Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4e3aa68-60a8-3026-a956-0ee81386d253.roa
File: f4e3aa68-60a8-3026-a956-0ee81386d253.roa (raw, json)
Hash identifier: WPSlY7ylwrcrj6YNQzTeooI/J+RM1r6UMCYPllIYWIY=
Subject key identifier: 76:53:D3:93:90:D4:71:B0:01:ED:65:8D:59:B7:50:1E:CB:49:74:8D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FB56CAFA9FC58765FB77CA6A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4e3aa68-60a8-3026-a956-0ee81386d253.roa
Signing time: Wed 26 Oct 2022 12:00:00 +0000
ROA not before: Wed 26 Oct 2022 12:00:00 +0000
ROA not after: Thu 01 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 56.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b5:6c:af:a9:fc:58:76:5f:b7:7c:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 26 12:00:00 2022 GMT
Not After : Dec 1 05:00:00 2022 GMT
Subject: CN=08947a9d-9dcd-402e-9a94-ee71a7c90d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:c4:59:a7:04:60:01:31:ca:74:be:9a:44:
9c:34:77:a3:88:75:8e:f5:ff:db:20:c4:25:24:a4:
9a:4a:bf:fd:b5:0b:fc:90:63:8e:84:49:fd:7a:69:
ba:a7:eb:6c:6d:70:81:d9:35:43:3f:75:bc:48:a6:
16:2f:07:dd:a4:a8:e9:b7:f0:50:ff:39:da:f9:0c:
24:09:9a:84:d1:7c:39:d0:f1:fb:13:e5:32:ad:2c:
90:b0:2d:91:1e:e5:b6:7a:45:e9:7a:db:f3:1e:5f:
a0:d1:7b:e2:a8:9c:59:74:1f:fc:ee:53:5d:ec:99:
fa:14:c6:8e:ae:3e:4b:7e:89:3c:5e:a8:82:bd:a2:
b7:14:7e:8d:9e:f0:cb:05:d8:81:62:41:63:9c:50:
95:67:c8:68:ae:d7:c0:a5:73:40:6e:8b:c8:b3:5f:
70:44:cc:6d:da:a8:dd:c0:78:c4:91:59:ab:85:46:
52:23:fc:32:ab:1c:ed:9c:19:61:12:68:db:5f:7d:
70:1d:02:11:cd:19:08:54:b6:c7:7f:b9:ce:4d:0a:
75:d8:bb:25:e9:f2:44:7a:7c:b9:60:47:73:d6:65:
a1:96:89:23:8d:f4:d2:02:ba:72:25:ae:40:be:65:
02:f2:d0:20:6e:d7:45:d2:56:d5:09:5a:0b:a0:17:
2d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:53:D3:93:90:D4:71:B0:01:ED:65:8D:59:B7:50:1E:CB:49:74:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f4e3aa68-60a8-3026-a956-0ee81386d253.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.128.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:dd:34:78:1b:59:f2:c8:f2:1c:a7:a5:01:64:b1:b9:e0:72:
d0:8e:af:cc:c7:ce:51:7c:61:d4:58:9c:82:e0:59:05:45:0a:
b6:60:fd:6b:79:39:45:bf:b3:c3:5d:2e:97:5f:86:53:96:f2:
e9:11:f1:3a:ca:02:45:1b:c0:54:5d:dd:75:19:56:aa:a0:f0:
f3:c8:ee:9d:09:8a:46:8c:03:16:88:59:27:ad:b3:bd:40:13:
22:51:14:9d:3a:ad:9b:a2:c2:c3:43:0d:03:22:73:3d:60:40:
b8:fb:42:b6:45:b8:db:d7:4c:f7:f2:8c:28:8d:ba:81:47:79:
30:24:6d:8f:2c:1f:59:44:08:2f:fc:87:fe:ad:17:95:1d:9c:
a1:2b:30:d3:4a:6f:aa:62:80:e1:65:0d:72:a0:cf:df:d2:dd:
da:22:b5:e7:be:bc:05:c3:02:92:74:1b:ab:b0:fd:29:b2:00:
4b:3a:9e:b9:bc:57:b3:ad:20:0f:c5:13:39:a3:34:1d:82:c7:
85:9f:e6:d3:b6:5c:e8:51:cb:65:7c:c5:d3:36:70:2b:70:62:
05:c6:34:6b:26:0a:3b:d0:8d:1f:04:1b:09:c4:24:72:b7:cb:
31:41:ab:d6:a0:05:6c:09:6c:16:db:93:15:b5:a8:7f:d4:6c:
28:97:7f:d5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+1bK+p/Fh2X7d8pqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNjEyMDAwMFoXDTIyMTIwMTA1MDAwMFowLzEtMCsGA1UEAxMk
MDg5NDdhOWQtOWRjZC00MDJlLTlhOTQtZWU3MWE3YzkwZDE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCnEWacEYAExynS+mkScNHejiHWO9f/bIMQl
JKSaSr/9tQv8kGOOhEn9emm6p+tsbXCB2TVDP3W8SKYWLwfdpKjpt/BQ/zna+Qwk
CZqE0Xw50PH7E+UyrSyQsC2RHuW2ekXpetvzHl+g0XviqJxZdB/87lNd7Jn6FMaO
rj5Lfok8XqiCvaK3FH6NnvDLBdiBYkFjnFCVZ8hortfApXNAbovIs19wRMxt2qjd
wHjEkVmrhUZSI/wyqxztnBlhEmjbX31wHQIRzRkIVLbHf7nOTQp12Lsl6fJEeny5
YEdz1mWhlokjjfTSArpyJa5AvmUC8tAgbtdF0lbVCVoLoBctYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHZT05OQ1HGwAe1ljVm3UB7LSXSNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjRlM2FhNjgtNjBhOC0z
MDI2LWE5NTYtMGVlODEzODZkMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOIAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAId00eBtZ8sjyHKelAWSxueBy0I6vzMfOUXxh1FicguBZBUUKtmD9a3k5
Rb+zw10ul1+GU5by6RHxOsoCRRvAVF3ddRlWqqDw88junQmKRowDFohZJ62zvUAT
IlEUnTqtm6LCw0MNAyJzPWBAuPtCtkW429dM9/KMKI26gUd5MCRtjywfWUQIL/yH
/q0XlR2coSsw00pvqmKA4WUNcqDP39Ld2iK15768BcMCknQbq7D9KbIASzqeubxX
s60gD8UTOaM0HYLHhZ/m07Zc6FHLZXzF0zZwK3BiBcY0ayYKO9CNHwQbCcQkcrfL
MUGr1qAFbAlsFtuTFbWof9RsKJd/1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:01 2025 by rpki-client