Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f70caf82-d3df-3604-b955-d28c4dd51906.roa
File: f70caf82-d3df-3604-b955-d28c4dd51906.roa (raw, json)
Hash identifier: QspzyJiik3rYXxMHO34Gm4HHrj6HX9Nuqxk86s6UEsw=
Subject key identifier: 37:75:B9:57:C8:E1:19:B8:E4:3F:02:AF:DB:A1:02:63:E0:F9:F1:25
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D826CB0BBBBEE3F7E94E4FBC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f70caf82-d3df-3604-b955-d28c4dd51906.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 54.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:82:6c:b0:bb:bb:ee:3f:7e:94:e4:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=9a0e5903-bac9-4fdf-a732-c2cc124f8431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b5:11:69:62:9d:6a:ed:0e:a7:c5:ad:43:58:
b8:3b:fd:a2:53:93:4f:3e:fa:57:b3:01:74:ea:7a:
14:cb:72:08:fe:0e:0f:d9:59:66:e9:b1:c9:06:aa:
8f:b6:f1:eb:32:70:c6:e7:f3:77:25:1f:4a:c2:56:
41:52:90:1a:9f:01:2e:04:a3:47:97:4a:6a:56:0d:
3b:11:5c:13:bd:38:22:1c:2b:61:7d:fa:de:8f:67:
5a:51:c1:c6:43:12:ee:d0:75:90:82:eb:9b:38:3c:
6b:7f:f5:f7:e3:5c:6d:92:c5:56:5a:20:64:26:68:
91:da:fa:2a:1c:be:18:3c:b1:30:fb:aa:c5:8e:2c:
05:07:cd:c9:88:94:d5:54:dd:15:91:67:a2:a0:c7:
7b:44:ac:01:21:da:9e:55:f2:2a:17:3e:0b:8a:f4:
0e:d3:a7:30:e6:ec:e8:39:fa:99:b6:bb:78:ca:4a:
1b:d5:33:38:88:74:89:4a:78:76:24:aa:d7:aa:75:
14:f1:19:c5:f9:cb:9c:d7:3b:c5:06:63:ae:52:03:
27:fa:40:97:67:23:6e:f6:37:36:b9:fd:fe:86:9f:
75:d0:95:05:a1:37:38:13:39:64:df:37:3f:17:cc:
96:15:e7:0c:17:02:f9:b4:31:cc:11:32:40:ad:92:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:75:B9:57:C8:E1:19:B8:E4:3F:02:AF:DB:A1:02:63:E0:F9:F1:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f70caf82-d3df-3604-b955-d28c4dd51906.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:71:dd:98:2a:7a:91:ba:2e:9a:73:f2:7c:ad:0a:4e:b2:5f:
db:db:16:07:98:8b:52:bb:df:7c:1e:89:0e:5e:28:62:66:ff:
d4:09:28:ed:25:d1:86:aa:e4:e1:b7:d8:58:20:b5:59:af:38:
af:9b:63:db:57:1f:e4:c0:1a:55:de:ff:92:4c:36:42:8a:51:
c0:8b:ee:50:f2:dd:9b:3d:56:99:33:f8:39:8a:06:1a:78:87:
d7:76:35:43:9b:a8:21:d6:92:15:21:d4:b0:4f:8c:5d:c4:63:
ad:f0:c3:b3:b9:94:4b:e6:27:bb:a1:f1:a9:60:c4:49:bf:b2:
6f:6a:1e:28:52:f2:70:89:53:28:5f:d2:0a:fb:cc:3a:de:28:
9c:e7:49:59:c0:7e:85:9b:30:1d:b5:75:62:8e:b3:b8:1f:13:
d2:4c:7f:cd:56:01:b1:eb:7d:a1:25:c2:a6:de:d4:1c:b7:d6:
d3:2c:79:75:86:99:da:9b:d5:ef:07:2f:cc:8e:4c:c3:4c:7e:
73:47:be:a7:8c:22:38:b8:c0:cb:9f:02:88:be:4c:85:49:f1:
5b:7c:94:13:54:16:39:85:e0:01:fc:ba:4e:28:dc:fb:c9:4f:
19:98:ed:fd:91:6d:68:8a:fa:6b:91:72:5a:94:73:66:60:83:
e9:b4:6c:e2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2CbLC7u+4/fpTk+8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQwODA0MDAwMFoXDTIyMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk
OWEwZTU5MDMtYmFjOS00ZmRmLWE3MzItYzJjYzEyNGY4NDMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbURaWKdau0Op8WtQ1i4O/2iU5NPPvpXswF0
6noUy3II/g4P2Vlm6bHJBqqPtvHrMnDG5/N3JR9KwlZBUpAanwEuBKNHl0pqVg07
EVwTvTgiHCthffrej2daUcHGQxLu0HWQguubODxrf/X341xtksVWWiBkJmiR2voq
HL4YPLEw+6rFjiwFB83JiJTVVN0VkWeioMd7RKwBIdqeVfIqFz4LivQO06cw5uzo
OfqZtrt4ykob1TM4iHSJSnh2JKrXqnUU8RnF+cuc1zvFBmOuUgMn+kCXZyNu9jc2
uf3+hp910JUFoTc4Ezlk3zc/F8yWFecMFwL5tDHMETJArZJUjQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDd1uVfI4Rm45D8Cr9uhAmPg+fElMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjcwY2FmODItZDNkZi0z
NjA0LWI5NTUtZDI4YzRkZDUxOTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANmYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOHHdmCp6kboumnPyfK0KTrJf29sWB5iLUrvffB6JDl4oYmb/1Ako7SXR
hqrk4bfYWCC1Wa84r5tj21cf5MAaVd7/kkw2QopRwIvuUPLdmz1WmTP4OYoGGniH
13Y1Q5uoIdaSFSHUsE+MXcRjrfDDs7mUS+Ynu6HxqWDESb+yb2oeKFLycIlTKF/S
CvvMOt4onOdJWcB+hZswHbV1Yo6zuB8T0kx/zVYBset9oSXCpt7UHLfW0yx5dYaZ
2pvV7wcvzI5Mw0x+c0e+p4wiOLjAy58CiL5MhUnxW3yUE1QWOYXgAfy6Tijc+8lP
GZjt/ZFtaIr6a5FyWpRzZmCD6bRs4g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:22 2025 by rpki-client