Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df8d5171-9522-35ee-ba1e-32e98e5247f0.roa
File: df8d5171-9522-35ee-ba1e-32e98e5247f0.roa (raw, json)
Hash identifier: snzgNXK44xw/lYvx0eKvq8i8gpwgO18OxMChQyXipM0=
Subject key identifier: FA:29:DD:D4:95:E3:DA:0B:6C:6F:FC:EF:38:8E:30:84:53:F1:BE:DB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3423EEACC2B4C5C84627B219
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df8d5171-9522-35ee-ba1e-32e98e5247f0.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 54.47.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:34:23:ee:ac:c2:b4:c5:c8:46:27:b2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=ac2188b3-24a0-4b67-ad68-ea5037546629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:34:27:74:aa:2e:1d:c6:3a:64:18:7a:6d:
99:ae:17:0a:71:30:c0:57:81:9d:f2:9b:a7:05:e7:
48:f0:21:53:f3:cf:1d:7e:01:d0:8d:88:6f:c8:3d:
01:58:2a:4a:3e:83:c2:96:ad:f2:d8:26:8d:4b:4e:
a5:2f:b4:43:ff:15:d3:39:4f:56:0c:e6:45:46:ad:
2b:6d:ca:f6:d4:2c:bb:61:e7:90:94:61:d6:93:81:
3b:30:9b:f3:ce:f5:47:b0:b6:01:3f:60:96:ea:f4:
61:24:bf:96:4d:1d:9a:1c:db:c5:2d:ab:52:30:55:
2d:2b:c3:7b:e5:d7:45:eb:86:30:b6:0b:11:c0:0d:
ca:a3:d1:d0:4b:4c:e9:e6:80:cd:13:2c:2a:b1:42:
66:bc:72:fd:33:9b:94:ef:fc:4b:ee:47:9b:01:c8:
c5:d8:36:0e:4a:eb:e4:44:d1:ab:5e:b6:04:89:92:
2a:0c:5f:34:63:fd:8f:e1:b2:00:76:03:66:82:15:
cb:35:27:78:87:f9:03:96:12:be:93:fc:fd:f1:92:
a3:e0:0e:03:ce:a4:48:b7:68:73:9a:c3:6c:74:f2:
9d:57:1f:54:80:cc:0c:84:3f:cb:6c:03:61:51:dc:
c2:2a:83:56:57:39:09:c7:13:db:d7:2d:f7:5a:55:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:29:DD:D4:95:E3:DA:0B:6C:6F:FC:EF:38:8E:30:84:53:F1:BE:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df8d5171-9522-35ee-ba1e-32e98e5247f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.47.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:12:c3:e8:19:7b:3d:01:9f:d2:91:47:3b:4d:69:cd:b0:ca:
e4:ec:ae:a6:4c:55:85:1d:55:0e:b6:59:67:f5:c0:7b:e4:7c:
22:2d:b9:46:8b:93:78:e3:b5:c0:a1:6a:cc:ea:d1:83:bb:5b:
d1:4f:d7:fd:79:21:4c:6d:bb:ef:37:3c:78:6c:09:04:e4:fa:
5f:4f:13:96:91:c7:d5:c2:28:01:9b:f9:94:d6:78:cc:a5:29:
ef:92:f8:fd:68:6f:21:e0:27:da:68:a6:aa:e6:a0:c9:40:76:
15:00:6b:39:09:96:7a:59:47:33:fb:85:41:55:b3:a3:5e:b8:
8f:4b:f0:1f:48:3b:9f:55:8f:84:da:53:d5:86:89:36:46:62:
a2:e5:0b:9f:b9:6a:56:72:90:ca:b5:13:de:ab:a2:51:83:7d:
52:8e:56:fb:ea:83:f4:3d:7c:c0:07:5b:6d:e5:3f:69:14:3b:
24:aa:ef:8f:36:a8:01:89:d7:e0:62:da:41:a2:13:fb:ca:1c:
96:b4:1b:4f:93:6e:db:03:23:50:92:6a:d9:c2:46:67:87:00:
e0:93:e2:38:ea:fc:ac:ad:75:75:e0:95:ac:56:9d:89:8f:37:
8e:ac:e9:32:b2:22:c9:07:bd:ff:53:08:ca:c3:c5:aa:c1:57:
d1:d2:b4:ef
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD00I+6swrTFyEYnshkwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
YWMyMTg4YjMtMjRhMC00YjY3LWFkNjgtZWE1MDM3NTQ2NjI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxw0J3SqLh3GOmQYem2ZrhcKcTDAV4Gd8pun
BedI8CFT888dfgHQjYhvyD0BWCpKPoPClq3y2CaNS06lL7RD/xXTOU9WDOZFRq0r
bcr21Cy7YeeQlGHWk4E7MJvzzvVHsLYBP2CW6vRhJL+WTR2aHNvFLatSMFUtK8N7
5ddF64YwtgsRwA3Ko9HQS0zp5oDNEywqsUJmvHL9M5uU7/xL7kebAcjF2DYOSuvk
RNGrXrYEiZIqDF80Y/2P4bIAdgNmghXLNSd4h/kDlhK+k/z98ZKj4A4DzqRIt2hz
msNsdPKdVx9UgMwMhD/LbANhUdzCKoNWVzkJxxPb1y33WlWiFwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPop3dSV49oLbG/87ziOMIRT8b7bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGY4ZDUxNzEtOTUyMi0z
NWVlLWJhMWUtMzJlOThlNTI0N2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANi8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWBLD6Bl7PQGf0pFHO01pzbDK5OyupkxVhR1VDrZZZ/XAe+R8Ii25RouT
eOO1wKFqzOrRg7tb0U/X/XkhTG277zc8eGwJBOT6X08TlpHH1cIoAZv5lNZ4zKUp
75L4/WhvIeAn2mimquagyUB2FQBrOQmWellHM/uFQVWzo164j0vwH0g7n1WPhNpT
1YaJNkZiouULn7lqVnKQyrUT3quiUYN9Uo5W++qD9D18wAdbbeU/aRQ7JKrvjzao
AYnX4GLaQaIT+8oclrQbT5Nu2wMjUJJq2cJGZ4cA4JPiOOr8rK11deCVrFadiY83
jqzpMrIiyQe9/1MIysPFqsFX0dK07w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:09 2025 by rpki-client