Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f78022ac-b3db-31e3-aee3-8263af32897d.roa
File: f78022ac-b3db-31e3-aee3-8263af32897d.roa (raw, json)
Hash identifier: SiSL+1AKz1rTg67gUekBIMKqW98jcdeCKZ95tnF1Big=
Subject key identifier: CF:EA:A8:AE:34:98:6A:03:C2:E5:C4:CD:CC:0D:E3:F1:61:62:36:19
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840736890B22AF8A879B01CF140
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f78022ac-b3db-31e3-aee3-8263af32897d.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 56.233.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:68:90:b2:2a:f8:a8:79:b0:1c:f1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=84210d42-f733-4aec-b700-0f324a5da5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:6c:2f:d5:c8:ae:8e:5b:c3:f5:af:21:6c:
e6:a2:d3:45:44:65:1a:80:74:e9:bc:f9:6c:78:a4:
7e:c2:45:ae:08:97:c5:13:79:18:fe:77:54:cc:ed:
29:aa:24:e7:9f:27:46:5d:a2:1e:a7:5f:81:7d:fd:
46:fd:4c:9d:ba:ea:ac:64:dc:d8:7e:e8:b7:f1:ff:
27:ff:16:dd:5b:8e:1f:5f:3c:04:29:76:1a:3a:75:
b8:05:9b:74:30:54:b3:1f:13:03:7d:8c:5a:40:4a:
29:59:88:99:89:8b:17:b2:39:c1:db:1d:b8:01:63:
e7:6d:59:16:72:94:d7:10:62:eb:81:5a:9c:d9:3e:
ca:ce:35:82:24:db:2d:01:2f:29:00:74:77:a2:41:
f5:a6:67:4a:1e:42:32:c6:2d:3c:cc:e7:d7:58:d1:
ab:ff:18:1b:eb:22:59:87:e4:15:e9:09:a5:31:34:
15:a2:e7:d6:fa:01:55:68:53:aa:dd:f6:c2:38:e4:
8e:bb:04:5d:92:a0:05:c7:32:73:19:f9:d4:8e:0b:
2b:58:5c:38:4b:e0:25:64:a4:34:0b:a8:fb:32:aa:
59:7d:46:3c:a5:2f:98:a0:b4:08:58:9b:9c:f6:4d:
00:d3:39:d7:55:cf:fa:b4:b2:7c:0f:50:de:30:c8:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EA:A8:AE:34:98:6A:03:C2:E5:C4:CD:CC:0D:E3:F1:61:62:36:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f78022ac-b3db-31e3-aee3-8263af32897d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.233.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:45:85:fe:d5:7b:86:9f:ae:f3:17:0e:ff:5a:41:60:2a:16:
23:17:64:13:fe:9a:37:6c:79:20:53:ed:94:fd:2b:fa:86:78:
3f:67:39:e9:32:ab:eb:6c:da:24:d0:82:6f:b8:a2:30:9a:fc:
43:67:2d:5e:51:c7:90:a8:3d:d3:9d:f1:18:3e:20:11:27:36:
28:01:76:bb:aa:93:78:d8:d8:19:27:6d:5f:fb:ce:77:f9:7b:
1f:7b:4b:33:43:10:c7:0d:b3:1b:78:d5:02:e8:83:58:1b:a4:
ae:54:2a:7d:58:03:b2:46:ac:15:f4:78:c4:58:fd:0d:0c:c2:
5b:9e:43:3f:9d:17:c9:69:9e:e6:ae:42:f2:d7:42:d7:84:53:
de:1b:c5:0c:47:bb:57:bb:d2:87:32:bf:45:a8:7d:48:9f:50:
ff:68:f9:bb:6e:3e:6d:68:58:a3:8f:30:f1:f7:f4:72:93:ca:
45:95:c0:75:c7:9d:d7:ce:30:5c:b9:c6:95:9f:4b:31:44:a3:
fa:31:a7:94:95:06:08:e1:ff:ef:51:d6:c8:b4:40:58:24:83:
3f:96:59:6f:c0:17:7e:0f:1d:62:8d:f7:af:cb:87:cc:01:da:
09:73:88:73:a7:47:1b:c7:9d:c4:c6:d7:f4:d8:de:1b:1b:f1:
9c:b5:8e:d9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBzaJCyKvioebAc8UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwMjEyMDAwMFoXDTIzMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
ODQyMTBkNDItZjczMy00YWVjLWI3MDAtMGYzMjRhNWRhNWU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR5sL9XIro5bw/WvIWzmotNFRGUagHTpvPls
eKR+wkWuCJfFE3kY/ndUzO0pqiTnnydGXaIep1+Bff1G/UyduuqsZNzYfui38f8n
/xbdW44fXzwEKXYaOnW4BZt0MFSzHxMDfYxaQEopWYiZiYsXsjnB2x24AWPnbVkW
cpTXEGLrgVqc2T7KzjWCJNstAS8pAHR3okH1pmdKHkIyxi08zOfXWNGr/xgb6yJZ
h+QV6QmlMTQVoufW+gFVaFOq3fbCOOSOuwRdkqAFxzJzGfnUjgsrWFw4S+AlZKQ0
C6j7MqpZfUY8pS+YoLQIWJuc9k0A0znXVc/6tLJ8D1DeMMjw6wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFM/qqK40mGoDwuXEzcwN4/FhYjYZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjc4MDIyYWMtYjNkYi0z
MWUzLWFlZTMtODI2M2FmMzI4OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOOkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARUWF/tV7hp+u8xcO/1pBYCoWIxdkE/6aN2x5IFPtlP0r+oZ4P2c56TKr
62zaJNCCb7iiMJr8Q2ctXlHHkKg9053xGD4gESc2KAF2u6qTeNjYGSdtX/vOd/l7
H3tLM0MQxw2zG3jVAuiDWBukrlQqfVgDskasFfR4xFj9DQzCW55DP50XyWme5q5C
8tdC14RT3hvFDEe7V7vShzK/Rah9SJ9Q/2j5u24+bWhYo48w8ff0cpPKRZXAdced
184wXLnGlZ9LMUSj+jGnlJUGCOH/71HWyLRAWCSDP5ZZb8AXfg8dYo33r8uHzAHa
CXOIc6dHG8edxMbX9NjeGxvxnLWO2Q==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:02:49 2025 by rpki-client