Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1df3d321-2bf6-3e6d-9169-3758bea82ac3.roa
File: 1df3d321-2bf6-3e6d-9169-3758bea82ac3.roa (raw, json)
Hash identifier: /ygVCwQuXTfZ4C0M5WaSjOfmHQBpTN7ZnbBg8nqeqpo=
Subject key identifier: DD:37:31:F3:47:02:EE:22:D1:B3:30:CB:4A:2A:93:77:A9:9F:A5:26
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CC8392CFEBD5B3C5D77C66180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1df3d321-2bf6-3e6d-9169-3758bea82ac3.roa
Signing time: Tue 01 Feb 2022 05:00:00 +0000
ROA not before: Tue 01 Feb 2022 05:00:00 +0000
ROA not after: Tue 08 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:c8:39:2c:fe:bd:5b:3c:5d:77:c6:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 05:00:00 2022 GMT
Not After : Mar 8 05:00:00 2022 GMT
Subject: CN=f6644dca-d23f-45f4-b195-8bd8fa1fe48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:5c:af:77:d3:21:fd:2f:a6:7c:a5:38:03:
8c:2d:d2:41:61:af:88:47:0a:81:6b:d8:89:74:b8:
a8:30:d7:6f:07:ca:b3:12:8b:64:6f:2a:48:17:ab:
91:9e:ca:76:a5:28:f8:5a:73:a4:e5:ca:2a:b9:3c:
2d:a2:08:56:79:5b:47:10:34:b4:b1:ad:ee:29:25:
36:70:01:4e:3d:2a:36:cd:53:65:1c:36:b0:da:d8:
6c:2e:dc:d7:f9:0c:0c:70:66:6e:a9:b7:5a:2d:13:
4a:4a:90:f5:48:05:19:ee:2f:e0:25:7a:63:2d:10:
bd:43:b4:1d:b3:9b:14:5d:41:fa:e3:1d:cd:c6:34:
c5:d3:7d:a2:b1:76:6e:5f:9d:ec:f9:00:e6:61:2e:
50:9f:d4:0c:7e:ae:b4:95:88:ce:34:aa:92:d3:95:
1a:52:89:01:16:cd:1d:3a:1f:67:1e:54:cc:e1:cb:
26:11:65:a5:71:34:35:47:cc:e3:a5:d7:05:d4:7d:
f5:26:9d:92:07:a1:76:5d:83:33:07:b8:13:e8:fb:
03:17:ac:67:27:d7:4f:9a:f1:15:e7:3b:42:bc:e6:
01:06:39:eb:80:50:a5:39:7a:d5:33:2a:40:fe:60:
42:80:d2:72:01:0a:6f:76:3e:66:68:72:ab:31:67:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:37:31:F3:47:02:EE:22:D1:B3:30:CB:4A:2A:93:77:A9:9F:A5:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1df3d321-2bf6-3e6d-9169-3758bea82ac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:d2:0e:04:72:34:49:ce:ed:b9:60:4d:c2:4a:a1:46:f0:b9:
2e:bc:7f:aa:19:b5:90:72:f6:f8:7c:e1:af:1a:e8:bd:74:67:
ce:d4:f9:67:dc:7e:76:86:8d:d1:d7:26:7d:d3:dc:7d:82:59:
3c:4f:ab:51:ca:7b:44:13:1e:99:ea:24:81:23:c2:b2:1a:1a:
60:d4:e0:1d:38:dc:a5:c9:54:d2:f2:2e:30:7a:d3:70:7c:dc:
ef:23:6a:e3:0e:04:d9:00:9e:f7:ce:4f:fb:6c:6b:c2:66:1b:
60:97:c4:a5:aa:f1:46:57:f8:7d:6a:51:03:99:7d:ca:b3:f3:
29:4b:f8:85:75:8b:48:a2:ff:22:59:fa:f9:6c:24:31:c4:a0:
59:bc:b0:9e:f7:8f:35:97:a6:8b:c7:3f:55:b6:1e:d9:7f:b3:
e2:cf:cd:c5:81:dc:d5:f0:bf:8f:f2:a6:25:b4:6b:cf:9e:ab:
cc:89:ad:57:77:45:12:bd:1e:3d:ce:5f:aa:10:a2:cf:f6:db:
36:bc:41:8e:52:24:26:43:7f:ef:aa:39:8f:d4:0b:0d:fd:94:
a7:54:67:a8:a2:2b:e0:64:10:e8:d6:02:6d:4a:39:2b:e5:98:
6d:7f:27:dd:c2:73:ff:48:e7:6d:2a:a8:b4:2f:4e:e7:2d:cd:
10:68:96:a8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzIOSz+vVs8XXfGYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIwMTA1MDAwMFoXDTIyMDMwODA1MDAwMFowLzEtMCsGA1UEAxMk
ZjY2NDRkY2EtZDIzZi00NWY0LWIxOTUtOGJkOGZhMWZlNDhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOFcr3fTIf0vpnylOAOMLdJBYa+IRwqBa9iJ
dLioMNdvB8qzEotkbypIF6uRnsp2pSj4WnOk5coquTwtoghWeVtHEDS0sa3uKSU2
cAFOPSo2zVNlHDaw2thsLtzX+QwMcGZuqbdaLRNKSpD1SAUZ7i/gJXpjLRC9Q7Qd
s5sUXUH64x3NxjTF032isXZuX53s+QDmYS5Qn9QMfq60lYjONKqS05UaUokBFs0d
Oh9nHlTM4csmEWWlcTQ1R8zjpdcF1H31Jp2SB6F2XYMzB7gT6PsDF6xnJ9dPmvEV
5ztCvOYBBjnrgFClOXrVMypA/mBCgNJyAQpvdj5maHKrMWefnwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN03MfNHAu4i0bMwy0oqk3epn6UmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMWRmM2QzMjEtMmJmNi0z
ZTZkLTkxNjktMzc1OGJlYTgyYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASdIOBHI0Sc7tuWBNwkqhRvC5Lrx/qhm1kHL2+HzhrxrovXRnztT5Z9x+
doaN0dcmfdPcfYJZPE+rUcp7RBMemeokgSPCshoaYNTgHTjcpclU0vIuMHrTcHzc
7yNq4w4E2QCe985P+2xrwmYbYJfEparxRlf4fWpRA5l9yrPzKUv4hXWLSKL/Iln6
+WwkMcSgWbywnvePNZemi8c/VbYe2X+z4s/NxYHc1fC/j/KmJbRrz56rzImtV3dF
Er0ePc5fqhCiz/bbNrxBjlIkJkN/76o5j9QLDf2Up1RnqKIr4GQQ6NYCbUo5K+WY
bX8n3cJz/0jnbSqotC9O5y3NEGiWqA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:58 2025 by rpki-client