Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c59f23d9-50c7-3fb2-b642-2d2477597723.roa
File: c59f23d9-50c7-3fb2-b642-2d2477597723.roa (raw, json)
Hash identifier: +XJhIlIsW5gb9sQmrc8D7DwmhkgH1VlgpkgxttAP+ic=
Subject key identifier: 71:38:0A:01:A4:7E:1A:8A:84:01:55:64:E1:71:CC:10:FD:3E:C6:B1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E78F88C8424D6F6DAA8711F40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c59f23d9-50c7-3fb2-b642-2d2477597723.roa
Signing time: Tue 05 Jul 2022 12:00:00 +0000
ROA not before: Tue 05 Jul 2022 12:00:00 +0000
ROA not after: Wed 10 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 159.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:78:f8:8c:84:24:d6:f6:da:a8:71:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 5 12:00:00 2022 GMT
Not After : Aug 10 04:00:00 2022 GMT
Subject: CN=915b56a3-96ae-4dc8-bd5f-d130ea44955d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ae:b5:27:ad:50:1e:1b:5b:5e:93:ea:aa:09:
bb:d3:77:3f:2f:37:a5:c0:51:ef:d4:67:4a:1f:ae:
6f:5b:d9:bf:9e:b0:96:e6:77:08:ab:51:56:9f:9e:
37:ea:84:9c:52:90:49:6c:26:bd:ac:21:35:06:90:
1c:2a:a0:93:27:a0:68:98:5e:80:c1:53:ad:83:8e:
47:85:3c:21:ce:19:05:4d:19:d2:4a:be:2e:b2:da:
27:22:af:2d:b8:e9:b4:18:6d:8c:3f:d1:9f:86:fb:
fb:56:45:d8:80:3f:8c:e4:d4:e3:bd:7e:07:5d:9d:
84:0a:17:0f:2c:38:9b:74:10:ad:8e:98:05:bb:89:
5e:38:74:6b:f2:00:34:bf:e3:06:d8:a6:9c:0d:8b:
ca:53:d2:3a:51:ae:f8:04:d3:a2:41:c8:d6:d9:a4:
1b:4e:fe:ca:5f:68:2e:a3:52:75:05:a3:6a:ec:84:
9a:90:2a:1a:e4:fc:33:57:9c:31:12:99:55:9e:67:
ee:87:fa:55:60:74:e2:dd:81:64:29:a1:db:ea:de:
0b:4a:96:04:93:97:ec:91:1e:21:74:44:69:8b:b4:
6c:0f:49:34:51:1b:d3:d5:e7:2a:51:e7:24:76:ba:
ec:e1:24:30:86:41:11:fe:9a:2a:7a:af:d6:9e:31:
19:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:38:0A:01:A4:7E:1A:8A:84:01:55:64:E1:71:CC:10:FD:3E:C6:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c59f23d9-50c7-3fb2-b642-2d2477597723.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:be:cf:12:1a:a3:e8:d5:ca:01:0d:7b:39:05:ef:80:5f:b0:
db:36:41:70:f7:01:19:09:9c:7d:ef:59:c6:96:27:52:cb:24:
d0:68:67:e2:ec:60:e8:57:9a:81:7c:a8:14:3a:59:e7:80:80:
53:26:e3:07:b5:8c:c7:42:1f:0b:a3:2a:98:9a:07:55:a0:e1:
98:1e:04:04:a0:e8:66:e9:9c:40:c9:e8:10:91:f3:31:5a:af:
84:8f:6f:ac:9f:b0:24:6e:2a:b1:e8:c0:25:33:34:bd:fe:9d:
9d:20:0c:82:9f:ca:5b:e8:cf:3c:01:8d:da:dd:d5:bc:0e:b2:
0a:a6:d3:a1:b0:c2:03:16:bf:bf:c6:15:b1:79:d0:29:bb:31:
97:2c:18:4e:53:d4:c1:04:85:31:cb:92:8a:08:bd:5f:16:e4:
cf:00:a0:23:09:08:3a:b4:00:44:fc:c6:04:80:e6:a1:59:62:
5d:82:95:77:bc:df:48:cb:8b:e7:f1:28:af:0d:64:2f:d5:08:
16:e1:36:60:38:4d:60:eb:ad:19:79:cc:6c:e8:8f:b9:7d:6a:
2d:84:69:a2:79:c6:f3:21:6f:ec:75:a8:7a:3e:26:8c:3b:b1:
16:8d:f6:35:eb:6e:fe:5b:53:c5:93:88:a0:99:ca:32:c7:54:
54:e9:de:e3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD54+IyEJNb22qhxH0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcwNTEyMDAwMFoXDTIyMDgxMDA0MDAwMFowLzEtMCsGA1UEAxMk
OTE1YjU2YTMtOTZhZS00ZGM4LWJkNWYtZDEzMGVhNDQ5NTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua61J61QHhtbXpPqqgm703c/LzelwFHv1GdK
H65vW9m/nrCW5ncIq1FWn5436oScUpBJbCa9rCE1BpAcKqCTJ6BomF6AwVOtg45H
hTwhzhkFTRnSSr4ustonIq8tuOm0GG2MP9Gfhvv7VkXYgD+M5NTjvX4HXZ2EChcP
LDibdBCtjpgFu4leOHRr8gA0v+MG2KacDYvKU9I6Ua74BNOiQcjW2aQbTv7KX2gu
o1J1BaNq7ISakCoa5PwzV5wxEplVnmfuh/pVYHTi3YFkKaHb6t4LSpYEk5fskR4h
dERpi7RsD0k0URvT1ecqUeckdrrs4SQwhkER/poqeq/WnjEZgQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHE4CgGkfhqKhAFVZOFxzBD9PsaxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzU5ZjIzZDktNTBjNy0z
ZmIyLWI2NDItMmQyNDc3NTk3NzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnwswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnb7PEhqj6NXKAQ17OQXvgF+w2zZBcPcBGQmcfe9ZxpYnUssk0Ghn4uxg
6FeagXyoFDpZ54CAUybjB7WMx0IfC6MqmJoHVaDhmB4EBKDoZumcQMnoEJHzMVqv
hI9vrJ+wJG4qsejAJTM0vf6dnSAMgp/KW+jPPAGN2t3VvA6yCqbTobDCAxa/v8YV
sXnQKbsxlywYTlPUwQSFMcuSigi9XxbkzwCgIwkIOrQARPzGBIDmoVliXYKVd7zf
SMuL5/Eorw1kL9UIFuE2YDhNYOutGXnMbOiPuX1qLYRponnG8yFv7HWoej4mjDux
Fo32Netu/ltTxZOIoJnKMsdUVOne4w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:29 2025 by rpki-client