Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d9d2a95-891e-3e38-bec2-fe1024f77d1e.roa
File: 2d9d2a95-891e-3e38-bec2-fe1024f77d1e.roa (raw, json)
Hash identifier: U4wS9vdLnSkcYjRrSL6EEj1Pce9pVwX1ChhJjJEB8jc=
Subject key identifier: F3:60:A5:30:F9:4B:00:69:7F:FF:9D:4A:AF:65:7D:8E:4B:91:AA:64
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E780A2F5C4B99F288D7709480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d9d2a95-891e-3e38-bec2-fe1024f77d1e.roa
Signing time: Mon 04 Jul 2022 12:00:00 +0000
ROA not before: Mon 04 Jul 2022 12:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:78:0a:2f:5c:4b:99:f2:88:d7:70:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 4 12:00:00 2022 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=ffd4a291-24f5-497d-a084-ebff23be6d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:4d:8f:be:0c:c8:32:36:7b:06:d5:e0:53:
18:2a:90:74:bd:ea:01:2f:51:f1:d8:f9:b2:1e:4f:
c5:f2:97:0a:37:47:4c:60:4a:2b:9e:34:a7:d0:0f:
ea:17:38:ac:24:3a:cc:01:71:4b:6a:ce:7b:78:22:
af:ab:c0:74:6f:37:cf:2d:e5:d3:e0:e6:17:7a:2a:
b7:17:ab:2e:c1:4b:2a:92:29:26:af:02:22:3e:14:
68:4d:81:4b:63:3e:9e:d5:ae:c7:14:fe:76:2c:4e:
0b:d5:e0:2a:80:41:f0:5c:0e:db:9f:90:e9:d8:92:
83:fe:00:20:76:b2:e1:d7:bf:7b:71:49:8e:08:5f:
4d:64:b7:23:f8:4f:26:85:9f:71:b5:9e:09:26:09:
2f:99:c1:60:09:8e:97:b6:2e:3e:9b:06:63:14:51:
e3:37:0a:39:75:1e:1d:1b:e2:7e:98:3c:20:93:a3:
73:35:cc:11:e9:06:ec:81:36:42:9d:b2:ff:71:f0:
8c:aa:54:71:b6:96:fa:de:9a:43:62:fc:16:ae:c5:
98:99:15:a7:d4:6d:45:cc:6b:06:b0:64:10:5c:ba:
8b:4b:94:de:06:fa:9f:bd:41:29:84:94:a3:5c:d1:
c1:e9:8c:6b:27:bb:bf:b6:60:49:eb:78:e3:16:37:
e2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:60:A5:30:F9:4B:00:69:7F:FF:9D:4A:AF:65:7D:8E:4B:91:AA:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2d9d2a95-891e-3e38-bec2-fe1024f77d1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:2f:26:10:9c:2b:7c:59:66:f0:1e:af:7b:a4:79:f8:98:5f:
13:2b:5e:52:f2:d6:a9:72:4c:e4:2b:89:7d:89:92:c9:2f:d0:
10:0c:4b:30:bd:ff:ef:92:75:22:0e:83:d6:9e:8b:e4:d1:ce:
9c:c9:cf:1e:3f:d7:ae:a5:a8:93:38:e3:95:43:a8:ab:81:cd:
aa:24:7b:62:33:a1:29:d4:66:0a:75:72:a0:8f:6f:b3:99:e7:
2d:49:5f:50:81:f1:36:7c:cd:d6:65:06:68:53:cc:ec:0e:f5:
31:08:73:e1:f5:06:54:09:98:1c:91:97:d5:41:0a:db:88:92:
1d:ec:d8:fa:41:11:a9:ba:7f:4d:18:ad:4f:31:b7:9c:a7:8d:
5a:09:da:40:fc:85:d1:6d:5c:f5:61:80:67:9c:11:fe:55:31:
6d:63:8b:70:85:48:a1:01:a0:6e:24:c7:04:6c:3f:03:fb:60:
4c:c8:2c:b5:51:f4:31:28:7d:85:80:f9:cf:c1:ae:dc:ae:e0:
dc:46:61:a3:64:a2:8c:30:5f:c3:33:0e:20:ad:c3:56:9f:f1:
06:36:3e:ba:fb:ed:8d:f6:d7:75:f1:1b:20:29:88:2f:75:ee:
de:42:f2:60:02:0b:10:d0:71:e0:14:41:a6:70:57:bc:98:e0:
3a:66:6c:c9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD54Ci9cS5nyiNdwlIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcwNDEyMDAwMFoXDTIyMDgwOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmZkNGEyOTEtMjRmNS00OTdkLWEwODQtZWJmZjIzYmU2ZDM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUxNj74MyDI2ewbV4FMYKpB0veoBL1Hx2Pmy
Hk/F8pcKN0dMYEornjSn0A/qFzisJDrMAXFLas57eCKvq8B0bzfPLeXT4OYXeiq3
F6suwUsqkikmrwIiPhRoTYFLYz6e1a7HFP52LE4L1eAqgEHwXA7bn5Dp2JKD/gAg
drLh1797cUmOCF9NZLcj+E8mhZ9xtZ4JJgkvmcFgCY6Xti4+mwZjFFHjNwo5dR4d
G+J+mDwgk6NzNcwR6QbsgTZCnbL/cfCMqlRxtpb63ppDYvwWrsWYmRWn1G1FzGsG
sGQQXLqLS5TeBvqfvUEphJSjXNHB6YxrJ7u/tmBJ63jjFjfirQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPNgpTD5SwBpf/+dSq9lfY5LkapkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmQ5ZDJhOTUtODkxZS0z
ZTM4LWJlYzItZmUxMDI0Zjc3ZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEFgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMi8mEJwrfFlm8B6ve6R5+JhfEyteUvLWqXJM5CuJfYmSyS/QEAxLML3/
75J1Ig6D1p6L5NHOnMnPHj/XrqWokzjjlUOoq4HNqiR7YjOhKdRmCnVyoI9vs5nn
LUlfUIHxNnzN1mUGaFPM7A71MQhz4fUGVAmYHJGX1UEK24iSHezY+kERqbp/TRit
TzG3nKeNWgnaQPyF0W1c9WGAZ5wR/lUxbWOLcIVIoQGgbiTHBGw/A/tgTMgstVH0
MSh9hYD5z8Gu3K7g3EZho2SijDBfwzMOIK3DVp/xBjY+uvvtjfbXdfEbICmIL3Xu
3kLyYAILENBx4BRBpnBXvJjgOmZsyQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:20:48 2025 by rpki-client