Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd3c1a44-9020-3217-b2f8-2e8edfc86017.roa
File: dd3c1a44-9020-3217-b2f8-2e8edfc86017.roa (raw, json)
Hash identifier: KauvMuWSNiCyA6+wcQ3MzwJlrlJrrg7+QVzC1McNBB8=
Subject key identifier: 7B:24:DA:38:38:05:C2:57:DD:6D:3B:E9:C1:28:3E:1D:23:BD:E2:0B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840388530D20C03985CE0630800
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd3c1a44-9020-3217-b2f8-2e8edfc86017.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.137.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:38:85:30:d2:0c:03:98:5c:e0:63:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=84e70bca-8090-46a1-9071-0769ad753d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:07:65:c9:b9:6a:29:01:01:7b:2c:0a:5c:
15:6b:93:30:80:bc:cd:da:ba:2e:6a:ff:80:5f:88:
2e:50:64:fc:f0:36:d0:9d:60:58:92:66:cc:67:70:
36:16:d0:d7:6c:ec:f9:03:b2:c6:49:51:c8:a6:a7:
35:bc:ec:20:c1:44:c2:0d:e9:1f:93:90:c5:3f:57:
ea:35:fb:04:42:db:87:58:d0:91:2a:0a:21:da:3b:
67:0b:cd:ea:95:90:f9:c1:85:ee:61:1b:5a:fb:13:
0c:e8:0a:c9:95:a2:d3:30:dd:d9:6a:b4:6e:f3:3c:
7d:7b:76:98:1c:cf:98:dd:5b:f1:ac:53:d3:97:25:
d2:fa:bd:51:38:50:e6:5a:b9:1e:da:22:42:65:47:
35:13:e0:f2:38:4e:a9:e9:28:9d:52:17:62:a6:2d:
c0:31:02:75:62:fa:4d:a8:d7:cd:a8:c5:dd:f0:06:
1d:48:c5:c8:90:1c:ef:eb:ad:57:5f:eb:01:70:d3:
97:fa:8e:df:95:f8:4e:1c:ef:98:8e:6e:3c:2b:1c:
01:d1:df:61:97:ad:1c:87:2a:0b:83:26:db:be:4c:
6f:e6:b2:5a:89:5b:b3:6b:08:df:80:68:68:89:3c:
39:da:ce:f9:e1:6c:5e:72:58:f5:87:8c:d1:74:4e:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:24:DA:38:38:05:C2:57:DD:6D:3B:E9:C1:28:3E:1D:23:BD:E2:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd3c1a44-9020-3217-b2f8-2e8edfc86017.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.137.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:cf:78:f3:93:28:64:39:51:1c:c7:65:4a:9a:ab:f7:40:06:
97:15:17:52:74:20:2f:4f:3a:f2:ff:d7:ff:d0:e5:fd:78:3e:
13:eb:f7:84:b1:31:14:2b:87:d2:17:92:ca:58:bf:ef:1d:da:
17:07:65:b3:77:46:10:79:c2:5f:cb:ae:41:19:ce:31:e8:06:
33:f1:1b:e6:eb:1e:ac:ca:c6:6d:e1:91:f6:43:a5:b9:1e:6f:
bf:24:d0:35:ed:f5:62:93:36:fe:e2:0d:68:61:7f:62:42:4e:
43:5e:ee:06:5d:2a:17:9c:dc:c3:2b:42:79:a6:73:32:b0:69:
d2:b2:d1:41:2a:6d:df:cc:e1:b0:ad:5b:ea:94:f0:c7:56:44:
27:0e:41:2d:1e:48:29:e6:fc:69:6d:46:15:68:fe:73:d2:c4:
59:26:e9:c5:fd:79:6f:ff:54:46:28:18:f9:b7:32:3d:a8:e7:
0d:e2:10:4b:15:53:45:a1:88:8e:27:94:a5:0a:1f:33:d1:e5:
b2:22:51:33:97:46:aa:bb:d6:96:cb:2b:df:4f:cd:07:83:4d:
7e:83:3a:f7:bb:85:92:4f:f5:f2:17:e2:f7:48:40:68:43:62:
f3:52:1e:9f:5f:8d:06:d9:e3:3f:f6:87:48:0b:06:a5:4c:01:
c8:6c:b4:e8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA4hTDSDAOYXOBjCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMjEyMDAwMFoXDTIzMDExNzA1MDAwMFowLzEtMCsGA1UEAxMk
ODRlNzBiY2EtODA5MC00NmExLTkwNzEtMDc2OWFkNzUzZDc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2kHZcm5aikBAXssClwVa5MwgLzN2rouav+A
X4guUGT88DbQnWBYkmbMZ3A2FtDXbOz5A7LGSVHIpqc1vOwgwUTCDekfk5DFP1fq
NfsEQtuHWNCRKgoh2jtnC83qlZD5wYXuYRta+xMM6ArJlaLTMN3ZarRu8zx9e3aY
HM+Y3VvxrFPTlyXS+r1ROFDmWrke2iJCZUc1E+DyOE6p6SidUhdipi3AMQJ1YvpN
qNfNqMXd8AYdSMXIkBzv661XX+sBcNOX+o7flfhOHO+Yjm48KxwB0d9hl60chyoL
gybbvkxv5rJaiVuzawjfgGhoiTw52s754Wxeclj1h4zRdE7F1QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHsk2jg4BcJX3W076cEoPh0jveILMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGQzYzFhNDQtOTAyMC0z
MjE3LWIyZjgtMmU4ZWRmYzg2MDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANokwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGs9485MoZDlRHMdlSpqr90AGlxUXUnQgL0868v/X/9Dl/Xg+E+v3hLEx
FCuH0heSyli/7x3aFwdls3dGEHnCX8uuQRnOMegGM/Eb5userMrGbeGR9kOluR5v
vyTQNe31YpM2/uINaGF/YkJOQ17uBl0qF5zcwytCeaZzMrBp0rLRQSpt38zhsK1b
6pTwx1ZEJw5BLR5IKeb8aW1GFWj+c9LEWSbpxf15b/9URigY+bcyPajnDeIQSxVT
RaGIjieUpQofM9HlsiJRM5dGqrvWlssr30/NB4NNfoM697uFkk/18hfi90hAaENi
81Ien1+NBtnjP/aHSAsGpUwByGy06A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:42 2025 by rpki-client