiwKd3Pt+oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTZhZThhZjctYmFjZS0z
MDliLWEzODItZmVmY2FmYzNkNWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANhYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAf8K8FglVH03htknI2P+qGk077lLuYTEDA/R9oFLdc75rJTO2Dp8pKVsf
7p28mDMFXy9LspS6wPIXXZf64mAF09WckSWr+lx70zGz+Azmp3RLRV64Npou0C3f
dj03d3JU1Sms9sgpKoCDrZr+b7qNgn0gdZVq7rZ2tZCc11yIRortAfPatTIdUVX7
tZW+TuiJwKMDiqKgu2oiuOVm+fSAmbodU0AEXKgGWJk5/gBxfOsd6hhgLPTDcE7T
nVQd6QZLO2nQ1C7vcLjju0Nul33Gxejz3EsSlz9WjueFAvfln3pDoH0Y0mjfZt7f
0GmKdOSYd7fi3VYbA3UEiQ7HCv5A/g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:25 2025 by rpki-client