Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f661fa81-938a-3e9a-8ffe-880e26ae97ab.roa
File: f661fa81-938a-3e9a-8ffe-880e26ae97ab.roa (raw, json)
Hash identifier: R2VSN3LSUQW6sBmVLxATO6XiEpiHgDMu/eS6mdjCXaQ=
Subject key identifier: 96:9E:6A:1A:97:F6:E6:09:13:8C:32:96:C2:30:3C:D1:A8:9E:A6:BB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBECCA57702C6D162F1E45180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f661fa81-938a-3e9a-8ffe-880e26ae97ab.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 54.134.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:cc:a5:77:02:c6:d1:62:f1:e4:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=47676c2a-d45c-47a3-aa51-4cf1a6aa94fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:44:bf:50:ef:52:cf:af:58:d9:f4:c7:61:
d9:d1:10:5d:ff:64:7d:50:d8:b7:f8:50:85:f7:8c:
9d:af:5d:f1:40:4c:d5:1b:5c:d8:51:0c:c0:ee:71:
31:96:22:d5:e2:cc:7f:f1:df:1d:0b:58:72:0f:1d:
75:97:dd:3e:43:2a:ad:7a:3b:0d:cf:c6:6a:df:fc:
e5:d8:e4:8e:e2:89:6a:09:3c:c6:60:42:1f:16:70:
e5:29:c7:aa:31:15:36:57:2c:de:2f:5e:1e:33:54:
82:04:b4:da:70:c7:ed:8a:f1:89:4b:0b:fa:3f:29:
9f:aa:60:48:10:79:ee:c6:1d:55:76:91:1f:ef:68:
15:93:7f:46:49:32:ac:ce:db:af:6f:35:28:04:1c:
81:2e:a8:04:95:42:ae:4d:74:41:6e:87:fb:79:30:
5c:04:dc:de:d6:62:0a:55:6b:27:4a:78:ac:33:d1:
9b:8f:4c:40:90:db:37:6c:1a:bd:22:2d:29:d7:db:
23:94:65:80:98:fe:20:52:06:ec:f4:cf:eb:eb:11:
fd:d5:a6:e5:5d:9d:1f:99:4f:03:78:9a:08:af:7f:
64:4b:f9:2c:d1:58:7b:b1:65:55:70:a3:86:61:6d:
c2:5f:75:90:a3:08:1e:ee:e9:3a:28:fd:30:1e:f8:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9E:6A:1A:97:F6:E6:09:13:8C:32:96:C2:30:3C:D1:A8:9E:A6:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f661fa81-938a-3e9a-8ffe-880e26ae97ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.134.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:c9:99:f6:90:0a:4e:46:06:53:d4:7c:2d:8d:6c:ba:c3:4c:
d2:6c:e4:3c:33:bc:8a:ca:3e:de:dc:12:58:fd:f7:72:41:9e:
4f:d0:8f:81:ae:c2:38:1c:9c:55:f8:24:ab:01:27:f3:d3:01:
aa:e5:78:e0:df:14:58:8e:2f:8c:b2:d2:5f:16:a0:a3:f3:3c:
ee:0e:2a:2d:ee:20:f8:bb:5e:b1:78:0f:b0:d7:28:f7:23:00:
63:db:de:55:c3:85:1b:fe:8b:4e:12:e8:02:57:64:20:ed:82:
17:40:6b:4c:37:36:54:10:f1:a3:bf:88:4f:6e:ff:b9:4d:85:
dd:c0:a5:c3:27:41:b2:21:5f:e4:16:70:67:2e:30:81:29:6f:
3e:f9:a6:4d:9e:e0:8c:5f:55:f6:ff:7e:31:6e:e5:a7:c9:8c:
5b:ed:d0:8b:71:e0:3c:42:83:6d:c4:55:82:08:16:b6:78:a0:
5d:02:9e:3c:d8:00:07:d2:24:e1:88:2f:c3:e0:39:40:44:04:
99:ed:c1:66:49:f8:d3:7a:b7:c5:e5:b0:99:af:4e:90:53:96:
82:a3:4e:d9:c6:24:fe:f7:46:24:50:d6:61:24:04:f1:d5:9c:
9e:1a:da:5d:ad:a8:1c:6c:8a:a3:66:a4:be:be:46:3e:4d:af:
74:9c:7d:d9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDy+zKV3AsbRYvHkUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDEyODA1MDAwMFoXDTIyMDMwNDA1MDAwMFowLzEtMCsGA1UEAxMk
NDc2NzZjMmEtZDQ1Yy00N2EzLWFhNTEtNGNmMWE2YWE5NGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ1Ev1DvUs+vWNn0x2HZ0RBd/2R9UNi3+FCF
94ydr13xQEzVG1zYUQzA7nExliLV4sx/8d8dC1hyDx11l90+QyqtejsNz8Zq3/zl
2OSO4olqCTzGYEIfFnDlKceqMRU2VyzeL14eM1SCBLTacMftivGJSwv6PymfqmBI
EHnuxh1VdpEf72gVk39GSTKsztuvbzUoBByBLqgElUKuTXRBbof7eTBcBNze1mIK
VWsnSnisM9Gbj0xAkNs3bBq9Ii0p19sjlGWAmP4gUgbs9M/r6xH91ablXZ0fmU8D
eJoIr39kS/ks0Vh7sWVVcKOGYW3CX3WQowge7uk6KP0wHvi6dQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJaeahqX9uYJE4wylsIwPNGonqa7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjY2MWZhODEtOTM4YS0z
ZTlhLThmZmUtODgwZTI2YWU5N2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANoYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWsmZ9pAKTkYGU9R8LY1susNM0mzkPDO8iso+3twSWP33ckGeT9CPga7C
OBycVfgkqwEn89MBquV44N8UWI4vjLLSXxago/M87g4qLe4g+LtesXgPsNco9yMA
Y9veVcOFG/6LThLoAldkIO2CF0BrTDc2VBDxo7+IT27/uU2F3cClwydBsiFf5BZw
Zy4wgSlvPvmmTZ7gjF9V9v9+MW7lp8mMW+3Qi3HgPEKDbcRVgggWtnigXQKePNgA
B9Ik4Ygvw+A5QEQEme3BZkn403q3xeWwma9OkFOWgqNO2cYk/vdGJFDWYSQE8dWc
nhraXa2oHGyKo2akvr5GPk2vdJx92Q==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:26 2025 by rpki-client