Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af921306-9f88-317d-9fb0-e34725487b44.roa
File: af921306-9f88-317d-9fb0-e34725487b44.roa (raw, json)
Hash identifier: QFNWTjRQDgdr8DUC8A9f+yrIPoi2N07x9ZW3TG2SbRU=
Subject key identifier: DD:C1:F7:40:A3:21:0A:2D:DF:49:15:E9:56:21:09:19:4F:FF:15:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F8E0C99A3AFF1FB5B0AE31380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af921306-9f88-317d-9fb0-e34725487b44.roa
Signing time: Wed 12 Oct 2022 12:00:00 +0000
ROA not before: Wed 12 Oct 2022 12:00:00 +0000
ROA not after: Thu 17 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 56.59.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8e:0c:99:a3:af:f1:fb:5b:0a:e3:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 12 12:00:00 2022 GMT
Not After : Nov 17 05:00:00 2022 GMT
Subject: CN=db0c79ab-8ff2-4851-ae6f-044faadc92ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:fe:34:36:1a:73:e3:af:26:04:5d:91:cb:
ac:ca:7b:a5:a8:69:8b:87:ae:45:4a:0f:00:8f:d2:
76:fe:86:68:27:02:63:1e:8b:51:b0:9e:60:00:74:
8c:ff:ca:d9:12:2a:2f:d9:d2:51:b9:13:93:59:b9:
ef:50:87:de:dd:90:30:cc:90:be:76:ee:06:8c:ef:
18:47:fa:04:b0:b0:a3:0f:ba:65:ae:aa:71:42:26:
c8:49:0a:8a:53:94:af:3a:59:a4:7f:81:17:e2:06:
00:93:60:4c:2a:85:7d:5c:2b:d2:4c:c7:1d:2f:e3:
0f:a9:e8:48:48:f3:ea:57:ec:45:2d:93:d2:40:5d:
ee:11:bb:0a:9d:09:cd:cc:db:69:f5:0a:5c:34:61:
51:4f:dc:ab:98:3d:f1:d1:9f:18:ca:8c:bd:d5:aa:
23:db:e8:9f:14:fc:1b:66:04:40:a8:fc:c0:50:ff:
60:48:87:fd:02:5f:ed:5c:92:e4:6d:1e:d4:74:ba:
4c:98:4a:56:01:6e:6d:6d:5e:eb:23:92:bf:d9:22:
b2:6e:01:ac:74:30:8a:d5:07:6b:a4:2d:3b:02:7f:
34:fb:0d:cb:93:52:2b:30:86:ab:58:1b:27:65:37:
30:4f:5e:f4:f4:a2:c8:09:53:8c:a1:f5:7d:a9:1c:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C1:F7:40:A3:21:0A:2D:DF:49:15:E9:56:21:09:19:4F:FF:15:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af921306-9f88-317d-9fb0-e34725487b44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.59.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:c0:54:8a:23:c0:29:89:df:08:38:cb:3c:18:f2:24:8c:53:
cc:a4:5d:b9:aa:5d:53:31:82:cf:72:e5:95:eb:94:ad:ed:a7:
1a:cf:e4:11:ea:f2:91:a2:95:44:b2:1a:99:52:39:af:15:2e:
3f:6c:7d:d3:7d:86:21:58:a4:06:60:28:66:ef:9f:51:ca:c5:
82:3d:2f:ac:ae:36:be:f1:9a:4c:40:43:f2:d1:40:81:ec:fb:
47:2f:69:40:b3:e4:49:07:1e:59:42:0b:7f:26:9e:a8:27:d2:
88:69:d0:f2:33:59:ca:aa:7e:3d:c0:6f:50:54:ad:f2:1f:f6:
94:95:e9:51:18:e6:e1:b7:6b:4c:4b:8c:61:83:b5:69:55:53:
66:49:d3:5d:b1:93:d4:7f:51:0b:e3:79:62:ac:8b:99:0c:89:
68:9e:26:9d:48:7d:e6:29:45:f9:5c:da:7e:ba:d6:36:00:37:
94:54:c9:24:e0:41:3e:86:8b:78:a2:f9:50:11:6e:8f:c3:62:
52:b7:3b:7f:2b:5e:d1:0c:18:a3:98:d3:24:cf:4e:0d:07:d9:
6b:0b:1f:5b:16:23:f9:19:56:50:01:be:30:f0:06:77:6f:73:
aa:2d:fa:a6:a4:36:7f:ca:22:06:8d:be:c4:f0:a8:a1:ec:ff:
5a:83:5f:89
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+ODJmjr/H7WwrjE4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxMjEyMDAwMFoXDTIyMTExNzA1MDAwMFowLzEtMCsGA1UEAxMk
ZGIwYzc5YWItOGZmMi00ODUxLWFlNmYtMDQ0ZmFhZGM5MmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyn+NDYac+OvJgRdkcusynulqGmLh65FSg8A
j9J2/oZoJwJjHotRsJ5gAHSM/8rZEiov2dJRuROTWbnvUIfe3ZAwzJC+du4GjO8Y
R/oEsLCjD7plrqpxQibISQqKU5SvOlmkf4EX4gYAk2BMKoV9XCvSTMcdL+MPqehI
SPPqV+xFLZPSQF3uEbsKnQnNzNtp9QpcNGFRT9yrmD3x0Z8Yyoy91aoj2+ifFPwb
ZgRAqPzAUP9gSIf9Al/tXJLkbR7UdLpMmEpWAW5tbV7rI5K/2SKybgGsdDCK1Qdr
pC07An80+w3Lk1IrMIarWBsnZTcwT1709KLICVOMofV9qRz8LQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN3B90CjIQot30kV6VYhCRlP/xXxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWY5MjEzMDYtOWY4OC0z
MTdkLTlmYjAtZTM0NzI1NDg3YjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAODswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAV8BUiiPAKYnfCDjLPBjyJIxTzKRduapdUzGCz3LlleuUre2nGs/kEery
kaKVRLIamVI5rxUuP2x9032GIVikBmAoZu+fUcrFgj0vrK42vvGaTEBD8tFAgez7
Ry9pQLPkSQceWUILfyaeqCfSiGnQ8jNZyqp+PcBvUFSt8h/2lJXpURjm4bdrTEuM
YYO1aVVTZknTXbGT1H9RC+N5YqyLmQyJaJ4mnUh95ilF+VzafrrWNgA3lFTJJOBB
PoaLeKL5UBFuj8NiUrc7fyte0QwYo5jTJM9ODQfZawsfWxYj+RlWUAG+MPAGd29z
qi36pqQ2f8oiBo2+xPCooez/WoNfiQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:02 2025 by rpki-client