Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a72dce8f-c0b6-3ee3-a881-45d36f0cc8a1.roa
File: a72dce8f-c0b6-3ee3-a881-45d36f0cc8a1.roa (raw, json)
Hash identifier: 0jhj1kzweQFl4apWQ1BvaYcNjQtVcByoA4Yj5BuM4jE=
Subject key identifier: 31:AA:70:3D:C4:1D:0E:DF:FD:24:B7:55:E1:0F:2C:D9:79:5D:3F:5A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840270AE5432A610C3D183A4440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a72dce8f-c0b6-3ee3-a881-45d36f0cc8a1.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 56.133.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:0a:e5:43:2a:61:0c:3d:18:3a:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=7b32cd8e-6f27-4eca-b50c-7aad10310b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:2d:32:0d:3b:e6:e3:39:72:af:fb:b9:c2:
c6:cb:4b:99:ea:1e:f9:99:ba:50:69:56:f8:a2:6c:
0b:e0:70:e7:11:5d:66:ea:0d:6a:ff:4d:07:8e:26:
40:2d:ea:4b:34:0a:e1:2f:48:f2:71:95:16:70:a0:
1e:c1:61:f7:e5:70:2d:76:24:6f:f5:71:c2:79:9e:
9d:e5:7a:95:5c:53:ce:67:b4:5d:8b:5c:f5:ca:21:
b5:e3:86:e3:fb:6b:aa:c5:7b:ca:17:b4:95:76:09:
4f:bd:29:ea:cf:da:d8:5b:fc:64:23:41:9e:1d:f7:
b5:41:73:e3:d1:18:bc:15:30:1f:48:92:b5:e9:2c:
14:95:e0:84:61:fb:7d:48:3b:84:4f:a3:9c:c1:c0:
bf:53:43:28:c6:d6:32:74:1b:53:d7:3e:a7:f6:48:
24:68:99:41:6e:e5:66:59:42:8d:e8:29:37:80:7b:
4f:22:cb:72:b5:89:9d:9b:db:ac:28:8f:a7:82:8a:
9d:b7:ea:af:c4:39:85:d4:9a:5c:9a:d4:a7:26:fd:
bc:45:66:24:9c:2d:17:a7:82:cd:6a:fd:1d:6a:a9:
cd:e1:71:97:73:ed:ea:d3:38:60:ea:f3:b3:96:c7:
fe:1b:1e:e4:31:38:41:5c:ca:fb:89:0c:06:47:7d:
4b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AA:70:3D:C4:1D:0E:DF:FD:24:B7:55:E1:0F:2C:D9:79:5D:3F:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a72dce8f-c0b6-3ee3-a881-45d36f0cc8a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.133.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:2a:01:63:6b:1f:b2:ef:fe:66:b2:ec:92:c9:11:97:80:44:
6b:a5:08:fd:f4:0d:92:16:ef:18:49:d4:3b:40:5b:72:20:8d:
d7:2c:0d:7f:49:ff:09:cf:24:69:ea:a0:a6:60:0f:f5:8b:ab:
68:59:c9:be:fc:c4:79:16:07:5b:97:e5:31:26:18:a3:ef:22:
f4:6d:73:05:90:0f:b0:6c:03:5f:27:37:43:57:57:5c:b6:cc:
95:50:03:e2:74:04:1c:df:25:1b:68:0c:3e:d3:fe:73:8a:f3:
5c:e7:a4:1c:d8:fb:bd:a9:99:6f:dc:9b:c5:e2:99:52:4c:52:
f6:99:7a:bc:74:ad:ac:40:af:ed:f4:6c:d4:2b:9a:f4:0f:90:
53:d4:39:85:4d:ea:24:49:9a:6d:fc:e7:e1:79:54:d4:6d:0c:
aa:8a:ab:fa:e6:8e:69:ec:2c:6e:d0:22:1b:cd:f3:23:c0:3d:
6e:0e:18:da:6b:95:46:89:eb:71:3a:23:e4:37:f6:0c:13:b5:
78:b7:5a:c2:c0:2d:10:3c:68:c4:e6:9b:47:48:90:8f:9a:31:
e4:90:77:82:ed:91:1b:6b:24:9b:92:3f:ac:99:b8:f3:28:d6:
99:76:e6:f8:63:a3:70:1c:ea:d0:d7:c4:3b:f3:1b:f0:c9:d2:
94:70:ca:50
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAnCuVDKmEMPRg6REAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwNjEyMDAwMFoXDTIzMDExMTA1MDAwMFowLzEtMCsGA1UEAxMk
N2IzMmNkOGUtNmYyNy00ZWNhLWI1MGMtN2FhZDEwMzEwYjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLgtMg075uM5cq/7ucLGy0uZ6h75mbpQaVb4
omwL4HDnEV1m6g1q/00HjiZALepLNArhL0jycZUWcKAewWH35XAtdiRv9XHCeZ6d
5XqVXFPOZ7Rdi1z1yiG144bj+2uqxXvKF7SVdglPvSnqz9rYW/xkI0GeHfe1QXPj
0Ri8FTAfSJK16SwUleCEYft9SDuET6OcwcC/U0MoxtYydBtT1z6n9kgkaJlBbuVm
WUKN6Ck3gHtPIstytYmdm9usKI+ngoqdt+qvxDmF1JpcmtSnJv28RWYknC0Xp4LN
av0daqnN4XGXc+3q0zhg6vOzlsf+Gx7kMThBXMr7iQwGR31LmwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDGqcD3EHQ7f/SS3VeEPLNl5XT9aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTcyZGNlOGYtYzBiNi0z
ZWUzLWE4ODEtNDVkMzZmMGNjOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOIUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAECoBY2sfsu/+ZrLskskRl4BEa6UI/fQNkhbvGEnUO0BbciCN1ywNf0n/
Cc8kaeqgpmAP9YuraFnJvvzEeRYHW5flMSYYo+8i9G1zBZAPsGwDXyc3Q1dXXLbM
lVAD4nQEHN8lG2gMPtP+c4rzXOekHNj7vamZb9ybxeKZUkxS9pl6vHStrECv7fRs
1Cua9A+QU9Q5hU3qJEmabfzn4XlU1G0Mqoqr+uaOaewsbtAiG83zI8A9bg4Y2muV
RonrcToj5Df2DBO1eLdawsAtEDxoxOabR0iQj5ox5JB3gu2RG2skm5I/rJm48yjW
mXbm+GOjcBzq0NfEO/Mb8MnSlHDKUA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:59:58 2025 by rpki-client