Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/12584892-48fd-3bc3-96e4-64e2ddc02348.roa
File: 12584892-48fd-3bc3-96e4-64e2ddc02348.roa (raw, json)
Hash identifier: lSPNJ5+GK6w9r4AmXtRy3CLVMjxAki+VRUaY7PXOPso=
Subject key identifier: C0:B7:12:61:0F:45:53:98:77:FB:3D:58:BA:3B:E8:4F:15:DF:B1:8B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584041F14539EBB4BF85FD399680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/12584892-48fd-3bc3-96e4-64e2ddc02348.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 50.16.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:f1:45:39:eb:b4:bf:85:fd:39:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=4d1249df-c8ff-4181-b158-3f4e9fcdb213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:35:47:e7:82:48:a6:0c:a0:4c:df:c7:d0:
fc:d0:0b:2d:d5:cd:bc:0e:ac:81:81:3d:e9:67:23:
3e:67:3d:aa:6c:ad:87:89:80:24:ce:fe:51:4f:ee:
63:84:c8:57:57:68:73:f9:b2:2a:dc:51:bc:b2:dc:
86:40:51:a6:55:18:01:f7:07:14:5c:f4:7f:f2:d7:
ca:b8:3d:ce:4b:c8:01:ff:2c:1c:d4:e9:f1:ed:56:
eb:63:49:e5:19:a8:ce:89:0f:de:63:40:5c:46:04:
62:82:f0:0f:71:19:10:43:78:60:02:ff:2b:04:16:
f7:63:01:cc:a4:19:5f:82:3a:2d:3f:5f:b2:ee:17:
99:6e:46:36:42:b8:d3:5a:25:bf:92:79:93:0f:aa:
55:e7:8f:56:5b:11:ce:f5:48:80:f3:fb:36:35:63:
48:89:68:56:5c:a1:5c:fd:1d:21:21:32:e3:00:dd:
26:80:4d:be:1b:14:9d:46:c3:56:5c:b7:9a:bb:99:
77:9c:f8:9d:94:31:e8:31:4c:93:97:06:d2:7b:c4:
e3:56:d2:25:50:fc:6b:64:7d:61:c8:47:f8:59:7f:
a5:46:dc:73:85:0f:d8:68:bd:29:e2:c4:6a:5c:9a:
31:1c:98:77:35:d1:10:63:a2:3f:49:42:e0:51:b2:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:12:61:0F:45:53:98:77:FB:3D:58:BA:3B:E8:4F:15:DF:B1:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/12584892-48fd-3bc3-96e4-64e2ddc02348.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
50.16.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:64:8f:80:43:68:5d:fa:07:b9:0a:e2:66:12:6d:6a:3d:86:
72:c2:0b:12:01:bc:a8:f7:95:7b:c9:af:7a:24:75:c5:5e:b2:
f3:68:d2:80:24:90:f7:75:bb:43:7f:e5:02:16:64:de:a4:ad:
ad:fa:e3:32:df:ed:c9:58:64:64:23:d3:82:c2:79:5b:6d:97:
c7:73:1b:e5:e9:8f:40:02:82:2f:1f:14:9a:a7:9e:11:9d:98:
05:95:8a:e4:04:9e:eb:7b:bc:e1:8c:95:93:8a:7b:22:d0:48:
ca:41:5b:94:f6:ab:84:97:44:8d:b6:04:39:68:e5:46:2e:58:
90:38:d5:3c:e5:60:73:e2:d3:9f:22:8b:72:fb:ea:4a:81:b4:
33:02:51:a1:51:37:19:40:c5:6e:47:ad:fd:63:f2:b0:3a:68:
6d:98:ae:de:3a:28:b8:e9:75:06:ed:fd:05:32:10:be:d1:b0:
46:0d:83:3c:0f:3a:3a:c3:50:4d:f4:bd:34:a7:b3:36:32:46:
c1:ba:6b:97:55:33:c9:aa:3d:25:9a:c4:9b:de:23:8a:33:cb:
e1:52:f0:ac:b8:81:8d:c6:a7:95:ed:32:36:cb:e1:de:0a:61:
99:c5:57:ac:5c:91:fa:1f:e8:0c:1d:d9:08:df:38:c8:9f:a3:
7b:ca:87:96
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBB8UU567S/hf05loAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
NGQxMjQ5ZGYtYzhmZi00MTgxLWIxNTgtM2Y0ZTlmY2RiMjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlY1R+eCSKYMoEzfx9D80Ast1c28DqyBgT3p
ZyM+Zz2qbK2HiYAkzv5RT+5jhMhXV2hz+bIq3FG8styGQFGmVRgB9wcUXPR/8tfK
uD3OS8gB/ywc1Onx7VbrY0nlGajOiQ/eY0BcRgRigvAPcRkQQ3hgAv8rBBb3YwHM
pBlfgjotP1+y7heZbkY2QrjTWiW/knmTD6pV549WWxHO9UiA8/s2NWNIiWhWXKFc
/R0hITLjAN0mgE2+GxSdRsNWXLeau5l3nPidlDHoMUyTlwbSe8TjVtIlUPxrZH1h
yEf4WX+lRtxzhQ/YaL0p4sRqXJoxHJh3NdEQY6I/SULgUbLbeQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMC3EmEPRVOYd/s9WLo76E8V37GLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTI1ODQ4OTItNDhmZC0z
YmMzLTk2ZTQtNjRlMmRkYzAyMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCMhAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVGSPgENoXfoHuQriZhJtaj2GcsILEgG8qPeVe8mveiR1xV6y82jSgCSQ
93W7Q3/lAhZk3qStrfrjMt/tyVhkZCPTgsJ5W22Xx3Mb5emPQAKCLx8UmqeeEZ2Y
BZWK5ASe63u84YyVk4p7ItBIykFblParhJdEjbYEOWjlRi5YkDjVPOVgc+LTnyKL
cvvqSoG0MwJRoVE3GUDFbket/WPysDpobZiu3joouOl1Bu39BTIQvtGwRg2DPA86
OsNQTfS9NKezNjJGwbprl1Uzyao9JZrEm94jijPL4VLwrLiBjcanle0yNsvh3gph
mcVXrFyR+h/oDB3ZCN84yJ+je8qHlg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:35 2025 by rpki-client