Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1681952a-e0c7-35fe-922d-75a90e2edacf.roa
File: 1681952a-e0c7-35fe-922d-75a90e2edacf.roa (raw, json)
Hash identifier: pHdKF0NIdkYL+2U8KT2z2Cb2vR6Bjt2Mmr/h72u4Z68=
Subject key identifier: E8:6D:53:DE:BF:66:07:68:5D:35:9F:88:0A:64:8E:AB:7F:21:37:E3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FDC89E38B68842A63DDEF6280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1681952a-e0c7-35fe-922d-75a90e2edacf.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.146.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:dc:89:e3:8b:68:84:2a:63:dd:ef:62:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=af85e25c-95f1-4f1d-8112-e2f57caaf903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:26:14:f0:81:e3:0b:3b:1f:cf:f2:b5:49:62:
08:0b:cf:1b:d1:b0:a7:f0:cb:dc:e4:5f:38:6c:49:
f0:c5:41:6a:e6:a5:db:55:70:5f:d9:a0:62:11:6a:
5d:98:02:f5:c8:00:b2:49:99:b3:2d:a2:ef:90:57:
27:8d:0c:86:6d:ee:4b:4e:28:8b:fe:f5:27:6c:f6:
3c:9e:36:2e:4b:0c:e5:28:3d:12:ab:42:db:20:22:
fd:99:24:74:da:71:c6:d1:8d:55:85:5c:b1:95:9a:
2e:d1:7d:0f:30:15:22:7e:3b:04:29:a9:fd:85:aa:
c7:8c:1d:3d:5d:fc:71:c9:ec:2c:50:e9:67:a1:80:
eb:13:30:d5:f8:e4:9e:89:00:66:16:af:1c:2b:34:
1f:ae:e7:6a:0f:6a:33:48:31:04:e5:76:46:cb:d1:
be:b5:5b:1a:ea:b4:4d:39:aa:49:39:39:cf:d2:88:
58:43:1c:a0:e1:71:46:07:87:01:66:57:3d:30:09:
c3:1a:28:dd:f2:fb:48:b8:5e:13:09:76:65:70:8e:
fa:ae:07:0b:da:ce:26:91:7b:e7:6c:5b:9c:e6:72:
9f:e2:c3:cc:7f:33:ce:5b:b7:26:4c:5a:2a:7c:fa:
22:9a:2e:f1:03:dd:7c:f1:3a:00:bd:06:7f:65:e7:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:53:DE:BF:66:07:68:5D:35:9F:88:0A:64:8E:AB:7F:21:37:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1681952a-e0c7-35fe-922d-75a90e2edacf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.146.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:db:0c:b7:9d:aa:7a:e0:b9:4e:54:21:01:22:4a:2c:1a:de:
84:98:bb:ae:12:31:ff:65:a3:8b:84:94:6f:9d:7c:bd:80:34:
79:f8:3c:0d:02:fc:0e:ea:84:76:c7:bd:6f:3f:f0:ba:55:24:
72:16:c4:77:c0:06:51:20:3b:68:93:65:0d:db:77:fc:f5:24:
20:68:b3:2a:52:62:2a:f0:c8:a7:df:e7:81:4f:7e:e4:4e:dd:
fe:6c:37:49:18:14:40:2c:72:ba:de:41:a0:27:f6:96:c4:46:
54:8c:c4:9f:5a:07:7a:88:66:3a:5b:2d:ff:0e:36:e6:d9:b8:
65:de:34:ba:e9:47:5d:5e:d3:0b:aa:c6:cc:b7:32:0a:b5:8c:
6e:fc:f3:ed:42:60:5c:12:45:f3:bf:dc:ef:f4:18:aa:d9:99:
5c:96:52:75:37:9b:02:8f:8c:e7:5d:a8:e0:bf:3c:ae:a8:87:
3e:1b:9d:ac:cb:b6:fd:ca:b9:25:23:c1:ba:1e:cb:88:44:a0:
f1:52:fc:e9:ff:77:0d:0a:1d:94:14:af:1c:fc:cf:7f:2a:fc:
2b:7d:73:c9:fc:e3:32:29:87:1f:ad:21:5c:88:fd:5d:bc:ef:
8a:c2:2b:a2:96:1a:7b:d9:d6:7a:cb:6f:49:63:ab:fc:67:98:
92:16:e7:c1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/cieOLaIQqY93vYoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwOTEyMDAwMFoXDTIyMTIxNTA1MDAwMFowLzEtMCsGA1UEAxMk
YWY4NWUyNWMtOTVmMS00ZjFkLTgxMTItZTJmNTdjYWFmOTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSYU8IHjCzsfz/K1SWIIC88b0bCn8Mvc5F84
bEnwxUFq5qXbVXBf2aBiEWpdmAL1yACySZmzLaLvkFcnjQyGbe5LTiiL/vUnbPY8
njYuSwzlKD0Sq0LbICL9mSR02nHG0Y1VhVyxlZou0X0PMBUifjsEKan9harHjB09
XfxxyewsUOlnoYDrEzDV+OSeiQBmFq8cKzQfrudqD2ozSDEE5XZGy9G+tVsa6rRN
OapJOTnP0ohYQxyg4XFGB4cBZlc9MAnDGijd8vtIuF4TCXZlcI76rgcL2s4mkXvn
bFuc5nKf4sPMfzPOW7cmTFoqfPoimi7xA9188ToAvQZ/ZeehxQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOhtU96/ZgdoXTWfiApkjqt/ITfjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMTY4MTk1MmEtZTBjNy0z
NWZlLTkyMmQtNzVhOTBlMmVkYWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOdsMt52qeuC5TlQhASJKLBrehJi7rhIx/2Wji4SUb518vYA0efg8DQL8
DuqEdse9bz/wulUkchbEd8AGUSA7aJNlDdt3/PUkIGizKlJiKvDIp9/ngU9+5E7d
/mw3SRgUQCxyut5BoCf2lsRGVIzEn1oHeohmOlst/w425tm4Zd40uulHXV7TC6rG
zLcyCrWMbvzz7UJgXBJF87/c7/QYqtmZXJZSdTebAo+M512o4L88rqiHPhudrMu2
/cq5JSPBuh7LiESg8VL86f93DQodlBSvHPzPfyr8K31zyfzjMimHH60hXIj9Xbzv
isIropYae9nWestvSWOr/GeYkhbnwQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:00 2025 by rpki-client