Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/139a1814-ff5f-3d8c-8219-0c7c08aabca6.roa
File: 139a1814-ff5f-3d8c-8219-0c7c08aabca6.roa (raw, json)
Hash identifier: hXf5elMpcDd98a+oR6M0L/vOTF5gvIOywMPE5aXpzVM=
Subject key identifier: 3C:28:02:1C:23:0B:F9:9F:23:D2:57:2F:25:6F:79:26:41:A2:11:FD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840353C31956C82390D0A2CCC40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/139a1814-ff5f-3d8c-8219-0c7c08aabca6.roa
Signing time: Sun 11 Dec 2022 12:00:00 +0000
ROA not before: Sun 11 Dec 2022 12:00:00 +0000
ROA not after: Mon 16 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:35:3c:31:95:6c:82:39:0d:0a:2c:cc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 11 12:00:00 2022 GMT
Not After : Jan 16 05:00:00 2023 GMT
Subject: CN=a6a87e21-676f-4112-bc7e-e21d9deb6e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:49:ff:76:14:01:bc:96:c5:41:24:bc:1c:2f:
45:d7:b4:97:49:40:87:76:c6:0d:e0:ad:e4:74:78:
bb:9b:b2:c5:86:6d:d5:28:37:1c:ec:72:2c:03:41:
27:68:19:49:8f:c7:e6:dd:31:f7:5e:83:c9:d9:c6:
67:e9:c8:0b:a4:54:2b:05:78:24:40:9a:93:f5:ad:
13:20:d7:20:b7:ac:23:16:30:8a:ce:ea:8c:9e:f6:
63:08:eb:02:96:df:ac:22:d6:20:0d:89:68:15:63:
20:d5:4b:9d:35:3f:46:f9:e2:a5:70:e4:39:51:ce:
82:f1:eb:ed:9d:98:f7:02:ab:32:6d:1a:e3:20:b3:
fc:d6:3d:a5:a9:5e:15:59:3f:72:1d:59:cd:62:3e:
89:e8:dd:5b:de:4f:9e:76:85:48:c4:80:6e:f5:71:
68:70:73:02:3d:04:e0:04:40:3c:6e:d2:a1:e6:71:
26:f3:12:c0:37:d1:6e:70:e3:c2:48:90:1a:34:98:
d7:f8:04:e3:05:2b:84:c1:6b:30:78:91:3a:60:e3:
f8:67:e6:09:7d:e5:fc:50:97:9a:33:de:b2:c4:d9:
42:28:72:aa:c2:3b:3c:7f:a7:7c:27:8a:79:b7:4e:
0b:ec:52:26:b1:3f:ea:0b:48:f0:96:1a:b5:8a:55:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:28:02:1C:23:0B:F9:9F:23:D2:57:2F:25:6F:79:26:41:A2:11:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/139a1814-ff5f-3d8c-8219-0c7c08aabca6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:e4:90:50:54:22:9a:5d:82:31:87:28:36:68:f4:02:4d:ec:
5c:90:6d:a7:ad:3d:5d:82:70:9f:8a:9d:7a:0f:e1:9c:e7:22:
ef:3d:5e:55:03:61:75:71:09:4d:6f:bb:7f:00:bd:4c:71:15:
80:b1:82:79:f3:70:6c:ae:c0:12:83:4f:c0:20:76:24:d9:36:
40:17:01:1b:8e:88:37:8f:66:c2:20:dc:b4:95:92:b2:b3:ee:
14:aa:ce:92:4e:7e:db:22:28:da:f4:e9:7a:4e:bd:20:79:93:
4a:bb:97:62:d5:d3:72:d2:39:6b:2f:d3:b4:0f:d2:e9:30:d7:
76:c2:eb:dd:7f:73:e2:9f:a5:e1:e2:b3:ce:ff:75:98:bd:6f:
ae:a1:fd:ac:87:5f:45:ac:3f:c8:39:9d:b3:d6:f6:e3:0f:1b:
09:13:f0:70:66:cc:c5:ec:2a:bb:da:e2:34:cc:e4:41:79:3e:
c6:29:a6:89:38:72:ac:f9:06:8b:7a:aa:65:c8:19:f8:d2:d0:
6a:7c:e3:80:66:cd:ac:31:ac:8d:2c:de:f1:4b:b2:7e:81:9e:
f6:d8:1e:3b:11:eb:5e:e7:47:b1:b8:9e:2e:fb:cd:ae:e5:58:
05:77:86:55:19:3e:e5:10:8b:7e:3a:a4:12:b1:fb:e8:8a:d9:
f1:b2:7e:c5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA1PDGVbII5DQoszEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxMTEyMDAwMFoXDTIzMDExNjA1MDAwMFowLzEtMCsGA1UEAxMk
YTZhODdlMjEtNjc2Zi00MTEyLWJjN2UtZTIxZDlkZWI2ZTY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0n/dhQBvJbFQSS8HC9F17SXSUCHdsYN4K3k
dHi7m7LFhm3VKDcc7HIsA0EnaBlJj8fm3TH3XoPJ2cZn6cgLpFQrBXgkQJqT9a0T
INcgt6wjFjCKzuqMnvZjCOsClt+sItYgDYloFWMg1UudNT9G+eKlcOQ5Uc6C8evt
nZj3AqsybRrjILP81j2lqV4VWT9yHVnNYj6J6N1b3k+edoVIxIBu9XFocHMCPQTg
BEA8btKh5nEm8xLAN9FucOPCSJAaNJjX+ATjBSuEwWsweJE6YOP4Z+YJfeX8UJea
M96yxNlCKHKqwjs8f6d8J4p5t04L7FImsT/qC0jwlhq1ilV55QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDwoAhwjC/mfI9JXLyVveSZBohH9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTM5YTE4MTQtZmY1Zi0z
ZDhjLTgyMTktMGM3YzA4YWFiY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCEJwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOOSQUFQiml2CMYcoNmj0Ak3sXJBtp609XYJwn4qdeg/hnOci7z1eVQNh
dXEJTW+7fwC9THEVgLGCefNwbK7AEoNPwCB2JNk2QBcBG46IN49mwiDctJWSsrPu
FKrOkk5+2yIo2vTpek69IHmTSruXYtXTctI5ay/TtA/S6TDXdsLr3X9z4p+l4eKz
zv91mL1vrqH9rIdfRaw/yDmds9b24w8bCRPwcGbMxewqu9riNMzkQXk+ximmiThy
rPkGi3qqZcgZ+NLQanzjgGbNrDGsjSze8UuyfoGe9tgeOxHrXudHsbieLvvNruVY
BXeGVRk+5RCLfjqkErH76IrZ8bJ+xQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:20 2025 by rpki-client