Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2170f51-f0c7-3792-b9cb-fad0d96baeb1.roa
File: a2170f51-f0c7-3792-b9cb-fad0d96baeb1.roa (raw, json)
Hash identifier: 1ZUFh2GND0p0OMTJ3gWONBK8ox0eq8zmk91Vnomkis4=
Subject key identifier: EB:2A:7B:64:2B:54:1D:D1:53:FF:30:01:62:D8:FD:B5:52:2A:54:BD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCB690337889AE246EA406100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2170f51-f0c7-3792-b9cb-fad0d96baeb1.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 57.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:69:03:37:88:9a:e2:46:ea:40:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=a1952908-bbcb-4ea2-8d37-a5147c427feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5a:1c:ca:49:c2:9f:61:fa:c3:d5:27:d1:0f:
c4:b6:51:82:e8:e3:1a:4e:28:83:2e:99:7e:56:39:
c3:f0:d8:88:32:a7:8c:dc:57:b5:fc:77:66:e2:ba:
4c:45:5a:95:3c:35:da:69:1b:81:62:87:18:15:2e:
b1:6b:f6:e9:2c:67:d8:58:4f:2f:79:83:62:d4:9e:
29:52:1c:0b:66:5e:a3:21:3f:48:3c:44:2b:f9:a6:
92:98:a9:dc:65:94:59:5a:06:f9:0f:f9:4a:5e:aa:
65:0d:3f:c0:b6:05:16:45:8e:64:38:8f:48:b2:ef:
1d:a5:50:6f:fc:95:a3:5f:76:d8:21:ae:08:0a:1f:
4e:13:e5:f6:cb:d7:32:15:08:ee:73:26:25:00:37:
64:95:17:2a:4a:49:cf:bb:b7:d5:1b:90:39:a1:71:
16:da:34:ce:d3:97:b5:eb:44:58:3e:d9:e7:09:bb:
9b:3b:45:47:f5:b1:2b:df:b1:aa:c0:83:1e:03:23:
6c:2b:7c:b2:7a:c3:e1:dd:4f:a7:25:f3:b9:17:0a:
97:04:e8:04:4e:c5:f8:66:f6:98:c1:80:f8:cb:6e:
31:47:36:0b:4d:a3:66:5f:53:c6:c0:fe:27:89:8d:
22:7a:02:59:14:0d:d2:d0:fa:c9:8d:d5:4e:b0:38:
a9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2A:7B:64:2B:54:1D:D1:53:FF:30:01:62:D8:FD:B5:52:2A:54:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2170f51-f0c7-3792-b9cb-fad0d96baeb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
57.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:74:dc:58:01:b9:4c:80:dc:f1:2d:77:fa:10:74:e7:15:95:
bd:1b:33:68:0f:25:46:b7:d1:6f:90:81:e6:da:0a:7b:9b:61:
73:24:2f:21:39:db:c7:65:00:31:10:34:74:d5:a2:5b:6d:65:
c6:cd:ce:cb:61:7d:0b:4e:6b:c6:22:05:8c:31:97:f7:08:b4:
b8:df:bb:95:59:10:10:fa:fb:a0:78:ba:ef:3e:ce:af:d3:24:
ed:b9:e4:38:5e:24:c4:6b:6d:ec:c2:00:59:55:81:b0:b8:4a:
ce:a3:6c:df:a8:3b:f4:ee:dd:e1:b9:90:f9:16:f1:09:b1:35:
43:b8:2d:50:8a:66:ee:4b:88:97:f8:86:cc:89:dd:f8:05:6d:
db:e4:2c:18:a5:21:48:08:b3:c7:75:c1:bc:da:17:d3:97:cf:
8a:54:c6:46:69:46:e7:57:a0:2e:ec:26:b8:fb:ef:b9:20:c3:
64:92:e0:0e:3d:ed:ca:b9:11:0f:f9:18:53:0d:7a:ed:d5:fa:
92:22:be:ea:fe:1b:bd:04:9a:e8:d0:d8:11:41:95:8d:c8:6c:
30:93:d9:8f:5f:fb:4c:1f:ae:05:f7:e1:1f:93:41:e3:e0:a5:
08:57:c8:8c:80:3c:b0:96:4f:3e:58:c4:72:89:05:91:82:e3:
d8:ff:65:85
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/LaQM3iJriRupAYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
YTE5NTI5MDgtYmJjYi00ZWEyLThkMzctYTUxNDdjNDI3ZmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlocyknCn2H6w9Un0Q/EtlGC6OMaTiiDLpl+
VjnD8NiIMqeM3Fe1/Hdm4rpMRVqVPDXaaRuBYocYFS6xa/bpLGfYWE8veYNi1J4p
UhwLZl6jIT9IPEQr+aaSmKncZZRZWgb5D/lKXqplDT/AtgUWRY5kOI9Isu8dpVBv
/JWjX3bYIa4ICh9OE+X2y9cyFQjucyYlADdklRcqSknPu7fVG5A5oXEW2jTO05e1
60RYPtnnCbubO0VH9bEr37GqwIMeAyNsK3yyesPh3U+nJfO5FwqXBOgETsX4ZvaY
wYD4y24xRzYLTaNmX1PGwP4niY0iegJZFA3S0PrJjdVOsDiplQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOsqe2QrVB3RU/8wAWLY/bVSKlS9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTIxNzBmNTEtZjBjNy0z
NzkyLWI5Y2ItZmFkMGQ5NmJhZWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOcwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAY3TcWAG5TIDc8S13+hB05xWVvRszaA8lRrfRb5CB5toKe5thcyQvITnb
x2UAMRA0dNWiW21lxs3Oy2F9C05rxiIFjDGX9wi0uN+7lVkQEPr7oHi67z7Or9Mk
7bnkOF4kxGtt7MIAWVWBsLhKzqNs36g79O7d4bmQ+RbxCbE1Q7gtUIpm7kuIl/iG
zInd+AVt2+QsGKUhSAizx3XBvNoX05fPilTGRmlG51egLuwmuPvvuSDDZJLgDj3t
yrkRD/kYUw167dX6kiK+6v4bvQSa6NDYEUGVjchsMJPZj1/7TB+uBffhH5NB4+Cl
CFfIjIA8sJZPPljEcokFkYLj2P9lhQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:13 2025 by rpki-client