Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f74509b-40a7-3e5b-b6a9-dd0adf379b1b.roa
File: 2f74509b-40a7-3e5b-b6a9-dd0adf379b1b.roa (raw, json)
Hash identifier: 0bOp0GFjsQisgmF1PGKhRXIEZiTnv26gFu361X2k0VE=
Subject key identifier: 4F:21:84:95:D8:03:46:4B:24:6A:19:A2:BC:FA:86:35:BD:61:C8:9B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401B0FD5D29ECAD7685BFE0510
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f74509b-40a7-3e5b-b6a9-dd0adf379b1b.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.78.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:0f:d5:d2:9e:ca:d7:68:5b:fe:05:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=0c27c071-458c-4c98-8242-36fcfab24ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:f6:2d:1f:78:0d:91:b6:fc:3c:33:b4:42:
ec:58:07:3f:48:8d:77:2e:fa:20:72:8c:81:66:21:
8c:a9:11:0b:3e:e9:c8:a9:13:2c:8b:60:b2:54:fc:
2a:0c:ba:2b:2c:8f:ae:23:f8:b4:47:f0:02:ca:34:
f2:15:97:29:b9:11:ec:6f:55:ca:bd:56:a3:e9:3b:
74:fd:b6:0e:58:b0:47:68:54:ba:3b:a5:e3:bf:d5:
33:42:2a:68:a7:b7:c6:e7:81:4f:00:5b:84:33:62:
de:d8:a5:ab:b1:5a:5d:64:21:99:9c:2a:f9:6e:2b:
7b:57:eb:12:61:11:4f:96:ae:21:3a:78:42:c5:be:
c0:f0:d9:4e:47:7c:67:32:28:8c:85:ea:5c:7d:7c:
13:ae:ac:f9:9c:25:3d:e4:de:45:c3:a5:f0:05:c0:
30:4d:14:55:85:e2:d7:df:6a:21:21:30:7c:0e:2f:
51:43:00:a8:d3:f6:e6:99:73:4d:1a:ca:8b:1f:89:
8b:3c:98:59:89:1a:db:b5:34:29:5c:68:ce:2f:70:
9a:d7:8a:79:10:8a:9d:b9:4a:db:f9:83:87:41:9a:
07:35:b5:2b:d1:91:7e:e5:08:07:64:aa:25:da:8a:
50:b1:b6:c8:93:f2:46:72:1d:51:4c:7e:48:ab:03:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:21:84:95:D8:03:46:4B:24:6A:19:A2:BC:FA:86:35:BD:61:C8:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2f74509b-40a7-3e5b-b6a9-dd0adf379b1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.78.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:fe:c7:e4:a2:b0:5d:ee:bb:53:ac:20:e5:c2:dc:a6:a1:f8:
36:d5:10:f9:4b:3d:30:4f:ac:cd:9d:3f:a2:a0:cf:f1:88:0c:
4c:4e:65:cb:46:a0:6b:7d:43:90:ed:5c:b9:e9:1c:b6:71:78:
5e:43:8c:b1:2f:ee:3f:31:4a:33:13:03:2d:ff:eb:f4:45:ff:
0a:c3:bc:09:44:64:27:c3:6c:ab:f7:3e:1f:cc:73:83:3d:0a:
c5:ee:45:fd:6e:9b:94:b0:c8:b1:cf:7f:45:58:55:9b:6a:ef:
70:dd:31:06:bf:ed:f5:9c:ae:5c:e4:fa:f6:40:bc:69:41:6e:
56:4d:04:b4:3a:c8:bc:12:9d:18:28:c9:6c:34:05:7c:8b:57:
e4:f8:31:1c:4e:f0:c3:23:5a:7e:5e:8f:3d:14:2c:5a:88:ff:
ae:00:dc:4f:97:5a:61:85:c0:8c:9b:62:92:a9:ee:2d:06:64:
4b:12:16:6e:ce:d3:44:3f:67:9a:ed:4a:b8:a7:56:36:f2:7c:
84:25:09:61:5c:93:6b:6c:16:1f:de:d9:e7:11:02:dd:84:4b:
1d:12:6d:3e:cf:2f:45:f5:e7:28:f8:51:51:df:35:cf:e7:53:
e9:b7:42:91:64:bf:e6:25:29:77:48:7d:f6:2f:54:fc:20:aa:
6d:93:7d:be
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAbD9XSnsrXaFv+BRAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMTEyMDAwMFoXDTIzMDEwNjA1MDAwMFowLzEtMCsGA1UEAxMk
MGMyN2MwNzEtNDU4Yy00Yzk4LTgyNDItMzZmY2ZhYjI0ZWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPz2LR94DZG2/DwztELsWAc/SI13LvogcoyB
ZiGMqRELPunIqRMsi2CyVPwqDLorLI+uI/i0R/ACyjTyFZcpuRHsb1XKvVaj6Tt0
/bYOWLBHaFS6O6Xjv9UzQipop7fG54FPAFuEM2Le2KWrsVpdZCGZnCr5bit7V+sS
YRFPlq4hOnhCxb7A8NlOR3xnMiiMhepcfXwTrqz5nCU95N5Fw6XwBcAwTRRVheLX
32ohITB8Di9RQwCo0/bmmXNNGsqLH4mLPJhZiRrbtTQpXGjOL3Ca14p5EIqduUrb
+YOHQZoHNbUr0ZF+5QgHZKol2opQsbbIk/JGch1RTH5IqwPXkQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFE8hhJXYA0ZLJGoZorz6hjW9YcibMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMmY3NDUwOWItNDBhNy0z
ZTViLWI2YTktZGQwYWRmMzc5YjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEE4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAd/7H5KKwXe67U6wg5cLcpqH4NtUQ+Us9ME+szZ0/oqDP8YgMTE5ly0ag
a31DkO1cuekctnF4XkOMsS/uPzFKMxMDLf/r9EX/CsO8CURkJ8Nsq/c+H8xzgz0K
xe5F/W6blLDIsc9/RVhVm2rvcN0xBr/t9ZyuXOT69kC8aUFuVk0EtDrIvBKdGCjJ
bDQFfItX5PgxHE7wwyNafl6PPRQsWoj/rgDcT5daYYXAjJtikqnuLQZkSxIWbs7T
RD9nmu1KuKdWNvJ8hCUJYVyTa2wWH97Z5xEC3YRLHRJtPs8vRfXnKPhRUd81z+dT
6bdCkWS/5iUpd0h99i9U/CCqbZN9vg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:10 2025 by rpki-client