Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b99a4b7-9068-3c81-8dd4-6e4a15465330.roa
File: 2b99a4b7-9068-3c81-8dd4-6e4a15465330.roa (raw, json)
Hash identifier: VNVy87gBMmk12CMRv+cdFEzz+zvxMIX3dhaqzeGMgmY=
Subject key identifier: C7:A3:64:01:12:DE:4A:C9:55:C5:E0:26:E9:83:7D:D1:D0:43:00:AB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCB43D06CFDAA669E01031240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b99a4b7-9068-3c81-8dd4-6e4a15465330.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:43:d0:6c:fd:aa:66:9e:01:03:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=d626fa74-efd1-40f1-ab9f-d7816cb4d23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:68:28:a1:30:77:e1:65:70:9d:a1:81:b6:
af:57:28:bb:25:c8:c7:ca:06:35:57:b2:8b:13:30:
3b:e0:8d:4b:ba:98:be:49:44:cf:32:ba:5e:22:29:
8b:3d:a0:61:28:ca:33:a7:6d:3a:26:ff:7d:6a:60:
32:4b:cf:eb:86:64:98:d0:19:9a:5f:7f:f2:56:d2:
15:62:92:c5:a9:ae:cc:55:83:05:d5:0a:56:28:4a:
b4:8a:fd:c1:65:10:d5:49:31:d1:24:56:2b:48:78:
f8:40:b4:65:dd:77:2a:81:11:75:2c:d2:3c:ca:80:
1c:c6:33:71:2e:69:39:0e:84:1c:f1:85:47:2c:ab:
d9:cf:cf:e0:8c:39:78:22:a8:8a:f6:94:dd:81:a7:
fc:23:b1:3f:8f:82:41:b2:fe:93:96:ce:4f:8f:9f:
f0:38:19:f6:e5:90:06:69:c3:25:28:c7:13:65:fa:
38:dc:a3:71:bc:c6:85:08:9f:21:7d:55:57:45:99:
1e:56:f4:d8:ea:10:d0:03:89:e1:b1:e8:21:e4:bb:
06:71:84:ef:ce:fb:f8:52:11:c0:a7:7d:7a:80:56:
95:ef:ea:4a:50:f8:2f:26:77:7a:28:ce:fb:2c:03:
51:54:cc:4b:cf:ce:b5:30:4a:b9:11:72:05:55:15:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A3:64:01:12:DE:4A:C9:55:C5:E0:26:E9:83:7D:D1:D0:43:00:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b99a4b7-9068-3c81-8dd4-6e4a15465330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:b7:0f:1a:df:9f:4a:1a:91:42:e0:80:2c:00:fb:6d:a6:bc:
28:d7:93:77:e9:6d:a3:21:07:a8:f7:29:66:5a:87:d3:30:db:
4a:55:0a:4c:a3:bc:05:cd:2d:19:b5:a5:f7:42:50:84:f2:34:
6b:0b:e5:ae:46:ea:0d:02:9f:e0:7c:eb:71:bb:e3:2d:d2:71:
4c:71:f7:52:37:ad:3a:82:01:11:ab:4f:2f:79:b1:f1:4f:97:
9b:51:bf:7f:79:81:1b:56:b2:27:a6:cc:7b:7d:44:3a:ad:9f:
83:e6:30:b8:c9:74:74:20:6a:07:35:b7:de:49:a7:02:c6:ef:
3a:7b:f0:0a:82:a4:b4:d1:e0:66:9e:1a:b2:83:ba:8d:c5:e3:
23:83:81:f8:22:1e:02:8e:a6:46:aa:ec:35:fb:39:8c:08:d5:
28:db:48:70:4b:1e:53:ee:64:60:4d:d4:9e:7c:26:a2:43:39:
c1:64:5d:f4:37:ee:33:23:f1:5d:8a:cb:ec:a9:0c:51:ee:e0:
6b:66:c2:44:ac:58:c3:9d:e3:35:9e:61:78:cf:12:24:e7:76:
ec:46:27:a4:be:a7:12:e6:d0:1c:85:08:f8:a8:aa:f9:f1:33:
2e:d8:c8:b3:fb:3f:12:a2:a7:fc:f9:8a:e9:09:37:a4:66:7e:
78:39:c0:6b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/LQ9Bs/apmngEDEkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwMzEyMDAwMFoXDTIyMTIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZDYyNmZhNzQtZWZkMS00MGYxLWFiOWYtZDc4MTZjYjRkMjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko1oKKEwd+FlcJ2hgbavVyi7JcjHygY1V7KL
EzA74I1Lupi+SUTPMrpeIimLPaBhKMozp206Jv99amAyS8/rhmSY0BmaX3/yVtIV
YpLFqa7MVYMF1QpWKEq0iv3BZRDVSTHRJFYrSHj4QLRl3XcqgRF1LNI8yoAcxjNx
Lmk5DoQc8YVHLKvZz8/gjDl4IqiK9pTdgaf8I7E/j4JBsv6Tls5Pj5/wOBn25ZAG
acMlKMcTZfo43KNxvMaFCJ8hfVVXRZkeVvTY6hDQA4nhsegh5LsGcYTvzvv4UhHA
p316gFaV7+pKUPgvJnd6KM77LANRVMxLz861MEq5EXIFVRXueQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMejZAES3krJVcXgJumDfdHQQwCrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmI5OWE0YjctOTA2OC0z
YzgxLThkZDQtNmU0YTE1NDY1MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJ0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYrcPGt+fShqRQuCALAD7baa8KNeTd+ltoyEHqPcpZlqH0zDbSlUKTKO8
Bc0tGbWl90JQhPI0awvlrkbqDQKf4HzrcbvjLdJxTHH3UjetOoIBEatPL3mx8U+X
m1G/f3mBG1ayJ6bMe31EOq2fg+YwuMl0dCBqBzW33kmnAsbvOnvwCoKktNHgZp4a
soO6jcXjI4OB+CIeAo6mRqrsNfs5jAjVKNtIcEseU+5kYE3UnnwmokM5wWRd9Dfu
MyPxXYrL7KkMUe7ga2bCRKxYw53jNZ5heM8SJOd27EYnpL6nEubQHIUI+Kiq+fEz
LtjIs/s/EqKn/PmK6Qk3pGZ+eDnAaw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:29 2025 by rpki-client