Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01a56cf5-dd2b-3a3f-9d0f-5a21e5bb512c.roa
File: 01a56cf5-dd2b-3a3f-9d0f-5a21e5bb512c.roa (raw, json)
Hash identifier: MLHIIKPIJpIqGZd0N8Bx6lSyCVqzco045/R9c9P+yYc=
Subject key identifier: B5:D9:C4:BB:54:CC:20:19:09:28:C7:22:0F:41:67:FB:B3:D4:F5:25
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FEF87121CC94DB3D0E8FC5980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01a56cf5-dd2b-3a3f-9d0f-5a21e5bb512c.roa
Signing time: Wed 16 Nov 2022 12:00:00 +0000
ROA not before: Wed 16 Nov 2022 12:00:00 +0000
ROA not after: Thu 22 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.101.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ef:87:12:1c:c9:4d:b3:d0:e8:fc:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 16 12:00:00 2022 GMT
Not After : Dec 22 05:00:00 2022 GMT
Subject: CN=f68a36ab-1dd9-4eec-9a42-a6577ea42594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:6f:46:db:62:90:0f:7b:df:30:a6:cf:88:
a0:a7:85:f7:75:2a:26:1d:79:a9:12:d8:55:b4:07:
d5:11:1e:58:19:25:d2:92:fa:0f:2d:3f:9f:cb:8c:
45:f9:7f:69:b3:a3:47:6f:11:3e:99:ed:ba:e0:50:
4c:1e:d4:f5:b1:b3:e5:37:36:89:6e:7c:dd:9c:bb:
47:81:1b:be:d2:3c:88:78:70:83:e3:76:c3:c2:a4:
8c:e9:0d:2b:18:22:6e:ff:ef:ee:25:8d:90:8a:7a:
60:f4:05:0e:25:da:06:94:d8:35:2a:bb:f5:83:e3:
56:7d:b5:e1:26:16:1d:4e:1c:6b:cf:d6:4b:e7:d3:
da:95:31:f2:55:bc:40:ef:b1:a9:1e:2e:63:34:c6:
d5:6b:98:87:a8:26:d7:8a:af:45:41:cb:d3:9b:80:
57:f4:ea:5c:53:f2:35:77:0c:65:e5:bf:b4:7b:29:
a1:93:29:ca:1f:5b:37:58:7d:9a:6c:05:7b:2c:d1:
67:5a:ad:3f:af:2f:79:70:ce:98:59:e6:dd:86:02:
4b:1b:72:47:6f:d0:62:84:6f:b2:49:19:bb:60:03:
0a:09:5c:f2:e7:7d:01:95:23:5b:eb:42:53:5b:c7:
4c:fa:89:92:03:2e:ce:f1:08:d3:90:27:a9:6a:01:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:C4:BB:54:CC:20:19:09:28:C7:22:0F:41:67:FB:B3:D4:F5:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/01a56cf5-dd2b-3a3f-9d0f-5a21e5bb512c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.101.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:f1:49:be:b6:ac:bf:7a:57:2d:2f:89:94:f9:43:c8:c1:61:
5d:e2:0e:46:bc:eb:df:7d:26:57:7d:15:6c:cd:ee:75:32:4a:
b8:53:a9:ce:ba:b9:70:a5:de:b3:3b:1b:7e:5a:99:4d:70:ee:
c8:d1:46:30:14:dd:68:3d:e3:26:b3:57:37:a0:c4:00:05:2e:
04:12:b2:3a:b2:33:41:cc:0c:89:ca:c5:7b:a8:ec:b7:28:bc:
9e:8b:fb:22:53:23:fc:1b:db:8b:74:47:82:b3:e1:7a:1a:4e:
93:3b:ee:09:81:29:99:31:24:36:3d:3f:63:e3:be:d3:15:d1:
b6:58:e0:64:f9:72:e8:f1:16:ef:1d:b4:87:ba:3b:7d:08:b1:
cf:8d:69:5a:26:c4:28:53:e5:63:8c:14:df:e4:63:1e:a1:17:
87:a4:29:21:e2:f7:cc:bd:da:15:00:5f:72:d7:21:5f:e5:f7:
bb:46:26:73:10:f3:93:42:de:b8:95:5d:5f:ad:74:55:5f:75:
07:44:3f:c7:0d:58:26:fd:9f:b9:ef:e2:99:a3:89:c4:3c:26:
8e:6e:77:53:2f:0f:8c:40:90:bd:75:10:05:dd:38:23:86:df:
82:bc:e7:f1:83:15:fe:eb:6f:53:a1:73:5a:4f:4f:6a:d9:8a:
00:e6:e7:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/vhxIcyU2z0Oj8WYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNjEyMDAwMFoXDTIyMTIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZjY4YTM2YWItMWRkOS00ZWVjLTlhNDItYTY1NzdlYTQyNTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb9vRttikA973zCmz4igp4X3dSomHXmpEthV
tAfVER5YGSXSkvoPLT+fy4xF+X9ps6NHbxE+me264FBMHtT1sbPlNzaJbnzdnLtH
gRu+0jyIeHCD43bDwqSM6Q0rGCJu/+/uJY2Qinpg9AUOJdoGlNg1Krv1g+NWfbXh
JhYdThxrz9ZL59PalTHyVbxA77GpHi5jNMbVa5iHqCbXiq9FQcvTm4BX9OpcU/I1
dwxl5b+0eymhkynKH1s3WH2abAV7LNFnWq0/ry95cM6YWebdhgJLG3JHb9BihG+y
SRm7YAMKCVzy530BlSNb60JTW8dM+omSAy7O8QjTkCepagF8wQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLXZxLtUzCAZCSjHIg9BZ/uz1PUlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMDFhNTZjZjUtZGQyYi0z
YTNmLTlkMGYtNWEyMWU1YmI1MTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEGUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUvFJvrasv3pXLS+JlPlDyMFhXeIORrzr330mV30VbM3udTJKuFOpzrq5
cKXeszsbflqZTXDuyNFGMBTdaD3jJrNXN6DEAAUuBBKyOrIzQcwMicrFe6jstyi8
nov7IlMj/Bvbi3RHgrPhehpOkzvuCYEpmTEkNj0/Y+O+0xXRtljgZPly6PEW7x20
h7o7fQixz41pWibEKFPlY4wU3+RjHqEXh6QpIeL3zL3aFQBfctchX+X3u0YmcxDz
k0LeuJVdX610VV91B0Q/xw1YJv2fue/imaOJxDwmjm53Uy8PjECQvXUQBd04I4bf
grzn8YMV/utvU6FzWk9PatmKAObnUw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:54:14 2025 by rpki-client