Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25a8de71-dea4-3773-befe-0c865ecfdd9f.roa
File: 25a8de71-dea4-3773-befe-0c865ecfdd9f.roa (raw, json)
Hash identifier: gWsSwtJAreVLyVF0CuJlEtXbeJZEiNHaykei4Od0YP8=
Subject key identifier: 01:A5:CE:DD:ED:4F:92:05:7A:02:4B:1E:43:F3:1E:92:83:02:84:98
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D3D8FFE2AF10B56F0C22FD400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25a8de71-dea4-3773-befe-0c865ecfdd9f.roa
Signing time: Tue 15 Mar 2022 04:00:00 +0000
ROA not before: Tue 15 Mar 2022 04:00:00 +0000
ROA not after: Tue 19 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.158.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:3d:8f:fe:2a:f1:0b:56:f0:c2:2f:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 15 04:00:00 2022 GMT
Not After : Apr 19 04:00:00 2022 GMT
Subject: CN=eeb8565b-01cb-4bb8-adcd-2d2dccebc017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:28:54:a3:6e:3a:a0:3a:15:84:17:3e:d1:dd:
7b:fe:87:90:32:b3:f6:f2:f6:75:f2:97:40:8a:a3:
8e:07:c4:94:69:06:84:f8:86:77:99:e0:d7:8b:36:
53:8c:f4:80:81:10:12:79:31:13:cb:cd:71:25:d7:
99:c7:bd:2b:92:6e:5a:85:70:f3:9a:3b:4b:d2:fe:
ac:0b:b7:db:d8:1f:df:d7:09:5d:6b:87:a5:b6:21:
93:bd:b0:a4:04:05:16:21:12:71:84:b2:56:d7:4e:
f9:5f:76:af:36:03:c8:01:ad:57:07:8c:8a:36:7b:
43:df:06:78:9c:b4:c6:de:fd:d5:b4:82:36:7b:6a:
af:ca:07:65:45:10:81:39:bc:69:7a:b8:bd:b5:1d:
6a:dc:d0:30:29:37:fb:fe:51:98:1b:8e:37:7f:c1:
f0:6d:c5:4e:0b:3a:93:c3:8e:a2:62:34:49:88:45:
88:c7:cf:2b:40:83:78:ca:11:8f:a1:86:7b:d3:3d:
2c:dc:95:5a:4a:a3:9b:b4:43:42:84:2c:07:df:93:
5d:db:1c:49:7a:16:33:72:e8:12:bc:0b:54:33:43:
e1:fb:51:2f:f8:91:69:08:28:ad:74:36:4b:d5:76:
65:b8:11:21:0f:8c:a9:0f:16:0e:41:d8:64:59:9a:
d5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A5:CE:DD:ED:4F:92:05:7A:02:4B:1E:43:F3:1E:92:83:02:84:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25a8de71-dea4-3773-befe-0c865ecfdd9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.158.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:25:56:6d:d0:93:19:6f:e0:01:f1:3c:bd:5f:96:82:e0:a8:
07:c4:e8:95:a2:ba:10:b2:7a:84:b8:7e:12:c1:cd:a4:0d:23:
70:b3:29:50:4b:ef:a2:7a:bc:0e:a8:ae:c2:96:3e:f4:b6:47:
56:7d:ec:7e:9f:a6:79:22:7d:19:69:67:42:85:83:18:23:ae:
5c:5d:ae:f2:b4:39:5f:88:c8:58:d0:d3:99:e8:76:47:ab:11:
8c:70:5d:fe:5b:9c:7c:ba:bf:eb:3b:12:8b:f1:0c:c5:2c:41:
a6:3f:2d:6b:33:45:9c:20:84:1a:3c:e4:b0:fa:a4:87:8c:de:
63:e2:a3:19:8d:9f:2e:3c:68:4c:50:c4:19:8e:ec:9a:31:d8:
82:49:47:52:09:f6:94:a5:e0:74:dd:0b:c2:24:81:f1:12:d1:
0d:a7:3f:c8:97:be:6b:a8:d6:fc:e1:fb:62:8b:a4:a9:e9:c4:
2c:38:a1:73:d6:ba:7c:cb:31:a5:5d:bd:22:ec:d6:9e:fd:9e:
eb:93:88:88:aa:8b:21:4b:b2:5a:cd:9f:04:de:c7:2d:16:f5:
82:f5:53:cd:5d:42:fe:a8:62:e9:23:42:2f:d8:cf:45:d1:be:
6c:e3:27:f2:e3:50:bc:56:01:5d:97:54:4e:e8:73:0c:af:10:
0a:2f:3f:70
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD09j/4q8QtW8MIv1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxNTA0MDAwMFoXDTIyMDQxOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWViODU2NWItMDFjYi00YmI4LWFkY2QtMmQyZGNjZWJjMDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgChUo246oDoVhBc+0d17/oeQMrP28vZ18pdA
iqOOB8SUaQaE+IZ3meDXizZTjPSAgRASeTETy81xJdeZx70rkm5ahXDzmjtL0v6s
C7fb2B/f1wlda4eltiGTvbCkBAUWIRJxhLJW1075X3avNgPIAa1XB4yKNntD3wZ4
nLTG3v3VtII2e2qvygdlRRCBObxperi9tR1q3NAwKTf7/lGYG443f8HwbcVOCzqT
w46iYjRJiEWIx88rQIN4yhGPoYZ70z0s3JVaSqObtENChCwH35Nd2xxJehYzcugS
vAtUM0Ph+1Ev+JFpCCitdDZL1XZluBEhD4ypDxYOQdhkWZrV/QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAGlzt3tT5IFegJLHkPzHpKDAoSYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjVhOGRlNzEtZGVhNC0z
NzczLWJlZmUtMGM4NjVlY2ZkZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJ4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVSVWbdCTGW/gAfE8vV+WguCoB8TolaK6ELJ6hLh+EsHNpA0jcLMpUEvv
onq8DqiuwpY+9LZHVn3sfp+meSJ9GWlnQoWDGCOuXF2u8rQ5X4jIWNDTmeh2R6sR
jHBd/lucfLq/6zsSi/EMxSxBpj8tazNFnCCEGjzksPqkh4zeY+KjGY2fLjxoTFDE
GY7smjHYgklHUgn2lKXgdN0LwiSB8RLRDac/yJe+a6jW/OH7YoukqenELDihc9a6
fMsxpV29IuzWnv2e65OIiKqLIUuyWs2fBN7HLRb1gvVTzV1C/qhi6SNCL9jPRdG+
bOMn8uNQvFYBXZdUTuhzDK8QCi8/cA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 18:49:34 2025 by rpki-client