Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f828cf37-4f4b-3911-bbc0-00d143be2afb.roa
File: f828cf37-4f4b-3911-bbc0-00d143be2afb.roa (raw, json)
Hash identifier: YySwkJ67SPNv24QlkHVNSv6yvvt207kLwUN5mDkwmIw=
Subject key identifier: A0:D4:65:72:48:85:6E:E0:F5:9A:71:9F:7F:E3:17:62:0D:56:AF:66
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDCAEEB0EFE80A08737FBDE78
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f828cf37-4f4b-3911-bbc0-00d143be2afb.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 56.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:dc:ae:eb:0e:fe:80:a0:87:37:fb:de:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=2dc32fba-5edf-47ce-a909-ea30e57a1cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f3:4a:63:06:77:fc:9b:97:39:a6:e0:a6:d8:
60:36:a7:f8:d7:4a:5f:cd:c9:57:ce:e9:7d:b9:32:
61:16:56:b9:3e:87:a5:bf:8e:12:42:6c:94:38:ae:
a7:d0:f3:c0:54:bc:e7:c3:89:2e:25:46:ca:31:0f:
02:d2:4e:68:91:c5:ed:36:b4:f2:24:c6:d0:91:d4:
54:f2:df:f8:1e:f5:b9:6d:55:5a:01:af:fe:09:ec:
98:7a:ab:fd:f3:c0:33:79:1e:d7:64:6c:3b:68:15:
62:e1:e3:a6:5f:77:37:25:ab:5b:43:48:a1:3b:e0:
4f:9e:38:10:d7:2b:e7:64:31:b8:8c:9d:c9:ee:c8:
c1:c3:f0:a1:bc:b9:67:d5:46:77:57:5f:82:15:15:
c0:66:48:d3:76:e4:5a:e3:11:ad:03:7a:08:d2:40:
d7:36:0e:6b:0d:65:5a:9a:6a:48:a4:d5:e4:06:97:
f0:3e:52:0b:39:09:b4:09:74:af:28:14:61:9c:e2:
2d:8f:50:14:80:fd:4f:45:65:40:a1:8a:1d:89:34:
36:56:66:80:3f:94:17:21:78:a6:4e:ad:c0:1d:fe:
81:c0:75:50:76:64:99:77:52:d4:78:d7:c8:f1:8c:
0f:ca:59:71:38:43:66:aa:f7:c3:c7:77:ec:8d:08:
14:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D4:65:72:48:85:6E:E0:F5:9A:71:9F:7F:E3:17:62:0D:56:AF:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f828cf37-4f4b-3911-bbc0-00d143be2afb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
56.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:2f:75:e2:98:6b:bb:f0:cc:77:74:a5:20:dd:fe:6f:28:3b:
fd:c8:16:60:5f:04:8b:62:86:0f:89:4c:9e:4f:88:7e:ae:e8:
32:0c:41:2a:8d:0a:c6:c0:7c:d3:7c:b5:ca:63:83:12:18:04:
16:ea:c0:b6:82:22:1b:fc:88:ed:79:af:e8:07:cb:93:82:67:
aa:e2:b2:3e:4e:cd:4d:64:b6:38:2a:27:8f:2e:e2:54:6c:03:
45:b5:3d:75:42:e2:38:5e:bf:ac:25:f9:9c:39:81:0d:19:cd:
72:8b:17:a5:9e:1a:53:73:18:99:6e:fa:bc:a8:a6:54:cc:c2:
5f:14:ac:1b:3a:2a:cf:e3:fc:49:cd:94:81:03:85:c3:bc:52:
ea:76:d1:52:0f:f7:2a:26:5e:e2:ff:66:9b:63:f3:9b:99:e1:
01:a9:46:e0:55:dd:8d:d9:58:10:62:33:23:eb:dd:fd:75:e1:
aa:7f:32:82:ee:f7:4c:97:bb:83:35:d3:aa:88:76:21:d4:0e:
c4:c2:d5:09:27:6c:b7:9d:bc:31:c4:f3:7f:f3:46:70:b7:b8:
b2:90:e7:3d:41:d5:d7:c4:a0:ad:54:86:2c:2d:81:c5:bb:a0:
6e:dd:3c:f5:ce:43:fd:78:1a:58:12:f6:be:a7:65:33:e1:97:
b5:ab:b3:ae
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/crusO/oCghzf73ngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwOTEyMDAwMFoXDTIyMTIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
MmRjMzJmYmEtNWVkZi00N2NlLWE5MDktZWEzMGU1N2ExY2RlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6/NKYwZ3/JuXOabgpthgNqf410pfzclXzul9
uTJhFla5Poelv44SQmyUOK6n0PPAVLznw4kuJUbKMQ8C0k5okcXtNrTyJMbQkdRU
8t/4HvW5bVVaAa/+CeyYeqv988AzeR7XZGw7aBVi4eOmX3c3JatbQ0ihO+BPnjgQ
1yvnZDG4jJ3J7sjBw/ChvLln1UZ3V1+CFRXAZkjTduRa4xGtA3oI0kDXNg5rDWVa
mmpIpNXkBpfwPlILOQm0CXSvKBRhnOItj1AUgP1PRWVAoYodiTQ2VmaAP5QXIXim
Tq3AHf6BwHVQdmSZd1LUeNfI8YwPyllxOENmqvfDx3fsjQgUlQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKDUZXJIhW7g9Zpxn3/jF2INVq9mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjgyOGNmMzctNGY0Yi0z
OTExLWJiYzAtMDBkMTQzYmUyYWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOFcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMi914phru/DMd3SlIN3+byg7/cgWYF8Ei2KGD4lMnk+Ifq7oMgxBKo0K
xsB803y1ymODEhgEFurAtoIiG/yI7Xmv6AfLk4JnquKyPk7NTWS2OConjy7iVGwD
RbU9dULiOF6/rCX5nDmBDRnNcosXpZ4aU3MYmW76vKimVMzCXxSsGzoqz+P8Sc2U
gQOFw7xS6nbRUg/3KiZe4v9mm2Pzm5nhAalG4FXdjdlYEGIzI+vd/XXhqn8ygu73
TJe7gzXTqoh2IdQOxMLVCSdst528McTzf/NGcLe4spDnPUHV18SgrVSGLC2Bxbug
bt089c5D/XgaWBL2vqdlM+GXtauzrg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:44:52 2025 by rpki-client