Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ca2f35b-3131-30cd-9ab4-9d240127a2cc.roa
File: 2ca2f35b-3131-30cd-9ab4-9d240127a2cc.roa (raw, json)
Hash identifier: UKLIsZXqUPweExpcrZ/HF4Hywaw9jLUsDoELLY9XMnY=
Subject key identifier: 70:21:1E:19:91:E9:86:17:EF:F4:4E:52:DD:0D:21:73:BC:43:71:F3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2EC9F088E401AC2EA9EB4EC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ca2f35b-3131-30cd-9ab4-9d240127a2cc.roa
Signing time: Wed 09 Mar 2022 05:00:00 +0000
ROA not before: Wed 09 Mar 2022 05:00:00 +0000
ROA not after: Wed 13 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.75.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2e:c9:f0:88:e4:01:ac:2e:a9:eb:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 9 05:00:00 2022 GMT
Not After : Apr 13 04:00:00 2022 GMT
Subject: CN=517a0974-817e-4f99-8e78-113473a6a799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:2b:cc:5b:98:6c:39:80:0c:17:56:1d:64:
a0:0d:6b:cd:88:af:d9:13:68:ab:7c:a9:42:4d:16:
10:d9:bc:d2:da:58:de:73:0c:2d:8b:9c:e4:3b:e0:
d4:9d:e2:77:ae:83:74:dc:58:39:bf:7c:31:80:d3:
d1:cf:01:e9:9c:c9:8c:c7:62:54:df:a7:2f:05:ef:
fe:37:95:a4:54:f4:b3:6a:db:f2:40:19:63:7f:79:
91:4f:41:af:42:cd:eb:45:db:d7:a1:a5:05:63:9d:
8c:b5:c7:df:d5:0d:21:96:be:9c:2e:6a:2b:75:45:
ad:50:8b:4f:13:5a:5a:24:ae:2c:e3:3a:b4:50:e0:
5e:13:48:2a:3c:63:39:d0:23:0f:00:6f:04:45:9c:
30:78:b7:6e:ee:28:5a:ad:19:55:5b:77:07:8b:7d:
3e:47:40:eb:07:58:5c:a0:43:16:62:c7:d1:f8:20:
12:f5:77:32:94:79:5f:30:0a:5e:a7:4f:36:37:03:
84:3d:d0:fe:79:f4:14:1c:6f:cf:89:8e:23:87:86:
2d:2f:83:5a:07:6b:eb:55:3b:cb:d5:3c:77:c6:69:
5f:6e:35:f6:99:a6:d8:36:28:58:ed:93:27:d5:45:
60:6b:21:78:cb:75:0e:be:eb:ce:ae:3e:44:d1:21:
02:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:21:1E:19:91:E9:86:17:EF:F4:4E:52:DD:0D:21:73:BC:43:71:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2ca2f35b-3131-30cd-9ab4-9d240127a2cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.75.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:6c:b1:b9:c5:1b:2a:10:93:98:a0:69:55:a5:1f:b5:dc:0f:
46:74:f6:98:9b:54:23:c5:31:0a:3f:c2:02:8b:b9:f4:40:38:
b5:96:ff:36:bd:be:be:98:2b:a6:3f:8f:ac:ec:c2:8a:a1:25:
ee:01:3b:c1:24:4d:5e:18:20:6d:d5:09:84:61:8d:6a:30:f3:
6f:2e:f1:41:f4:09:b8:ca:b2:a9:23:97:64:85:b3:e8:cb:c2:
f3:37:3d:a6:b1:2f:aa:2d:c2:55:8a:9a:39:67:47:a1:d7:13:
cf:c0:11:dc:78:06:c1:ec:eb:55:10:63:af:32:f5:4a:68:3a:
14:08:fa:ad:65:d0:4b:50:89:d4:77:15:64:19:0a:66:78:bc:
a7:d1:2a:a9:e3:d6:99:dd:ff:60:04:1a:9b:d6:ff:cc:a6:fe:
92:15:f7:d1:27:02:ed:da:85:79:41:fd:79:11:51:ca:f0:7c:
ce:ae:94:45:43:e0:15:0b:dc:a7:1a:d8:5d:69:cc:9c:4a:d6:
87:c1:03:74:78:20:e3:0b:c4:4c:39:3c:3e:a9:6c:a6:18:17:
ab:a1:ab:1a:23:98:9d:69:11:2e:89:fc:53:56:62:d8:f9:a2:
f5:f1:37:64:2a:c0:51:db:24:ae:61:df:59:93:0c:4e:86:c6:
47:b9:bb:b2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0uyfCI5AGsLqnrTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMwOTA1MDAwMFoXDTIyMDQxMzA0MDAwMFowLzEtMCsGA1UEAxMk
NTE3YTA5NzQtODE3ZS00Zjk5LThlNzgtMTEzNDczYTZhNzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXsrzFuYbDmADBdWHWSgDWvNiK/ZE2irfKlC
TRYQ2bzS2ljecwwti5zkO+DUneJ3roN03Fg5v3wxgNPRzwHpnMmMx2JU36cvBe/+
N5WkVPSzatvyQBljf3mRT0GvQs3rRdvXoaUFY52Mtcff1Q0hlr6cLmordUWtUItP
E1paJK4s4zq0UOBeE0gqPGM50CMPAG8ERZwweLdu7iharRlVW3cHi30+R0DrB1hc
oEMWYsfR+CAS9XcylHlfMApep082NwOEPdD+efQUHG/PiY4jh4YtL4NaB2vrVTvL
1Tx3xmlfbjX2mabYNihY7ZMn1UVgayF4y3UOvuvOrj5E0SEC8wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHAhHhmR6YYX7/ROUt0NIXO8Q3HzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmNhMmYzNWItMzEzMS0z
MGNkLTlhYjQtOWQyNDAxMjdhMmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEEswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABWyxucUbKhCTmKBpVaUftdwPRnT2mJtUI8UxCj/CAou59EA4tZb/Nr2+
vpgrpj+PrOzCiqEl7gE7wSRNXhggbdUJhGGNajDzby7xQfQJuMqyqSOXZIWz6MvC
8zc9prEvqi3CVYqaOWdHodcTz8AR3HgGwezrVRBjrzL1Smg6FAj6rWXQS1CJ1HcV
ZBkKZni8p9EqqePWmd3/YAQam9b/zKb+khX30ScC7dqFeUH9eRFRyvB8zq6URUPg
FQvcpxrYXWnMnErWh8EDdHgg4wvETDk8PqlsphgXq6GrGiOYnWkRLon8U1Zi2Pmi
9fE3ZCrAUdskrmHfWZMMTobGR7m7sg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:39 2025 by rpki-client