Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bde72f20-793a-3224-a8a9-7b26187e8c41.roa
File: bde72f20-793a-3224-a8a9-7b26187e8c41.roa (raw, json)
Hash identifier: Yn2H7vRdZZDh2APAqJyOXxuuEfOaGuKJvMYrWjpJdx0=
Subject key identifier: 1B:98:5E:92:53:71:09:AD:1D:CC:15:38:82:C9:67:BD:F0:8F:CE:72
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406222B9743639EDCF86C1C9E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bde72f20-793a-3224-a8a9-7b26187e8c41.roa
Signing time: Tue 27 Dec 2022 12:00:00 +0000
ROA not before: Tue 27 Dec 2022 12:00:00 +0000
ROA not after: Wed 01 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:62:22:b9:74:36:39:ed:cf:86:c1:c9:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 27 12:00:00 2022 GMT
Not After : Feb 1 05:00:00 2023 GMT
Subject: CN=3f2b0300-bbbc-45c5-bcc0-b4590ac2e221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:18:07:65:42:3d:ff:a0:f1:35:30:d8:6a:
bf:7f:ad:65:c9:ad:14:2c:ac:ab:a7:a5:9a:0a:d9:
3e:b2:59:5d:ca:18:fd:27:0d:ec:e7:9d:7d:63:64:
51:c2:cf:d3:a0:75:bb:88:68:b8:58:0a:db:c8:c7:
ad:ff:b9:ee:65:da:fa:8c:12:fa:23:5f:bc:38:4d:
22:a8:bb:b5:ea:dd:fd:c1:41:ca:8e:55:31:59:27:
b1:3c:13:38:7e:b3:7e:29:ce:92:40:8f:55:50:ec:
b2:01:42:7c:25:4e:89:7e:6a:31:cd:48:f7:bb:5b:
04:3f:30:9b:d9:ac:2f:63:cc:1f:99:df:bc:06:b7:
b5:57:6a:44:6a:82:48:0e:00:4d:b4:4c:c6:35:3c:
bf:bc:98:08:dc:11:58:b8:12:2d:23:f5:29:bb:cd:
92:74:7f:0a:63:c5:c1:e9:89:c0:33:d3:f5:82:06:
a2:f8:c1:3f:e0:29:b8:84:32:bd:c6:0c:f2:ba:9f:
ae:5d:0a:0b:2c:91:ab:e6:ab:c2:d7:69:8d:e1:c3:
09:a2:54:56:aa:22:25:de:d1:b3:ee:f7:9d:80:db:
2a:da:54:31:34:ed:d4:88:ae:66:1f:b1:82:23:a0:
23:56:cc:72:0c:05:69:e7:91:99:83:26:9c:92:5a:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:98:5E:92:53:71:09:AD:1D:CC:15:38:82:C9:67:BD:F0:8F:CE:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bde72f20-793a-3224-a8a9-7b26187e8c41.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:63:0e:c6:e8:69:23:c3:5f:2f:2c:9e:b1:42:22:98:c2:5c:
3d:96:d8:2d:56:21:96:c2:d0:cb:34:df:70:4d:a6:fd:ec:b3:
83:65:90:e0:88:94:3d:e5:ba:69:d5:3b:bc:37:fc:f6:fe:7a:
b8:02:72:66:6a:12:83:e6:e3:f2:1f:3a:3b:77:bb:fd:02:08:
49:53:b0:fd:a8:23:5c:e8:01:7a:63:34:a4:b6:02:44:6f:c7:
4a:33:fe:a8:f4:57:34:bc:74:33:74:03:62:cb:ec:2e:d7:f6:
52:95:a9:7a:4a:6c:f8:6e:f3:8f:38:4f:a5:49:99:d1:0d:dd:
a1:3d:a8:d0:22:53:48:d6:cf:10:12:da:e7:85:7e:12:a7:3e:
8a:1e:2f:33:3d:95:31:84:60:a6:7e:c2:e2:0c:d4:ff:97:1b:
00:88:7c:6e:b1:79:5b:9e:be:a0:f5:1d:60:70:61:2c:1b:88:
91:7b:db:2a:cc:ce:c9:8b:a0:14:b5:50:a8:b8:bb:e8:e6:73:
a0:15:9b:22:91:4a:83:80:53:7c:1b:30:7c:cc:41:3c:a9:e8:
c3:25:29:14:f5:11:4c:47:47:61:f9:ac:63:9d:74:3a:2f:92:
b4:e6:5a:4c:1f:d4:70:d6:93:03:f9:3a:72:46:1a:4e:95:e8:
a4:8e:29:33
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBiIrl0Njntz4bByeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNzEyMDAwMFoXDTIzMDIwMTA1MDAwMFowLzEtMCsGA1UEAxMk
M2YyYjAzMDAtYmJiYy00NWM1LWJjYzAtYjQ1OTBhYzJlMjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9cYB2VCPf+g8TUw2Gq/f61lya0ULKyrp6Wa
Ctk+slldyhj9Jw3s5519Y2RRws/ToHW7iGi4WArbyMet/7nuZdr6jBL6I1+8OE0i
qLu16t39wUHKjlUxWSexPBM4frN+Kc6SQI9VUOyyAUJ8JU6JfmoxzUj3u1sEPzCb
2awvY8wfmd+8Bre1V2pEaoJIDgBNtEzGNTy/vJgI3BFYuBItI/Upu82SdH8KY8XB
6YnAM9P1ggai+ME/4Cm4hDK9xgzyup+uXQoLLJGr5qvC12mN4cMJolRWqiIl3tGz
7vedgNsq2lQxNO3UiK5mH7GCI6AjVsxyDAVp55GZgyacklonYQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBuYXpJTcQmtHcwVOILJZ73wj85yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmRlNzJmMjAtNzkzYS0z
MjI0LWE4YTktN2IyNjE4N2U4YzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAONQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAH2MOxuhpI8NfLyyesUIimMJcPZbYLVYhlsLQyzTfcE2m/eyzg2WQ4IiU
PeW6adU7vDf89v56uAJyZmoSg+bj8h86O3e7/QIISVOw/agjXOgBemM0pLYCRG/H
SjP+qPRXNLx0M3QDYsvsLtf2UpWpekps+G7zjzhPpUmZ0Q3doT2o0CJTSNbPEBLa
54V+Eqc+ih4vMz2VMYRgpn7C4gzU/5cbAIh8brF5W56+oPUdYHBhLBuIkXvbKszO
yYugFLVQqLi76OZzoBWbIpFKg4BTfBswfMxBPKnowyUpFPURTEdHYfmsY510Oi+S
tOZaTB/UcNaTA/k6ckYaTpXopI4pMw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:00 2025 by rpki-client