Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c8a01f64-74b7-30f4-90c6-d0769eaaa182.roa
File: c8a01f64-74b7-30f4-90c6-d0769eaaa182.roa (raw, json)
Hash identifier: geb1l1GEUmNrbN08a1/frKHhGpGlMi8SCZx47+Q21mI=
Subject key identifier: 9D:AB:1A:44:EE:8C:DB:7F:68:C9:0E:43:FD:84:DC:E0:CD:EB:33:13
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400064E5CF0214A184BB13E500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c8a01f64-74b7-30f4-90c6-d0769eaaa182.roa
Signing time: Tue 22 Nov 2022 12:00:00 +0000
ROA not before: Tue 22 Nov 2022 12:00:00 +0000
ROA not after: Wed 28 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 56.147.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:00:64:e5:cf:02:14:a1:84:bb:13:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 22 12:00:00 2022 GMT
Not After : Dec 28 05:00:00 2022 GMT
Subject: CN=a5541ee7-44bd-4d1f-9473-7c00aaf8144f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:76:f2:ec:ce:6f:cb:08:e3:27:dd:50:19:
70:b3:45:ec:4a:34:50:95:7a:5d:5b:82:ed:f3:54:
25:59:64:a8:8b:7e:99:c0:22:a3:eb:12:73:ea:71:
6e:8d:c3:71:9e:22:bc:ce:b3:b8:4c:18:08:1a:34:
af:5b:46:fd:59:e3:7e:3b:2f:9a:cc:c0:ef:13:cb:
75:06:77:5b:b5:0a:48:b3:85:f3:cb:ca:2f:ab:1a:
01:8d:21:fe:b9:10:d4:dc:48:9b:6c:5a:27:92:08:
54:90:f3:12:ec:c0:1b:d4:03:41:23:57:d7:86:a3:
38:5d:70:2e:cb:54:c2:c6:87:9e:3c:5d:2a:05:d7:
c6:ec:0c:83:1a:33:8d:ba:fa:a9:35:c3:48:9e:69:
50:d2:e2:ec:c6:9a:47:ca:fa:d4:43:4d:f2:b7:1f:
15:44:ea:83:41:77:f0:33:bb:70:86:c8:fb:62:e9:
ec:75:43:81:82:b4:aa:cf:48:5b:17:bd:87:0e:41:
cf:5c:17:5f:dc:25:81:f1:ad:9a:9c:60:4c:a6:3e:
7f:d6:9f:a2:6a:f8:43:90:64:69:34:db:74:50:bd:
e4:f8:8b:b3:c3:0a:f5:6a:b1:e3:ac:8b:37:48:72:
ec:3b:5a:ec:ad:3a:32:78:d1:f7:aa:93:f0:85:c2:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AB:1A:44:EE:8C:DB:7F:68:C9:0E:43:FD:84:DC:E0:CD:EB:33:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c8a01f64-74b7-30f4-90c6-d0769eaaa182.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.147.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:d3:aa:69:7b:89:66:0d:88:11:59:c4:90:ca:ff:0e:4d:4c:
0a:3a:dd:06:ba:fc:8a:27:55:4d:b4:66:d6:86:95:50:7c:86:
18:b9:86:0a:76:66:2c:51:fa:ed:2b:a4:bd:8f:ab:72:73:c3:
12:f9:77:a9:69:67:95:c0:54:6a:37:ae:a9:4b:74:ec:58:7c:
a4:01:3a:08:f2:5b:43:61:2b:95:c7:f2:56:b7:bf:5e:15:52:
30:7e:da:e7:ef:6f:50:2e:18:94:dc:f3:2b:95:6c:52:7c:00:
b4:4e:4a:7f:49:4b:4a:a9:cb:99:74:86:e7:02:76:fc:01:21:
12:ca:9c:ba:70:a5:f7:5a:df:ad:99:d1:29:d3:15:fb:5e:21:
80:74:c1:0b:14:39:9a:90:66:e5:78:18:ae:06:d8:5a:2c:b4:
e6:1d:38:15:b2:04:d1:7a:01:8e:8e:bb:36:57:91:98:3d:86:
6f:6e:8e:38:1a:7d:15:cc:45:5c:65:ae:5f:0a:fa:6f:72:49:
d3:1a:9c:99:eb:37:50:ee:ff:6b:68:58:1f:85:a7:00:e7:c1:
9e:ea:5d:fa:ed:70:9e:64:0f:85:66:bf:f6:e4:cf:3e:7e:14:
a6:6d:17:61:0a:05:bf:9a:9e:32:95:a1:03:7e:64:a4:68:0d:
36:65:36:c7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAAZOXPAhShhLsT5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyMjEyMDAwMFoXDTIyMTIyODA1MDAwMFowLzEtMCsGA1UEAxMk
YTU1NDFlZTctNDRiZC00ZDFmLTk0NzMtN2MwMGFhZjgxNDRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5R28uzOb8sI4yfdUBlws0XsSjRQlXpdW4Lt
81QlWWSoi36ZwCKj6xJz6nFujcNxniK8zrO4TBgIGjSvW0b9WeN+Oy+azMDvE8t1
BndbtQpIs4Xzy8ovqxoBjSH+uRDU3EibbFonkghUkPMS7MAb1ANBI1fXhqM4XXAu
y1TCxoeePF0qBdfG7AyDGjONuvqpNcNInmlQ0uLsxppHyvrUQ03ytx8VROqDQXfw
M7twhsj7YunsdUOBgrSqz0hbF72HDkHPXBdf3CWB8a2anGBMpj5/1p+iavhDkGRp
NNt0UL3k+Iuzwwr1arHjrIs3SHLsO1rsrToyeNH3qpPwhcIqvwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ2rGkTujNt/aMkOQ/2E3ODN6zMTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzhhMDFmNjQtNzRiNy0z
MGY0LTkwYzYtZDA3NjllYWFhMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOJMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlNOqaXuJZg2IEVnEkMr/Dk1MCjrdBrr8iidVTbRm1oaVUHyGGLmGCnZm
LFH67SukvY+rcnPDEvl3qWlnlcBUajeuqUt07Fh8pAE6CPJbQ2ErlcfyVre/XhVS
MH7a5+9vUC4YlNzzK5VsUnwAtE5Kf0lLSqnLmXSG5wJ2/AEhEsqcunCl91rfrZnR
KdMV+14hgHTBCxQ5mpBm5XgYrgbYWiy05h04FbIE0XoBjo67NleRmD2Gb26OOBp9
FcxFXGWuXwr6b3JJ0xqcmes3UO7/a2hYH4WnAOfBnupd+u1wnmQPhWa/9uTPPn4U
pm0XYQoFv5qeMpWhA35kpGgNNmU2xw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:21 2025 by rpki-client