Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf41e932-4a36-3807-9254-a0e9a5f5fe73.roa
File: cf41e932-4a36-3807-9254-a0e9a5f5fe73.roa (raw, json)
Hash identifier: tTE8HyrhJ89dYPa+DpC1ZWkucxoPD/AcXF4ZWu0jZk4=
Subject key identifier: 5C:ED:05:26:58:CE:33:F2:9C:B4:E1:18:50:ED:8B:C1:55:6C:1D:AF
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDC03A4CB526E9D7BAAD60180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf41e932-4a36-3807-9254-a0e9a5f5fe73.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 56.44.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:dc:03:a4:cb:52:6e:9d:7b:aa:d6:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=427436ed-270d-4f8d-8f9e-ab46079f2cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b0:c7:64:1f:bb:93:7c:85:31:f7:26:0f:ed:
49:2a:da:2d:ec:e0:37:cc:19:69:51:9b:c5:95:2c:
ad:24:69:36:94:ef:9b:e8:b7:bd:3f:e2:de:8a:97:
db:54:41:5e:1a:c7:d3:67:da:2d:71:b6:4c:1a:28:
34:12:86:66:55:ad:b2:89:40:f6:48:a5:3f:f3:c8:
81:05:3a:34:a0:8e:b9:52:b8:6c:ca:4a:38:c6:73:
da:e5:ba:a4:bd:bd:66:6b:5e:0b:18:e7:41:06:02:
b0:7b:cb:55:6f:c2:eb:2d:0e:1d:7a:ad:4b:80:d0:
4a:c8:c1:9e:79:3e:e9:85:79:d7:e9:e8:d9:b6:f6:
8a:e6:b3:f5:46:ae:ff:b0:12:ec:6d:0b:23:b0:6e:
ee:4f:e9:e5:d8:e2:00:75:86:69:4f:fe:32:c9:06:
57:03:78:b8:6f:09:10:00:30:62:81:48:4f:d0:84:
73:33:71:b5:21:6a:e1:81:c0:3e:0f:a4:9d:43:56:
aa:b7:59:9e:0d:80:9f:c1:d0:82:55:66:04:c0:bf:
56:bf:74:a9:1a:5a:15:fc:fe:67:96:d4:90:83:4f:
77:ec:c5:29:37:cd:55:33:f8:c2:fa:38:56:4e:c2:
22:59:32:01:0e:22:60:76:0b:d7:fb:14:e6:7e:02:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:ED:05:26:58:CE:33:F2:9C:B4:E1:18:50:ED:8B:C1:55:6C:1D:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf41e932-4a36-3807-9254-a0e9a5f5fe73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.44.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:f9:1e:db:0e:86:0b:bb:02:5b:91:58:cc:4b:08:2e:13:5e:
0e:f7:d5:7a:31:12:61:d1:fd:d9:72:ee:41:25:7e:e4:ea:08:
ce:41:d8:24:5a:bd:0b:cd:0d:ab:f9:34:f3:e5:0a:b5:e2:8c:
9b:4d:09:f4:e0:16:95:d5:81:11:14:cc:2c:cc:55:54:0b:e4:
48:be:9b:ae:53:90:8e:80:e3:a6:1d:86:18:18:c1:45:7e:95:
a3:53:b7:bf:bd:41:61:72:15:0b:42:39:0c:09:38:a5:7a:76:
51:18:59:36:2d:0e:20:9f:b9:b3:f6:f0:15:61:58:ac:07:b8:
c8:08:f1:92:1a:16:49:f0:3d:15:1f:4b:d8:ee:13:19:ab:b5:
2a:f0:18:d7:01:78:45:26:fc:e2:d3:a2:2e:64:39:7a:35:19:
36:83:d2:59:bc:05:57:ba:bf:f9:9b:be:a8:6a:31:03:82:15:
50:77:fa:5a:7f:1c:4f:dd:e6:0f:8d:a6:88:aa:a8:00:21:08:
7b:10:8e:5c:41:87:ab:94:13:e6:ba:d8:e3:ea:d4:01:ae:1e:
96:fb:85:17:37:22:08:ab:85:26:b0:bd:bd:23:2e:f6:6c:cd:
ee:bd:a6:fc:04:04:97:2c:01:dd:cb:d7:8b:79:b4:d4:5a:8f:
0e:b9:4b:74
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/cA6TLUm6de6rWAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwOTEyMDAwMFoXDTIyMTIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
NDI3NDM2ZWQtMjcwZC00ZjhkLThmOWUtYWI0NjA3OWYyY2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrDHZB+7k3yFMfcmD+1JKtot7OA3zBlpUZvF
lSytJGk2lO+b6Le9P+LeipfbVEFeGsfTZ9otcbZMGig0EoZmVa2yiUD2SKU/88iB
BTo0oI65Urhsyko4xnPa5bqkvb1ma14LGOdBBgKwe8tVb8LrLQ4deq1LgNBKyMGe
eT7phXnX6ejZtvaK5rP1Rq7/sBLsbQsjsG7uT+nl2OIAdYZpT/4yyQZXA3i4bwkQ
ADBigUhP0IRzM3G1IWrhgcA+D6SdQ1aqt1meDYCfwdCCVWYEwL9Wv3SpGloV/P5n
ltSQg0937MUpN81VM/jC+jhWTsIiWTIBDiJgdgvX+xTmfgIjNQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFztBSZYzjPynLThGFDti8FVbB2vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2Y0MWU5MzItNGEzNi0z
ODA3LTkyNTQtYTBlOWE1ZjVmZTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOCwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAY/ke2w6GC7sCW5FYzEsILhNeDvfVejESYdH92XLuQSV+5OoIzkHYJFq9
C80Nq/k08+UKteKMm00J9OAWldWBERTMLMxVVAvkSL6brlOQjoDjph2GGBjBRX6V
o1O3v71BYXIVC0I5DAk4pXp2URhZNi0OIJ+5s/bwFWFYrAe4yAjxkhoWSfA9FR9L
2O4TGau1KvAY1wF4RSb84tOiLmQ5ejUZNoPSWbwFV7q/+Zu+qGoxA4IVUHf6Wn8c
T93mD42miKqoACEIexCOXEGHq5QT5rrY4+rUAa4elvuFFzciCKuFJrC9vSMu9mzN
7r2m/AQElywB3cvXi3m01FqPDrlLdA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:13 2025 by rpki-client