Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef1cba6c-50c4-3539-95e8-068df3a8b214.roa
File: ef1cba6c-50c4-3539-95e8-068df3a8b214.roa (raw, json)
Hash identifier: YMQM586vDR0BLTHhS8wELUFBP1L50RgwG/a4aRgMHeE=
Subject key identifier: 94:57:16:9D:E0:0D:A8:7E:ED:E3:77:7F:41:46:73:39:1B:32:2F:78
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584019B1B735E17446541E7E7F00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef1cba6c-50c4-3539-95e8-068df3a8b214.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 57.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:b1:b7:35:e1:74:46:54:1e:7e:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=38f83e67-4923-4158-8d03-331dfd560bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:10:6e:35:c4:2a:a7:2e:88:87:d3:0d:6b:
8a:88:2b:c1:0b:62:b6:ab:8a:b4:c9:32:bb:54:2a:
75:a2:b5:24:d0:18:74:1f:04:5d:50:d2:f7:a4:dc:
cf:45:1e:6f:f8:31:85:98:62:9e:5d:6f:b2:a1:93:
68:8b:a5:6d:c1:c2:2c:57:0f:13:93:69:ce:af:cf:
b0:d4:1a:51:41:d8:c7:9d:11:a2:97:b2:07:0f:50:
d0:70:e7:4b:ad:51:1d:50:db:c9:53:cb:aa:60:10:
5a:3c:ec:b6:d1:5e:d3:60:63:9f:13:13:7d:f8:91:
cd:3c:90:ea:f3:d4:54:c4:2e:ed:6b:96:84:9e:0d:
36:fb:a8:2f:38:ba:01:55:77:1d:2c:fa:18:6a:0f:
37:4e:22:9c:a8:d2:39:ae:6e:99:e6:2a:d3:cf:9a:
42:0f:27:4f:09:d7:fb:73:25:7a:71:ff:b2:55:bc:
9f:be:35:7d:3e:fd:7b:0b:e4:2e:ab:b5:78:52:f4:
27:73:bf:b8:89:a5:53:83:81:94:49:c6:23:ca:bd:
ac:46:a9:75:f2:1c:fd:b5:d4:54:8c:a0:99:1f:12:
ec:91:d7:01:63:34:48:9a:75:82:14:34:be:2b:e6:
58:84:bb:38:e5:9d:63:80:f7:8d:2a:db:04:75:50:
a9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:16:9D:E0:0D:A8:7E:ED:E3:77:7F:41:46:73:39:1B:32:2F:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef1cba6c-50c4-3539-95e8-068df3a8b214.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
57.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:b6:a3:57:a5:1f:f9:20:ec:18:30:2c:48:86:42:4f:b1:ce:
60:01:aa:b3:14:df:87:3c:39:4c:1a:fe:05:1e:dd:24:62:17:
e5:71:62:d6:c6:31:0d:fe:07:26:0e:41:6b:52:13:62:b1:44:
24:15:aa:dd:c3:32:17:be:2f:8c:3c:c2:13:b9:8b:59:29:84:
67:1a:59:95:46:09:4b:f6:31:79:f0:8f:9e:e6:3c:ef:d3:1d:
e2:72:9d:63:16:12:ab:b7:45:32:48:06:9f:90:65:01:eb:fd:
86:88:04:32:1a:23:81:c1:a3:13:73:0d:2a:21:23:4d:4b:da:
cd:50:a7:5b:96:3b:ba:1f:db:75:87:b4:10:56:69:0e:c2:74:
bb:ae:57:a8:66:64:39:49:54:7e:a6:a4:26:b4:53:3c:90:3d:
e4:0b:20:47:02:45:a0:4f:df:ad:73:14:dd:59:f8:12:f6:4e:
f4:8d:97:aa:10:eb:8b:ad:65:e8:cc:b7:bd:94:e2:f4:c2:67:
14:65:cb:45:78:5e:00:98:2e:c7:e4:9a:ed:60:ce:24:f8:66:
04:b1:9d:13:7c:a6:44:04:29:24:85:0e:a4:52:c1:60:98:21:
7a:1e:4c:7e:6b:9c:e7:d4:77:3b:c1:c8:45:52:1f:53:54:2a:
ff:42:93:95
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAZsbc14XRGVB5+fwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMTEyMDAwMFoXDTIzMDEwNjA1MDAwMFowLzEtMCsGA1UEAxMk
MzhmODNlNjctNDkyMy00MTU4LThkMDMtMzMxZGZkNTYwYmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvQQbjXEKqcuiIfTDWuKiCvBC2K2q4q0yTK7
VCp1orUk0Bh0HwRdUNL3pNzPRR5v+DGFmGKeXW+yoZNoi6VtwcIsVw8Tk2nOr8+w
1BpRQdjHnRGil7IHD1DQcOdLrVEdUNvJU8uqYBBaPOy20V7TYGOfExN9+JHNPJDq
89RUxC7ta5aEng02+6gvOLoBVXcdLPoYag83TiKcqNI5rm6Z5irTz5pCDydPCdf7
cyV6cf+yVbyfvjV9Pv17C+Quq7V4UvQnc7+4iaVTg4GUScYjyr2sRql18hz9tdRU
jKCZHxLskdcBYzRImnWCFDS+K+ZYhLs45Z1jgPeNKtsEdVCpvwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJRXFp3gDah+7eN3f0FGczkbMi94MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWYxY2JhNmMtNTBjNC0z
NTM5LTk1ZTgtMDY4ZGYzYThiMjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOcwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYbajV6Uf+SDsGDAsSIZCT7HOYAGqsxTfhzw5TBr+BR7dJGIX5XFi1sYx
Df4HJg5Ba1ITYrFEJBWq3cMyF74vjDzCE7mLWSmEZxpZlUYJS/YxefCPnuY879Md
4nKdYxYSq7dFMkgGn5BlAev9hogEMhojgcGjE3MNKiEjTUvazVCnW5Y7uh/bdYe0
EFZpDsJ0u65XqGZkOUlUfqakJrRTPJA95AsgRwJFoE/frXMU3Vn4EvZO9I2XqhDr
i61l6My3vZTi9MJnFGXLRXheAJgux+Sa7WDOJPhmBLGdE3ymRAQpJIUOpFLBYJgh
eh5Mfmuc59R3O8HIRVIfU1Qq/0KTlQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:35 2025 by rpki-client