Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1aeaf24b-2d8d-3a92-82c5-0450e0b6ea19.roa
File: 1aeaf24b-2d8d-3a92-82c5-0450e0b6ea19.roa (raw, json)
Hash identifier: 4LqrS5bca8my/HlHUMJdJSv0ruGg4oFry1hlHt8eCDw=
Subject key identifier: A4:9E:DC:C2:E2:D3:6C:CF:1B:8C:EA:7A:C6:6E:64:9B:32:4D:8B:04
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406E7E6586F2E7016354FE2900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1aeaf24b-2d8d-3a92-82c5-0450e0b6ea19.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.177.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6e:7e:65:86:f2:e7:01:63:54:fe:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=2c29187d-8bf9-4ab6-b47d-1da4cd7ef828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:4b:a6:8c:83:b0:6c:e1:ff:e2:17:a8:8b:
09:21:f5:2b:43:25:cf:f5:8a:5c:c3:4d:02:30:d1:
22:3c:21:2f:05:8a:0b:4c:7d:ff:61:22:aa:10:41:
64:d3:2c:d6:87:50:35:7e:37:b7:af:46:d6:4e:02:
47:4b:16:a4:fe:a4:38:8d:e0:59:c9:0d:c6:a3:15:
d6:7e:03:9c:44:cb:2a:f9:dc:92:2e:ef:be:98:5c:
e5:87:ee:ec:23:38:99:f7:ce:a7:86:05:51:de:57:
ed:b0:63:d6:9b:bb:4a:8c:b8:a6:11:3e:bf:40:ed:
fc:1e:58:3c:58:46:15:5f:2b:45:2b:93:9f:8e:50:
fd:22:8b:74:11:ff:72:76:82:61:81:5e:0b:5f:26:
84:c1:0d:3a:2d:7d:d5:25:61:92:e1:d3:89:e0:2a:
ba:85:48:1d:55:48:b8:46:6f:f8:aa:88:c4:aa:34:
bc:65:f2:a3:cc:0d:a3:85:9e:54:fb:c0:5c:3d:4f:
c6:dc:93:a0:ea:31:6a:c1:6e:48:ff:57:cb:40:ce:
18:5f:91:a1:74:30:30:3f:04:7c:13:fb:83:3f:43:
9f:90:10:25:fb:ca:d6:43:9d:5b:f8:7f:9a:70:a3:
51:da:86:63:17:6c:92:7a:96:8c:b8:ec:77:f1:5c:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9E:DC:C2:E2:D3:6C:CF:1B:8C:EA:7A:C6:6E:64:9B:32:4D:8B:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1aeaf24b-2d8d-3a92-82c5-0450e0b6ea19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:7d:3e:57:07:e1:eb:27:3b:4b:8d:32:12:eb:40:43:71:aa:
48:75:e4:92:c8:24:a0:8f:7b:12:be:07:9e:b9:7d:9e:a1:25:
64:04:6d:f1:98:ad:5f:cc:ca:88:5d:1c:75:e4:6c:6b:e9:35:
02:fb:6e:ef:f8:21:9c:15:c7:c8:f0:f4:18:55:fe:42:96:25:
db:ab:1a:ce:77:1b:8d:62:c7:19:64:7a:17:f9:ef:8e:50:e3:
94:e1:65:e5:6f:5f:f3:2e:c2:30:d0:32:41:71:b8:34:7b:ff:
c3:14:0a:4e:67:ef:b9:c5:2e:23:cf:23:3b:67:f0:35:ca:03:
17:20:b9:85:fa:9e:67:22:80:c1:33:f8:2e:44:14:1a:a9:f8:
64:13:18:93:87:73:d1:c0:36:55:77:7a:f9:a8:b8:1d:0e:0c:
6d:92:54:27:e4:bc:b1:40:7d:1a:d3:7a:7b:99:98:26:0e:48:
50:5a:10:c0:a0:6b:32:0a:e1:d4:0e:bf:47:ad:b6:54:c9:b3:
19:22:c1:ba:5a:5c:f4:da:dd:cc:60:0f:27:49:ab:b2:99:69:
56:71:3e:61:b8:b4:85:5d:40:3b:23:bd:0e:28:89:f3:0f:43:
66:51:bc:35:d2:c2:b1:32:61:a6:a0:a1:f8:0b:d8:c2:4b:ba:
b7:c2:cf:14
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBufmWG8ucBY1T+KQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIzMTEyMDAwMFoXDTIzMDIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
MmMyOTE4N2QtOGJmOS00YWI2LWI0N2QtMWRhNGNkN2VmODI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx51LpoyDsGzh/+IXqIsJIfUrQyXP9Ypcw00C
MNEiPCEvBYoLTH3/YSKqEEFk0yzWh1A1fje3r0bWTgJHSxak/qQ4jeBZyQ3GoxXW
fgOcRMsq+dySLu++mFzlh+7sIziZ986nhgVR3lftsGPWm7tKjLimET6/QO38Hlg8
WEYVXytFK5OfjlD9Iot0Ef9ydoJhgV4LXyaEwQ06LX3VJWGS4dOJ4Cq6hUgdVUi4
Rm/4qojEqjS8ZfKjzA2jhZ5U+8BcPU/G3JOg6jFqwW5I/1fLQM4YX5GhdDAwPwR8
E/uDP0OfkBAl+8rWQ51b+H+acKNR2oZjF2ySepaMuOx38VxUuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKSe3MLi02zPG4zqesZuZJsyTYsEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMWFlYWYyNGItMmQ4ZC0z
YTkyLTgyYzUtMDQ1MGUwYjZlYTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAELEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMH0+Vwfh6yc7S40yEutAQ3GqSHXkksgkoI97Er4Hnrl9nqElZARt8Zit
X8zKiF0cdeRsa+k1Avtu7/ghnBXHyPD0GFX+QpYl26sazncbjWLHGWR6F/nvjlDj
lOFl5W9f8y7CMNAyQXG4NHv/wxQKTmfvucUuI88jO2fwNcoDFyC5hfqeZyKAwTP4
LkQUGqn4ZBMYk4dz0cA2VXd6+ai4HQ4MbZJUJ+S8sUB9GtN6e5mYJg5IUFoQwKBr
Mgrh1A6/R622VMmzGSLBulpc9NrdzGAPJ0mrsplpVnE+Ybi0hV1AOyO9DiiJ8w9D
ZlG8NdLCsTJhpqCh+AvYwku6t8LPFA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:22 2025 by rpki-client