Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bbf656aa-d6b7-3214-8490-b3e2b3583d73.roa
File: bbf656aa-d6b7-3214-8490-b3e2b3583d73.roa (raw, json)
Hash identifier: /Kxfs70DYJmNKdbN+Dfkz7B5L/WzL9QLN7+DyVoBr0Q=
Subject key identifier: 01:E4:0D:43:E3:46:0C:09:7F:8B:2A:1F:1C:01:BC:E6:BE:6F:06:47
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E6D312E51AACE3D8672395600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bbf656aa-d6b7-3214-8490-b3e2b3583d73.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.43.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6d:31:2e:51:aa:ce:3d:86:72:39:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=11052ee8-69fd-4b78-a478-e3a05e5c3a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:57:3a:02:89:fc:f5:37:e6:79:98:04:44:
78:2f:aa:3f:64:b6:d9:88:d6:41:7f:c6:8b:1c:78:
19:6c:b3:86:54:cd:d6:6e:91:88:c8:d6:05:4b:dd:
0e:8b:e2:c0:f8:47:e8:1a:7c:9c:e7:ad:8a:00:f1:
49:fb:d6:e6:03:13:2f:c1:08:a8:22:ad:13:95:8b:
f4:22:27:15:c0:cd:94:39:97:a8:a0:94:94:f4:b5:
b8:e1:bc:39:27:70:fc:78:ae:d3:30:a4:24:34:3d:
46:68:35:ab:95:36:39:93:33:11:6f:b2:10:73:9d:
76:e9:bc:4e:bd:df:74:a0:49:76:7a:3b:15:3c:f3:
12:46:2e:41:c8:97:e5:09:c4:63:ad:fb:c8:c2:64:
80:e8:9c:97:77:c4:f8:6e:0d:a8:3b:72:87:84:0b:
a9:d3:1b:13:14:8a:ba:c5:e8:5c:e4:58:ae:b2:58:
f5:96:ef:d2:f1:39:40:71:33:42:da:27:32:71:e6:
24:57:3d:35:b2:0e:d1:c0:f9:67:8e:a2:b7:48:83:
41:bc:65:34:e3:10:a9:a8:45:57:b5:67:35:5c:40:
bf:57:ba:8c:c7:0b:46:f3:27:10:a8:d6:89:f1:44:
82:d8:8c:d9:f4:2b:8e:59:05:27:9b:63:9e:ad:b3:
94:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E4:0D:43:E3:46:0C:09:7F:8B:2A:1F:1C:01:BC:E6:BE:6F:06:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bbf656aa-d6b7-3214-8490-b3e2b3583d73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.43.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:e9:03:d0:5e:da:90:d4:bd:31:c3:77:95:f3:09:ab:09:df:
b4:62:da:a6:da:73:89:76:43:96:04:a8:3c:f4:fc:2a:90:86:
f9:13:ef:2c:ae:56:a0:ba:f9:e7:22:ca:19:4c:e8:75:f0:0a:
94:f8:e1:4d:a6:d8:2a:58:c9:c4:fa:b5:79:8c:c2:61:a0:c8:
36:84:c3:0c:d4:0d:6b:5c:e4:ee:ec:f3:41:24:ca:9c:43:b4:
c6:72:52:e4:65:98:29:e6:7f:72:90:73:ed:4b:bf:5d:e6:f9:
eb:90:8d:b7:2f:93:67:5c:a9:6c:fa:01:90:ab:56:1a:69:ba:
7a:86:b4:25:b8:d8:ab:59:74:db:b5:67:df:36:c0:be:c4:a0:
f8:85:d9:6c:f7:8c:99:75:d1:94:7e:e9:d1:9d:89:2f:41:1f:
e9:9b:4e:90:b3:58:2f:47:51:50:a5:c1:80:9d:02:db:50:3b:
da:07:0f:01:f5:15:b4:75:97:22:ac:f2:da:a7:64:21:c5:89:
79:11:25:83:a0:ce:49:87:aa:ba:d7:19:29:52:e6:ac:02:7a:
14:73:e1:4f:36:88:14:18:8b:93:39:84:0c:7c:b4:34:1a:70:
d4:56:a1:5f:98:7e:7e:df:5b:e2:b4:6f:b3:10:8e:02:4e:2e:
74:53:74:98
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5tMS5Rqs49hnI5VgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYzMDEyMDAwMFoXDTIyMDgwNTA0MDAwMFowLzEtMCsGA1UEAxMk
MTEwNTJlZTgtNjlmZC00Yjc4LWE0NzgtZTNhMDVlNWMzYTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxtXOgKJ/PU35nmYBER4L6o/ZLbZiNZBf8aL
HHgZbLOGVM3WbpGIyNYFS90Oi+LA+EfoGnyc562KAPFJ+9bmAxMvwQioIq0TlYv0
IicVwM2UOZeooJSU9LW44bw5J3D8eK7TMKQkND1GaDWrlTY5kzMRb7IQc5126bxO
vd90oEl2ejsVPPMSRi5ByJflCcRjrfvIwmSA6JyXd8T4bg2oO3KHhAup0xsTFIq6
xehc5Fiuslj1lu/S8TlAcTNC2icyceYkVz01sg7RwPlnjqK3SINBvGU04xCpqEVX
tWc1XEC/V7qMxwtG8ycQqNaJ8USC2IzZ9CuOWQUnm2OerbOUUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAHkDUPjRgwJf4sqHxwBvOa+bwZHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmJmNjU2YWEtZDZiNy0z
MjE0LTg0OTAtYjNlMmIzNTgzZDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANiswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkekD0F7akNS9McN3lfMJqwnftGLaptpziXZDlgSoPPT8KpCG+RPvLK5W
oLr55yLKGUzodfAKlPjhTabYKljJxPq1eYzCYaDINoTDDNQNa1zk7uzzQSTKnEO0
xnJS5GWYKeZ/cpBz7Uu/Xeb565CNty+TZ1ypbPoBkKtWGmm6eoa0JbjYq1l027Vn
3zbAvsSg+IXZbPeMmXXRlH7p0Z2JL0Ef6ZtOkLNYL0dRUKXBgJ0C21A72gcPAfUV
tHWXIqzy2qdkIcWJeRElg6DOSYequtcZKVLmrAJ6FHPhTzaIFBiLkzmEDHy0NBpw
1FahX5h+ft9b4rRvsxCOAk4udFN0mA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:02 2025 by rpki-client