Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a85de48b-f7d7-3cc1-b5fb-02ccbf8c07bb.roa
File: a85de48b-f7d7-3cc1-b5fb-02ccbf8c07bb.roa (raw, json)
Hash identifier: 2iFHWxyfynXelMGKr1PkkuYrai9A+cvBnXsD//ikVlY=
Subject key identifier: B7:5F:A2:A8:DF:EF:9D:85:95:E9:8B:FE:6A:3D:8C:F5:CB:E6:53:69
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840900639572F521EB57B484F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a85de48b-f7d7-3cc1-b5fb-02ccbf8c07bb.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:90:06:39:57:2f:52:1e:b5:7b:48:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=361ce244-0725-4e31-b2f6-5af7516c85b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:ea:c7:5a:1b:5f:91:28:b5:c5:e0:24:10:
25:92:8b:b0:80:88:b0:1f:be:24:2c:fa:9e:c5:77:
d0:4c:bd:79:26:58:4c:6b:a9:5a:93:fd:ea:9c:fe:
92:14:6a:d2:ee:1c:bc:18:b5:b5:84:c0:3b:91:4e:
97:d2:65:bf:7b:37:97:5c:70:b1:0e:8d:c9:31:6b:
a9:f0:03:85:dc:23:63:40:84:cd:c8:11:92:c9:a0:
49:95:54:a5:83:66:ac:9d:9a:64:74:63:97:4e:3d:
86:e4:4f:a4:cc:86:71:89:1b:ba:2f:4f:17:da:6c:
28:b3:60:b8:70:bd:33:67:21:7b:9b:f1:9f:18:3d:
62:f8:29:9b:b8:79:4b:b6:f4:6f:10:0d:99:12:db:
78:a2:dc:b0:bb:80:c8:72:bf:40:bc:a6:c6:25:49:
9d:01:1e:8b:61:e3:04:3d:e3:f2:85:67:4f:31:27:
da:09:e4:ad:42:29:3c:c7:fa:96:09:cd:f6:5b:62:
23:c7:35:75:95:2a:d3:a7:ba:57:4c:e0:85:50:8e:
27:45:0a:5a:c7:23:b8:51:10:4b:7a:87:35:58:c3:
57:62:2a:cf:44:07:ae:4b:01:cc:a3:09:24:01:4b:
91:e3:f1:a6:d0:af:0c:21:63:4d:b2:aa:30:aa:ee:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5F:A2:A8:DF:EF:9D:85:95:E9:8B:FE:6A:3D:8C:F5:CB:E6:53:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a85de48b-f7d7-3cc1-b5fb-02ccbf8c07bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:5d:bf:4b:de:6b:40:26:c8:b3:b3:38:68:a3:c2:6b:26:e2:
be:0f:d0:0d:d8:9a:f2:4b:53:b8:68:69:19:cd:dd:bf:ae:18:
be:1d:4a:46:43:48:06:e3:20:75:a2:95:09:f4:6c:ad:10:20:
35:da:36:ac:ec:d4:2e:7c:29:c2:c4:fe:2b:8a:8d:9e:1c:5b:
94:9d:da:a1:be:28:48:cd:2e:1a:d8:de:94:d7:0f:9a:91:4c:
cf:69:fb:8e:5f:1d:0a:49:c7:e2:9e:43:fb:8f:b6:d4:a7:2b:
1b:50:06:a2:d4:0e:19:02:bf:88:3d:ee:8b:53:90:f3:7b:11:
7b:5d:eb:94:6e:61:cd:75:1a:0b:dc:fa:bf:b4:bf:f8:45:78:
02:a5:a3:99:e6:e5:57:66:ae:57:a2:1f:2c:90:1d:d2:fe:a2:
b2:9c:b6:87:89:aa:88:86:bf:06:2b:0d:1f:c1:30:82:48:14:
f1:e0:73:4c:51:e8:8d:6d:9f:70:66:a2:9d:9b:31:5a:b4:81:
43:a5:d0:61:3a:bc:da:03:b5:14:72:d4:62:36:42:84:d2:cd:
ef:a6:ae:42:47:92:44:ef:82:8f:99:fc:1b:31:a0:3a:c1:50:
cb:c4:d5:2b:36:b7:70:0b:bc:97:f1:be:d0:c2:b7:87:4d:5c:
fe:60:2a:5e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECQBjlXL1IetXtIT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMjEyMDAwMFoXDTIzMDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
MzYxY2UyNDQtMDcyNS00ZTMxLWIyZjYtNWFmNzUxNmM4NWI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzDqx1obX5EotcXgJBAlkouwgIiwH74kLPqe
xXfQTL15JlhMa6lak/3qnP6SFGrS7hy8GLW1hMA7kU6X0mW/ezeXXHCxDo3JMWup
8AOF3CNjQITNyBGSyaBJlVSlg2asnZpkdGOXTj2G5E+kzIZxiRu6L08X2mwos2C4
cL0zZyF7m/GfGD1i+CmbuHlLtvRvEA2ZEtt4otywu4DIcr9AvKbGJUmdAR6LYeME
PePyhWdPMSfaCeStQik8x/qWCc32W2IjxzV1lSrTp7pXTOCFUI4nRQpaxyO4URBL
eoc1WMNXYirPRAeuSwHMowkkAUuR4/Gm0K8MIWNNsqowqu4STwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLdfoqjf752FlemL/mo9jPXL5lNpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTg1ZGU0OGItZjdkNy0z
Y2MxLWI1ZmItMDJjY2JmOGMwN2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANhQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAl12/S95rQCbIs7M4aKPCaybivg/QDdia8ktTuGhpGc3dv64Yvh1KRkNI
BuMgdaKVCfRsrRAgNdo2rOzULnwpwsT+K4qNnhxblJ3aob4oSM0uGtjelNcPmpFM
z2n7jl8dCknH4p5D+4+21KcrG1AGotQOGQK/iD3ui1OQ83sRe13rlG5hzXUaC9z6
v7S/+EV4AqWjmeblV2auV6IfLJAd0v6ispy2h4mqiIa/BisNH8EwgkgU8eBzTFHo
jW2fcGainZsxWrSBQ6XQYTq82gO1FHLUYjZChNLN76auQkeSRO+Cj5n8GzGgOsFQ
y8TVKza3cAu8l/G+0MK3h01c/mAqXg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:36:54 2025 by rpki-client