Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/289e5c9a-f37f-3db1-b5b9-a65e76113e09.roa
File: 289e5c9a-f37f-3db1-b5b9-a65e76113e09.roa (raw, json)
Hash identifier: 37/iQnvCeOUEzuk7hHtz7bMbItN60Wn0KB7pB7PTQ0g=
Subject key identifier: DA:20:57:92:85:9D:E2:CD:D1:9C:F0:9F:E5:FF:EA:47:35:4E:DC:2F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E013011D4054BCB41BBCF7020
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/289e5c9a-f37f-3db1-b5b9-a65e76113e09.roa
Signing time: Mon 23 May 2022 12:00:00 +0000
ROA not before: Mon 23 May 2022 12:00:00 +0000
ROA not after: Tue 28 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:01:30:11:d4:05:4b:cb:41:bb:cf:70:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 23 12:00:00 2022 GMT
Not After : Jun 28 04:00:00 2022 GMT
Subject: CN=53522c88-d228-4e47-ae22-3557e314455b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:49:c7:d5:25:06:60:cd:dc:f5:cd:14:10:
dc:ad:fe:4e:16:4f:9a:3a:e1:e4:c5:38:19:a0:43:
4f:73:2e:ff:68:10:34:92:8d:69:b7:eb:f7:5e:d2:
9c:44:34:bc:d6:71:99:c1:85:42:00:6a:5d:1f:c2:
d6:d9:2d:d7:a1:19:e6:5d:2c:6d:06:f2:64:7a:00:
16:b1:45:e5:12:f5:12:eb:59:35:35:19:35:de:17:
77:4f:99:1b:c0:45:43:0d:f1:0a:43:b2:73:b0:5e:
a6:a3:95:78:df:40:7b:81:96:7e:da:91:80:5e:1b:
5b:08:9f:a9:cf:69:b4:d7:18:7e:3f:2f:02:78:ef:
86:81:6a:8e:be:2d:ba:f6:50:ec:43:3a:b3:ac:7d:
34:38:43:c5:47:e7:ad:e9:7e:15:c3:42:bc:b8:9c:
b1:9d:f0:2e:c6:91:1c:ab:79:b5:ed:99:7c:a5:9b:
4c:bd:9d:5e:c5:9e:be:55:9e:a8:ee:3b:a0:84:d2:
d3:19:a1:87:d3:fb:3c:7b:8d:7f:6e:84:5c:08:19:
dc:7f:29:4b:00:ed:70:fb:3a:59:f3:9e:4f:15:fd:
f7:db:ce:78:c6:95:5b:c3:7f:d4:d1:c1:98:07:b6:
d7:37:de:f9:cd:3f:5b:f4:3d:e2:fc:1a:e5:53:94:
63:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:20:57:92:85:9D:E2:CD:D1:9C:F0:9F:E5:FF:EA:47:35:4E:DC:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/289e5c9a-f37f-3db1-b5b9-a65e76113e09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:08:60:b2:79:95:41:59:d1:26:41:8c:ff:36:d8:9a:e1:ae:
09:a0:05:a9:92:9f:b4:22:68:f4:02:99:72:c2:33:6a:da:a9:
f6:bc:d8:a2:55:95:a8:7c:6e:52:6d:f2:9a:94:1a:ce:09:0a:
2e:17:cc:04:f5:48:2a:13:df:9e:6d:e2:11:dd:5b:1e:36:ab:
00:9d:c6:4e:3c:9e:43:6b:f0:cf:fa:70:f9:74:88:0d:cf:03:
f1:f6:9d:8f:ac:c0:84:b6:2e:7e:65:56:2b:84:e5:80:93:e5:
01:75:1e:23:ee:9e:33:d8:da:e8:14:40:16:4f:bc:23:a7:67:
ee:6b:96:b7:98:6f:f5:c7:10:3f:3f:d3:71:28:d5:6a:e9:78:
08:f9:1e:0b:e6:c4:9c:e6:95:93:10:78:3d:6f:a6:bc:7d:1d:
38:66:8b:8a:d0:89:ec:30:d5:76:fb:f2:63:81:5e:9d:99:b0:
69:ac:f7:6d:89:2c:e6:f0:44:08:99:e1:3e:40:ff:02:8b:ef:
e9:b4:dd:a0:96:86:ef:73:c2:0c:7e:d3:49:7c:20:f8:f4:77:
26:7a:6e:c7:5c:72:af:f7:26:88:b4:65:94:b9:0c:39:1f:c9:
ae:60:09:8b:43:e0:75:57:f4:91:0b:fc:48:0c:e8:f4:32:8b:
00:ea:74:06
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4BMBHUBUvLQbvPcCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUyMzEyMDAwMFoXDTIyMDYyODA0MDAwMFowLzEtMCsGA1UEAxMk
NTM1MjJjODgtZDIyOC00ZTQ3LWFlMjItMzU1N2UzMTQ0NTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAtJx9UlBmDN3PXNFBDcrf5OFk+aOuHkxTgZ
oENPcy7/aBA0ko1pt+v3XtKcRDS81nGZwYVCAGpdH8LW2S3XoRnmXSxtBvJkegAW
sUXlEvUS61k1NRk13hd3T5kbwEVDDfEKQ7JzsF6mo5V430B7gZZ+2pGAXhtbCJ+p
z2m01xh+Py8CeO+GgWqOvi269lDsQzqzrH00OEPFR+et6X4Vw0K8uJyxnfAuxpEc
q3m17Zl8pZtMvZ1exZ6+VZ6o7jughNLTGaGH0/s8e41/boRcCBncfylLAO1w+zpZ
855PFf332854xpVbw3/U0cGYB7bXN975zT9b9D3i/BrlU5Rj9wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNogV5KFneLN0Zzwn+X/6kc1TtwvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMjg5ZTVjOWEtZjM3Zi0z
ZGIxLWI1YjktYTY1ZTc2MTEzZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXwhgsnmVQVnRJkGM/zbYmuGuCaAFqZKftCJo9AKZcsIzatqp9rzYolWV
qHxuUm3ympQazgkKLhfMBPVIKhPfnm3iEd1bHjarAJ3GTjyeQ2vwz/pw+XSIDc8D
8fadj6zAhLYufmVWK4TlgJPlAXUeI+6eM9ja6BRAFk+8I6dn7muWt5hv9ccQPz/T
cSjVaul4CPkeC+bEnOaVkxB4PW+mvH0dOGaLitCJ7DDVdvvyY4FenZmwaaz3bYks
5vBECJnhPkD/Aovv6bTdoJaG73PCDH7TSXwg+PR3Jnpux1xyr/cmiLRllLkMOR/J
rmAJi0PgdVf0kQv8SAzo9DKLAOp0Bg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:59 2025 by rpki-client