Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cae949fb-1e0a-398f-b829-6ba6b1a03c3c.roa
File: cae949fb-1e0a-398f-b829-6ba6b1a03c3c.roa (raw, json)
Hash identifier: h84SQlpCs7AGXbqR3m/U1UyP8n+so01i+P4rOa2XWbk=
Subject key identifier: 72:9B:86:FD:E1:3F:98:3A:3E:64:7A:DD:30:2A:8A:D2:F9:8A:47:E6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408903F1FAE89FD244F2787478
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cae949fb-1e0a-398f-b829-6ba6b1a03c3c.roa
Signing time: Tue 10 Jan 2023 12:00:00 +0000
ROA not before: Tue 10 Jan 2023 12:00:00 +0000
ROA not after: Wed 15 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 56.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:89:03:f1:fa:e8:9f:d2:44:f2:78:74:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 10 12:00:00 2023 GMT
Not After : Feb 15 05:00:00 2023 GMT
Subject: CN=51c9d9a5-695b-44ca-92a2-2cf3fff44fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:49:ef:41:38:1e:b3:7a:6e:0a:12:a4:93:
2e:05:07:fb:d7:c6:c9:88:23:ed:e3:51:44:86:b5:
bd:f7:a0:5c:a7:e8:ab:35:16:b5:d1:12:0e:ba:53:
09:73:eb:0a:34:12:32:10:fa:e3:05:f9:93:38:71:
46:72:22:25:34:79:a1:21:3e:3f:b0:9c:73:a9:2e:
c2:21:58:4f:65:9a:c9:57:62:9d:93:2f:57:82:4f:
31:13:eb:e7:5e:22:e1:0c:51:59:03:ab:3d:57:05:
5a:b2:20:ae:0d:df:b6:57:36:25:31:ae:c1:60:5b:
ba:94:7f:15:22:9d:b0:8c:31:92:44:ec:99:06:da:
12:66:a9:a8:3e:38:a9:3f:aa:80:41:5d:7b:45:1b:
50:c6:4f:ff:4e:ed:2b:65:1f:d0:30:be:57:48:7c:
fc:10:e7:95:28:3d:d1:a8:37:22:15:b8:41:b4:a1:
26:c8:b0:96:de:0a:2d:22:9e:4b:b6:ca:37:11:ab:
8a:7b:a4:2f:0f:6c:39:80:bd:40:8c:34:99:7a:2c:
20:0b:25:bf:d9:c1:d6:15:37:29:30:4f:b4:0d:01:
60:ff:17:fe:2a:11:3e:99:28:26:11:31:03:1d:51:
65:b5:c9:86:7d:52:a6:66:94:a1:79:79:38:4e:85:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:9B:86:FD:E1:3F:98:3A:3E:64:7A:DD:30:2A:8A:D2:F9:8A:47:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cae949fb-1e0a-398f-b829-6ba6b1a03c3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:e6:39:85:5b:73:76:f2:1e:02:90:a2:f1:c1:93:6a:e2:51:
d2:ee:f1:d4:e5:50:42:6a:29:bf:af:a5:95:ee:4d:e4:2c:f2:
52:03:1f:99:70:4a:6e:70:92:09:ab:8f:61:02:54:cf:49:da:
00:27:34:ca:50:f7:d3:e3:bf:92:6e:3d:8e:51:ff:2e:ed:1f:
3b:68:68:de:38:78:a7:5c:88:73:12:4e:81:30:8b:0c:73:f9:
4e:c4:4c:dc:75:ee:9e:ec:46:2a:6f:0c:c4:e1:00:eb:25:c7:
dd:c7:fb:29:df:51:15:a4:75:d6:72:79:77:f1:76:90:aa:43:
fa:6e:8d:6f:9c:e6:96:a5:eb:23:8d:4d:ca:01:f4:d8:df:78:
d1:db:5f:75:f6:3b:19:ec:5f:56:9a:35:fc:de:37:ec:83:2d:
f7:25:df:d1:11:29:06:7c:72:88:91:cb:51:0d:87:28:33:8e:
38:87:2d:ef:4a:5a:ce:18:3a:dc:3c:4c:7f:5a:41:00:51:b9:
3b:75:a6:cb:bc:47:8c:ba:b7:e6:24:9f:8e:e1:58:89:53:d0:
9f:57:51:63:c8:87:3c:f7:9d:09:d0:f4:c7:30:c8:5a:60:e2:
00:9d:af:00:6c:7f:bb:4d:18:2d:70:a5:f1:49:6c:d8:b9:88:
37:04:1e:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECJA/H66J/SRPJ4dHgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMDEyMDAwMFoXDTIzMDIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
NTFjOWQ5YTUtNjk1Yi00NGNhLTkyYTItMmNmM2ZmZjQ0ZmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGJJ70E4HrN6bgoSpJMuBQf718bJiCPt41FE
hrW996Bcp+irNRa10RIOulMJc+sKNBIyEPrjBfmTOHFGciIlNHmhIT4/sJxzqS7C
IVhPZZrJV2Kdky9Xgk8xE+vnXiLhDFFZA6s9VwVasiCuDd+2VzYlMa7BYFu6lH8V
Ip2wjDGSROyZBtoSZqmoPjipP6qAQV17RRtQxk//Tu0rZR/QML5XSHz8EOeVKD3R
qDciFbhBtKEmyLCW3gotIp5Ltso3EauKe6QvD2w5gL1AjDSZeiwgCyW/2cHWFTcp
ME+0DQFg/xf+KhE+mSgmETEDHVFltcmGfVKmZpSheXk4ToW8jwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHKbhv3hP5g6PmR63TAqitL5ikfmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2FlOTQ5ZmItMWUwYS0z
OThmLWI4MjktNmJhNmIxYTAzYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOJ0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAeeY5hVtzdvIeApCi8cGTauJR0u7x1OVQQmopv6+lle5N5CzyUgMfmXBK
bnCSCauPYQJUz0naACc0ylD30+O/km49jlH/Lu0fO2ho3jh4p1yIcxJOgTCLDHP5
TsRM3HXunuxGKm8MxOEA6yXH3cf7Kd9RFaR11nJ5d/F2kKpD+m6Nb5zmlqXrI41N
ygH02N940dtfdfY7GexfVpo1/N437IMt9yXf0REpBnxyiJHLUQ2HKDOOOIct70pa
zhg63DxMf1pBAFG5O3Wmy7xHjLq35iSfjuFYiVPQn1dRY8iHPPedCdD0xzDIWmDi
AJ2vAGx/u00YLXCl8Uls2LmINwQeUw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:02:43 2025 by rpki-client