Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a637f8dd-8c57-3a8e-b6a2-c9432533a2c1.roa
File: a637f8dd-8c57-3a8e-b6a2-c9432533a2c1.roa (raw, json)
Hash identifier: +17o9R0zRieQ2VEHy63TsJxX1m6iCHDmWHcU8I4pZmQ=
Subject key identifier: C4:26:2A:DC:41:D1:65:B8:68:F8:11:67:BE:3D:39:8B:D8:92:C6:87
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584072F8F0D03F131523E590DF80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a637f8dd-8c57-3a8e-b6a2-c9432533a2c1.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:72:f8:f0:d0:3f:13:15:23:e5:90:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=f4bc2465-3124-42f8-afe9-ac7050555a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e1:28:9d:56:a4:ee:33:26:7f:9b:d5:3e:08:
79:18:48:e1:a2:d3:42:25:e6:4b:34:c9:b9:c6:d1:
c8:61:2b:5d:4f:0f:b7:54:8d:8f:15:42:f1:09:96:
52:6f:db:cd:9a:a2:0a:5d:39:40:f6:f5:de:6c:2c:
71:7d:b5:c4:e7:83:b2:f7:d1:9e:9b:3c:87:e1:db:
02:1a:c7:a2:1e:c4:71:21:e7:30:61:56:ed:79:33:
57:6e:9c:84:3c:9c:2e:4c:17:32:85:62:43:08:a7:
cd:cb:b9:9a:c5:cd:1d:a7:82:20:21:7a:b6:6c:dc:
5f:57:25:74:6f:51:e5:15:ce:81:0c:f8:dc:0d:61:
8f:fa:02:38:69:9c:df:a5:9e:3b:38:79:31:e7:98:
be:07:c9:ea:92:14:51:ab:cf:1d:eb:fd:ec:56:b8:
03:0a:7b:c4:d2:8b:c0:ab:21:c1:f7:06:9d:b6:30:
e7:12:d3:fe:76:01:ba:37:c9:6f:91:a0:4d:12:bd:
a5:e0:93:88:56:33:30:1d:98:b5:75:5e:83:bd:64:
55:ac:69:42:23:12:fd:ec:55:c0:11:01:92:a6:8e:
6c:c1:69:c7:a8:3b:20:ec:a2:c1:ce:e5:11:7e:81:
8f:57:d3:3b:3a:11:9d:5b:f8:e6:e9:97:48:d5:48:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:26:2A:DC:41:D1:65:B8:68:F8:11:67:BE:3D:39:8B:D8:92:C6:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a637f8dd-8c57-3a8e-b6a2-c9432533a2c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:00:bd:21:7b:aa:4f:3b:a4:1c:44:34:55:cb:88:9f:70:ec:
a3:6b:d9:e8:7b:b9:6b:60:b5:24:43:fc:9b:e9:ab:1f:32:09:
45:7c:fe:92:3e:84:b3:d9:bb:cc:7c:ee:a6:b7:db:82:56:ab:
23:1b:7a:fa:03:a5:22:2e:18:05:40:7a:bb:8c:7b:a6:d1:f3:
06:f1:d2:c7:ad:05:ac:a1:aa:05:45:34:e6:97:9e:68:e8:1f:
bd:71:8b:24:f1:aa:67:53:0d:5e:a9:97:a7:ac:f4:08:c7:50:
cc:57:79:5c:fc:57:15:0b:46:b5:b9:c7:b5:6f:90:90:27:f0:
ec:4e:2c:b7:df:b3:96:4d:ec:37:a4:13:24:b8:fe:e6:d4:34:
99:4a:44:38:28:b4:89:15:e2:c5:af:3c:73:f8:b4:9f:89:58:
cd:e9:fa:e3:c9:df:97:de:9c:ed:12:1f:9c:36:9d:52:e1:38:
37:33:70:b6:27:59:a8:86:d3:f3:6b:39:2d:79:41:6b:cb:f4:
09:a9:bc:6a:dd:12:6e:b4:79:0e:b0:a3:f2:46:70:58:35:1e:
d4:8b:a1:57:65:c1:22:57:26:61:7e:f1:1f:6c:fd:ef:cb:78:
84:87:d5:c1:a4:93:b4:1e:68:4d:b0:1a:e9:e0:f2:6d:c5:02:
25:ba:f1:2b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBy+PDQPxMVI+WQ34AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwMjEyMDAwMFoXDTIzMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
ZjRiYzI0NjUtMzEyNC00MmY4LWFmZTktYWM3MDUwNTU1YTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeEonVak7jMmf5vVPgh5GEjhotNCJeZLNMm5
xtHIYStdTw+3VI2PFULxCZZSb9vNmqIKXTlA9vXebCxxfbXE54Oy99GemzyH4dsC
GseiHsRxIecwYVbteTNXbpyEPJwuTBcyhWJDCKfNy7maxc0dp4IgIXq2bNxfVyV0
b1HlFc6BDPjcDWGP+gI4aZzfpZ47OHkx55i+B8nqkhRRq88d6/3sVrgDCnvE0ovA
qyHB9wadtjDnEtP+dgG6N8lvkaBNEr2l4JOIVjMwHZi1dV6DvWRVrGlCIxL97FXA
EQGSpo5swWnHqDsg7KLBzuURfoGPV9M7OhGdW/jm6ZdI1UirJwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMQmKtxB0WW4aPgRZ749OYvYksaHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTYzN2Y4ZGQtOGM1Ny0z
YThlLWI2YTItYzk0MzI1MzNhMmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOEUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPwC9IXuqTzukHEQ0VcuIn3Dso2vZ6Hu5a2C1JEP8m+mrHzIJRXz+kj6E
s9m7zHzuprfbglarIxt6+gOlIi4YBUB6u4x7ptHzBvHSx60FrKGqBUU05peeaOgf
vXGLJPGqZ1MNXqmXp6z0CMdQzFd5XPxXFQtGtbnHtW+QkCfw7E4st9+zlk3sN6QT
JLj+5tQ0mUpEOCi0iRXixa88c/i0n4lYzen648nfl96c7RIfnDadUuE4NzNwtidZ
qIbT82s5LXlBa8v0Cam8at0SbrR5DrCj8kZwWDUe1IuhV2XBIlcmYX7xH2z978t4
hIfVwaSTtB5oTbAa6eDybcUCJbrxKw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:53:47 2025 by rpki-client