Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2a89030-5c99-395a-984e-1de55c4fcde2.roa
File: f2a89030-5c99-395a-984e-1de55c4fcde2.roa (raw, json)
Hash identifier: mtYjbzMWX+QUiJzsT7PRK2GdXw3BLGTnRJDb5oymxuI=
Subject key identifier: 44:A6:F1:31:42:D4:D1:1F:68:59:62:12:C7:F9:48:EF:A7:52:38:4E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F679EB54AA7CA01A0F7177100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2a89030-5c99-395a-984e-1de55c4fcde2.roa
Signing time: Wed 28 Sep 2022 17:57:08 +0000
ROA not before: Wed 28 Sep 2022 17:57:08 +0000
ROA not after: Thu 03 Nov 2022 04:00:00 +0000
asID: 8987
IP address blocks: 56.66.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:67:9e:b5:4a:a7:ca:01:a0:f7:17:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 28 17:57:08 2022 GMT
Not After : Nov 3 04:00:00 2022 GMT
Subject: CN=a0f0ea85-026d-4590-8b6d-664c85f555f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:01:a2:63:b8:f9:49:35:7d:0a:bf:92:58:
81:b0:5f:33:07:bb:d8:25:ee:ae:6e:7c:a9:79:45:
a1:06:d3:bf:93:d7:fe:0d:7d:ea:bf:7d:b1:bc:4b:
95:5c:a1:3b:e4:e7:fd:f8:ed:bc:f3:e9:7e:fb:16:
22:4c:32:5f:cc:8e:02:2b:03:c5:aa:d7:41:4c:27:
c2:5f:23:13:9f:1a:f4:18:38:2a:34:9e:ab:62:4f:
a5:77:89:5e:d7:35:7a:83:b7:8d:8b:92:2d:bc:58:
fc:fd:09:53:93:27:b4:04:8a:6c:01:f9:a2:5b:2a:
a7:0a:03:59:ca:29:fc:a6:fc:4e:1f:d7:45:90:de:
d1:b7:33:19:f5:a0:a3:2c:ca:73:9c:5f:ea:59:37:
a7:09:61:36:6b:cf:68:bf:39:d0:db:a7:35:51:e8:
23:50:f7:e6:86:66:43:df:49:e6:53:bd:10:5c:39:
51:ad:f6:61:2d:08:f8:d3:3a:a6:00:d2:90:82:52:
ff:e6:19:a7:55:43:38:69:fe:b9:9a:b6:ac:58:32:
d4:7b:5d:bd:2d:01:d5:ee:8c:7c:7b:c1:60:6e:76:
ed:f2:ab:52:a9:db:2a:24:4f:10:55:7e:1f:ea:ed:
46:e8:f0:12:ef:d3:22:da:e9:c7:6d:5a:89:2d:66:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A6:F1:31:42:D4:D1:1F:68:59:62:12:C7:F9:48:EF:A7:52:38:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f2a89030-5c99-395a-984e-1de55c4fcde2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.66.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:24:1e:37:e4:5d:68:69:95:d3:76:33:b3:c8:27:10:bd:4b:
3a:cd:21:63:9f:31:72:16:de:9e:af:12:d9:5f:d9:9c:a0:22:
1a:c8:5d:39:e8:66:f1:66:12:44:ac:41:9f:91:74:d1:d6:b6:
2c:66:6a:ad:f0:57:8e:37:2e:6a:48:0b:bb:ad:58:70:b9:35:
03:e1:1c:af:5b:63:5e:ea:30:16:c1:91:19:61:22:a0:27:57:
0f:9e:43:05:ac:c8:f0:2f:fb:63:da:ac:89:04:9b:49:7b:c3:
59:d2:48:4e:42:55:80:e3:5e:d2:1f:a7:1b:29:05:11:db:bb:
da:c3:be:6e:06:a1:d0:21:23:9c:a6:86:26:de:04:da:61:ff:
0a:c7:e9:b4:73:1a:b1:c8:39:ca:34:5d:e2:ea:92:a9:ea:f7:
b7:9d:20:44:d9:23:04:a0:4b:5d:7d:f5:51:fa:86:50:df:1c:
34:59:ec:b4:d3:3d:d8:51:a2:3a:65:82:8d:56:c1:c6:51:89:
df:74:6d:0e:61:4e:f6:fb:3b:11:2a:65:66:f9:06:31:a0:b0:
12:00:1a:e6:fc:ba:0d:6b:c8:eb:42:93:15:74:4b:f0:18:56:
91:3d:91:8e:c4:d3:e5:a9:99:51:46:20:b6:6b:ec:e3:b8:4c:
81:f3:37:1f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9nnrVKp8oBoPcXcQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyODE3NTcwOFoXDTIyMTEwMzA0MDAwMFowLzEtMCsGA1UEAxMk
YTBmMGVhODUtMDI2ZC00NTkwLThiNmQtNjY0Yzg1ZjU1NWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EUBomO4+Uk1fQq/kliBsF8zB7vYJe6ubnyp
eUWhBtO/k9f+DX3qv32xvEuVXKE75Of9+O288+l++xYiTDJfzI4CKwPFqtdBTCfC
XyMTnxr0GDgqNJ6rYk+ld4le1zV6g7eNi5ItvFj8/QlTkye0BIpsAfmiWyqnCgNZ
yin8pvxOH9dFkN7RtzMZ9aCjLMpznF/qWTenCWE2a89ovznQ26c1UegjUPfmhmZD
30nmU70QXDlRrfZhLQj40zqmANKQglL/5hmnVUM4af65mrasWDLUe129LQHV7ox8
e8Fgbnbt8qtSqdsqJE8QVX4f6u1G6PAS79Mi2unHbVqJLWYitwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFESm8TFC1NEfaFliEsf5SO+nUjhOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjJhODkwMzAtNWM5OS0z
OTVhLTk4NGUtMWRlNTVjNGZjZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOEIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAlSQeN+RdaGmV03Yzs8gnEL1LOs0hY58xchbenq8S2V/ZnKAiGshdOehm
8WYSRKxBn5F00da2LGZqrfBXjjcuakgLu61YcLk1A+Ecr1tjXuowFsGRGWEioCdX
D55DBazI8C/7Y9qsiQSbSXvDWdJITkJVgONe0h+nGykFEdu72sO+bgah0CEjnKaG
Jt4E2mH/CsfptHMascg5yjRd4uqSqer3t50gRNkjBKBLXX31UfqGUN8cNFnstNM9
2FGiOmWCjVbBxlGJ33RtDmFO9vs7ESplZvkGMaCwEgAa5vy6DWvI60KTFXRL8BhW
kT2RjsTT5amZUUYgtmvs47hMgfM3Hw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:56 2025 by rpki-client