Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2baeb09-a280-3426-993e-712450d43b20.roa
File: d2baeb09-a280-3426-993e-712450d43b20.roa (raw, json)
Hash identifier: fhmE3rCIxbYW5Ro0rEMgXG4IDAq4e0ysif9ulCxXS2s=
Subject key identifier: 65:6B:36:FA:33:99:87:EE:24:C4:E5:1B:12:7F:EC:77:4C:A6:78:7A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405F9AD8C9C5A288A049854280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2baeb09-a280-3426-993e-712450d43b20.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 54.113.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:9a:d8:c9:c5:a2:88:a0:49:85:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=2f9378d4-f036-4f72-a8e7-049d9f9dc8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:70:30:9c:b6:ae:aa:a4:db:46:f0:9e:f5:a2:
aa:a6:58:87:9f:b8:0b:97:be:78:6d:17:37:74:cf:
7c:fa:40:21:50:1e:db:a8:bb:1c:0a:bd:a5:8e:49:
c1:8b:e0:64:5c:f2:d6:01:f8:97:4b:a2:03:9a:d9:
c0:bd:3c:82:c5:c5:cc:bb:06:cd:37:54:51:57:23:
f4:3a:3a:c3:89:59:04:8d:6f:e7:4a:2f:32:1f:f0:
c3:47:55:53:63:c9:1a:9f:e4:e5:9f:7b:25:42:93:
9d:ef:2d:3c:91:ec:59:3d:cb:59:01:67:f7:bf:c2:
98:a1:ac:5b:48:d5:51:c3:84:68:76:2f:d8:cc:f1:
4e:f2:82:98:da:f4:40:19:b6:ba:37:3c:0d:a4:1c:
0b:35:67:d4:59:c3:b4:cf:d3:81:2b:a7:0a:11:80:
fc:8b:8a:da:d9:c0:8a:45:63:49:d1:70:54:ef:78:
1f:a6:90:ed:42:a2:57:c6:71:52:bb:c9:c3:6b:a7:
66:e0:6a:96:b3:04:f2:69:36:e5:16:96:50:4b:60:
c5:98:d5:83:c1:0d:10:9f:69:1d:db:39:50:7e:ee:
13:4c:77:90:db:d5:ca:28:a3:7f:c5:fe:ad:ba:f6:
d5:82:3e:fe:2e:cc:0c:a9:e3:2f:9c:0d:db:9b:6f:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6B:36:FA:33:99:87:EE:24:C4:E5:1B:12:7F:EC:77:4C:A6:78:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d2baeb09-a280-3426-993e-712450d43b20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.113.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:15:3f:df:81:ea:73:1d:f4:36:a7:56:13:2f:4d:ad:84:0e:
56:a8:7e:9f:c1:5b:16:9a:9d:a6:58:1b:0d:29:57:62:91:be:
84:cc:8c:a2:22:3e:dc:62:e1:05:11:60:da:f5:2b:76:e5:6c:
9e:64:88:85:bd:5e:23:cd:03:28:02:09:2c:5d:94:37:d8:6d:
ce:66:af:a2:10:64:d3:9b:24:05:35:cf:99:49:9c:59:97:4a:
80:d6:58:c2:d4:78:f3:15:07:d4:ca:e8:f5:ee:88:71:33:60:
4a:c2:2f:36:a1:2b:82:b2:05:be:c1:7d:3e:05:9d:98:55:36:
29:0c:81:be:b0:4f:69:ab:65:9c:64:a5:77:ec:cc:a6:68:62:
be:1a:49:5d:5e:d2:0a:c8:e7:23:e6:fa:e4:e4:92:6c:4b:87:
36:24:90:7b:d7:d9:32:3f:3f:38:f5:ad:2d:f0:9a:46:cc:c7:
f7:6a:ba:de:29:07:f7:3e:fd:f4:ce:08:58:32:52:2c:0e:b1:
3a:bd:4f:a2:e9:4d:c0:e8:f7:2b:6a:43:89:ab:67:05:da:f0:
33:2e:a0:ad:9b:55:2a:a9:ea:66:a0:e9:48:42:03:ab:86:e8:
15:aa:5a:10:ce:33:50:41:e7:cc:ae:ed:95:a8:d0:31:08:45:
f1:71:eb:55
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBfmtjJxaKIoEmFQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyNjEyMDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
MmY5Mzc4ZDQtZjAzNi00ZjcyLWE4ZTctMDQ5ZDlmOWRjOGVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnAwnLauqqTbRvCe9aKqpliHn7gLl754bRc3
dM98+kAhUB7bqLscCr2ljknBi+BkXPLWAfiXS6IDmtnAvTyCxcXMuwbNN1RRVyP0
OjrDiVkEjW/nSi8yH/DDR1VTY8kan+Tln3slQpOd7y08kexZPctZAWf3v8KYoaxb
SNVRw4Rodi/YzPFO8oKY2vRAGba6NzwNpBwLNWfUWcO0z9OBK6cKEYD8i4ra2cCK
RWNJ0XBU73gfppDtQqJXxnFSu8nDa6dm4GqWswTyaTblFpZQS2DFmNWDwQ0Qn2kd
2zlQfu4TTHeQ29XKKKN/xf6tuvbVgj7+LswMqeMvnA3bm28DuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGVrNvozmYfuJMTlGxJ/7HdMpnh6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDJiYWViMDktYTI4MC0z
NDI2LTk5M2UtNzEyNDUwZDQzYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANnEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAiRU/34Hqcx30NqdWEy9NrYQOVqh+n8FbFpqdplgbDSlXYpG+hMyMoiI+
3GLhBRFg2vUrduVsnmSIhb1eI80DKAIJLF2UN9htzmavohBk05skBTXPmUmcWZdK
gNZYwtR48xUH1Mro9e6IcTNgSsIvNqErgrIFvsF9PgWdmFU2KQyBvrBPaatlnGSl
d+zMpmhivhpJXV7SCsjnI+b65OSSbEuHNiSQe9fZMj8/OPWtLfCaRszH92q63ikH
9z799M4IWDJSLA6xOr1PoulNwOj3K2pDiatnBdrwMy6grZtVKqnqZqDpSEIDq4bo
FapaEM4zUEHnzK7tlajQMQhF8XHrVQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:09 2025 by rpki-client