Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cb7af91-e22c-3ca9-8561-ac91841af9fa.roa
File: 0cb7af91-e22c-3ca9-8561-ac91841af9fa.roa (raw, json)
Hash identifier: 117cfkg8BvapUCz8te5BIYsk42Q6gmYjb0t7gHUwExs=
Subject key identifier: 41:AA:35:ED:BF:14:B4:72:FB:74:4A:25:2C:6B:8B:02:08:79:B7:0E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E1A059AD6C16268A43055E760
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cb7af91-e22c-3ca9-8561-ac91841af9fa.roa
Signing time: Wed 01 Jun 2022 12:00:00 +0000
ROA not before: Wed 01 Jun 2022 12:00:00 +0000
ROA not after: Thu 07 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:1a:05:9a:d6:c1:62:68:a4:30:55:e7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 1 12:00:00 2022 GMT
Not After : Jul 7 04:00:00 2022 GMT
Subject: CN=b6159f2c-3755-4082-a2fb-2df0617eb39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:ae:05:4b:0d:8a:a4:9d:fc:24:14:8f:6d:
76:a4:9c:61:7c:e6:fc:47:e1:46:d4:d8:92:1c:b4:
c1:17:1d:46:c6:60:2c:72:6d:b0:50:de:e9:e4:e5:
b8:f1:6b:92:c8:6f:e2:2f:5d:40:bc:a9:10:8d:c0:
ef:07:b1:6f:23:58:3c:98:40:60:74:e3:ba:99:cb:
de:3c:6d:e3:ee:0c:8d:5c:40:01:64:95:b4:c2:6d:
24:cd:e5:7a:9c:17:fc:99:69:33:07:08:a3:9c:43:
10:9a:f3:b7:6b:28:0e:a8:be:b4:dd:07:3a:69:55:
ae:a1:77:f9:41:ce:c6:41:e8:32:7e:ff:14:75:7c:
1d:fc:09:11:96:88:31:19:7d:c7:f9:39:c8:70:ca:
82:fc:00:92:0e:b2:39:08:b3:c9:8f:08:4f:9f:78:
ec:95:a2:0c:df:d5:de:2d:0b:8d:f7:59:68:32:d2:
b7:01:f1:a3:67:2b:59:f6:bd:1c:16:57:5f:0b:93:
ef:e5:25:2f:94:dd:86:09:d7:de:f2:61:6c:1b:cb:
f9:ae:54:20:e9:02:1b:5c:67:da:08:3e:7e:45:4b:
61:8d:b6:ed:f2:43:5f:ab:94:2d:28:90:30:95:53:
25:af:01:0c:c8:50:97:e2:44:53:f5:b4:89:73:94:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AA:35:ED:BF:14:B4:72:FB:74:4A:25:2C:6B:8B:02:08:79:B7:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0cb7af91-e22c-3ca9-8561-ac91841af9fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:fd:83:56:f9:2e:83:b1:a8:ce:6b:a0:0f:45:9e:f8:33:2b:
a6:f0:12:84:aa:c3:ac:7b:9b:34:4f:0d:8a:f9:65:24:87:a6:
89:f8:1f:8b:cd:93:6c:57:99:0b:5d:c8:8a:2a:e0:30:32:85:
87:1e:63:55:86:13:0c:8f:ed:e8:b6:7f:15:6b:ab:ed:92:18:
67:4e:99:a3:da:3e:1c:d0:bd:46:a9:51:8a:ce:ee:a8:25:c9:
87:f1:cc:ff:28:ec:7c:70:ad:d7:c3:ee:1f:44:52:8c:8b:5c:
e1:89:37:19:f5:bc:1f:8c:42:2c:cd:e5:52:8c:d2:7d:09:2f:
94:1f:0e:a7:9c:51:8d:46:64:7f:2e:ec:ad:65:4d:fd:70:62:
b7:bd:a3:f2:2e:c7:7b:76:d2:be:1b:b5:11:26:a8:e3:a8:98:
7b:e8:cc:a1:bc:d7:cb:f8:f5:95:25:dc:86:31:83:8e:1e:0c:
ac:11:de:81:3a:6c:28:80:bc:68:00:3c:5c:8e:e6:2c:46:4d:
33:ae:38:16:58:99:af:4e:52:fb:18:40:eb:7e:b4:1e:c1:b7:
5b:1c:b8:b9:d6:cf:b8:99:ec:d8:0e:98:4d:81:4c:b1:36:a9:
b1:61:ad:f4:41:74:04:25:7e:66:3b:6a:64:f1:de:83:5f:44:
5e:ca:31:ed
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4aBZrWwWJopDBV52AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwMTEyMDAwMFoXDTIyMDcwNzA0MDAwMFowLzEtMCsGA1UEAxMk
YjYxNTlmMmMtMzc1NS00MDgyLWEyZmItMmRmMDYxN2ViMzlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2SuBUsNiqSd/CQUj212pJxhfOb8R+FG1NiS
HLTBFx1GxmAscm2wUN7p5OW48WuSyG/iL11AvKkQjcDvB7FvI1g8mEBgdOO6mcve
PG3j7gyNXEABZJW0wm0kzeV6nBf8mWkzBwijnEMQmvO3aygOqL603Qc6aVWuoXf5
Qc7GQegyfv8UdXwd/AkRlogxGX3H+TnIcMqC/ACSDrI5CLPJjwhPn3jslaIM39Xe
LQuN91loMtK3AfGjZytZ9r0cFldfC5Pv5SUvlN2GCdfe8mFsG8v5rlQg6QIbXGfa
CD5+RUthjbbt8kNfq5QtKJAwlVMlrwEMyFCX4kRT9bSJc5S98QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEGqNe2/FLRy+3RKJSxriwIIebcOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMGNiN2FmOTEtZTIyYy0z
Y2E5LTg1NjEtYWM5MTg0MWFmOWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACf2DVvkug7GozmugD0We+DMrpvAShKrDrHubNE8NivllJIemifgfi82T
bFeZC13IiirgMDKFhx5jVYYTDI/t6LZ/FWur7ZIYZ06Zo9o+HNC9RqlRis7uqCXJ
h/HM/yjsfHCt18PuH0RSjItc4Yk3GfW8H4xCLM3lUozSfQkvlB8Op5xRjUZkfy7s
rWVN/XBit72j8i7He3bSvhu1ESao46iYe+jMobzXy/j1lSXchjGDjh4MrBHegTps
KIC8aAA8XI7mLEZNM644FliZr05S+xhA6360HsG3Wxy4udbPuJns2A6YTYFMsTap
sWGt9EF0BCV+ZjtqZPHeg19EXsox7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:30 2025 by rpki-client