Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d68d631b-f72a-3005-a771-2170d8d73657.roa
File: d68d631b-f72a-3005-a771-2170d8d73657.roa (raw, json)
Hash identifier: l3FXROCzjWvOrw971+d5GQrWMhPQAt9+G2zHoKl1k34=
Subject key identifier: CE:B0:64:D2:41:9F:6E:B4:D1:61:B7:06:A7:70:CB:E8:24:38:DA:A9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE54E9996679718C69E4CC800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d68d631b-f72a-3005-a771-2170d8d73657.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 158.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:4e:99:96:67:97:18:c6:9e:4c:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=1ba2f6ba-7474-4878-ab6c-4cc573a2e91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:77:53:fd:09:43:f9:fc:9d:e2:16:1b:a0:7e:
9f:3d:60:6b:7b:8a:49:7a:0a:fa:32:0d:69:00:29:
36:37:e7:f7:e5:ea:9e:67:56:9f:a1:21:8b:46:81:
94:02:e9:fe:90:a3:04:cc:bb:2d:4b:2f:12:29:4a:
8a:7c:e6:27:a7:23:b1:75:2c:a3:d7:4b:f5:60:f6:
c2:51:0e:59:21:06:53:98:bb:02:42:3a:5e:af:15:
af:70:70:42:5c:cc:66:01:86:db:8a:ed:54:91:f1:
47:30:d7:37:93:52:8e:90:2f:06:d4:03:f4:89:c7:
4b:a3:fb:f2:9b:c3:dd:09:71:98:5d:01:06:23:f6:
f8:e3:00:45:cc:2b:f1:26:af:d4:74:7f:a2:1d:1a:
56:db:eb:98:df:89:ca:73:12:7c:6a:82:d9:0b:31:
c6:cc:e7:37:9e:fd:fb:d9:0a:ed:c9:61:16:b0:e6:
22:4f:ce:d8:61:e2:5b:87:e6:4c:60:2a:b9:0f:fa:
7e:0b:c7:19:29:ea:0c:1a:f8:8b:34:69:ad:43:1c:
90:89:03:37:b2:26:dd:57:5c:ed:c1:ea:9a:85:8f:
ec:ed:3b:5b:0b:d9:73:20:85:7c:b5:b7:cd:a3:dd:
e6:73:33:6d:65:9c:c6:c5:e3:e6:8e:ac:de:2e:ff:
95:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:64:D2:41:9F:6E:B4:D1:61:B7:06:A7:70:CB:E8:24:38:DA:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d68d631b-f72a-3005-a771-2170d8d73657.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
158.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:08:42:70:a2:0f:b8:3d:11:ba:cc:0b:de:d3:1a:11:e6:e2:
86:a7:32:92:17:1d:b2:ad:b8:ac:d7:9d:b7:db:47:8c:65:08:
09:18:29:eb:af:12:3a:cc:e7:50:c9:5d:bc:01:16:72:23:42:
54:7e:8d:4b:ea:ce:91:7c:bb:d0:f5:0c:e1:68:96:89:3d:27:
6e:c0:1c:c9:ca:72:0f:77:53:e2:96:4e:94:e9:5c:9e:04:0c:
e3:6b:61:70:d9:a7:32:3c:81:45:55:a0:93:78:ab:0a:fa:c4:
09:ad:a7:43:d1:7b:21:66:f6:b7:45:f5:bd:f9:52:42:18:5f:
21:7a:96:ca:00:e0:93:3a:ff:2e:4c:4c:4e:06:f6:99:ac:96:
20:5f:e3:cf:5d:a8:0d:04:ca:c6:3f:5f:dd:14:a0:14:5d:34:
86:73:fd:2a:7d:2a:10:26:76:fa:41:f5:8e:9f:b4:21:0e:61:
cc:39:8c:6d:32:07:c8:85:2f:a2:68:9f:7f:61:0a:64:4e:68:
ce:a1:ba:e6:6c:92:eb:28:c5:53:57:7f:3f:9e:88:0b:93:98:
1f:75:4c:0c:59:2f:35:e7:2c:d6:83:c1:b7:42:92:87:c8:33:
25:f5:60:2f:1a:1b:db:85:aa:15:5c:fc:cf:47:bb:82:a0:d9:
bf:1c:35:0e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzlTpmWZ5cYxp5MyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIxMTA1MDAwMFoXDTIyMDMxODA0MDAwMFowLzEtMCsGA1UEAxMk
MWJhMmY2YmEtNzQ3NC00ODc4LWFiNmMtNGNjNTczYTJlOTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHdT/QlD+fyd4hYboH6fPWBre4pJegr6Mg1p
ACk2N+f35eqeZ1afoSGLRoGUAun+kKMEzLstSy8SKUqKfOYnpyOxdSyj10v1YPbC
UQ5ZIQZTmLsCQjperxWvcHBCXMxmAYbbiu1UkfFHMNc3k1KOkC8G1AP0icdLo/vy
m8PdCXGYXQEGI/b44wBFzCvxJq/UdH+iHRpW2+uY34nKcxJ8aoLZCzHGzOc3nv37
2QrtyWEWsOYiT87YYeJbh+ZMYCq5D/p+C8cZKeoMGviLNGmtQxyQiQM3sibdV1zt
weqahY/s7TtbC9lzIIV8tbfNo93mczNtZZzGxePmjqzeLv+VHwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM6wZNJBn2600WG3Bqdwy+gkONqpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDY4ZDYzMWItZjcyYS0z
MDA1LWE3NzEtMjE3MGQ4ZDczNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnjgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoAhCcKIPuD0RuswL3tMaEebihqcykhcdsq24rNedt9tHjGUICRgp668S
OsznUMldvAEWciNCVH6NS+rOkXy70PUM4WiWiT0nbsAcycpyD3dT4pZOlOlcngQM
42thcNmnMjyBRVWgk3irCvrECa2nQ9F7IWb2t0X1vflSQhhfIXqWygDgkzr/LkxM
Tgb2mayWIF/jz12oDQTKxj9f3RSgFF00hnP9Kn0qECZ2+kH1jp+0IQ5hzDmMbTIH
yIUvomiff2EKZE5ozqG65myS6yjFU1d/P56IC5OYH3VMDFkvNecs1oPBt0KSh8gz
JfVgLxob24WqFVz8z0e7gqDZvxw1Dg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:13:21 2025 by rpki-client