Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33264bf4-5ff7-353e-bd5b-30be5a87db9d.roa
File: 33264bf4-5ff7-353e-bd5b-30be5a87db9d.roa (raw, json)
Hash identifier: CUUZr3XN2eLXyt+mROhcAd0whg1Uzv73iWRFxxY2vks=
Subject key identifier: 85:07:DA:E6:AE:EA:DE:A9:10:CC:75:E8:F8:A3:CB:40:DE:84:4D:B3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF814062ADC02DD57DACE3700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33264bf4-5ff7-353e-bd5b-30be5a87db9d.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:14:06:2a:dc:02:dd:57:da:ce:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=ffc58427-d327-4ba1-a9aa-ee6bace134fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:8c:3a:af:a5:ce:25:fc:03:7a:a1:3e:5c:
c1:df:ca:01:1f:c6:d9:ab:16:44:66:c9:d8:e9:4c:
23:58:a2:4c:13:aa:2d:cf:a6:54:3c:61:cd:f8:8f:
b9:c8:93:51:0a:bb:6b:09:1f:92:a0:bb:9d:7f:e8:
82:c1:3d:02:4f:34:a6:fe:e2:68:f7:a0:8d:5f:97:
eb:a1:f5:a5:d1:2e:81:f1:df:ec:5a:42:6f:ed:cb:
aa:19:30:3c:a7:e2:7b:45:85:7b:cb:82:07:3a:8c:
cb:80:bd:18:b8:eb:eb:44:ec:19:16:b2:8a:e1:5a:
27:a6:39:d2:a6:07:d0:6a:d2:d6:c6:7e:bd:78:b3:
e4:e8:83:3e:6d:85:4f:0d:1b:06:5a:65:0b:36:49:
ce:1e:03:e1:29:a4:bd:3f:a2:fa:c6:73:49:c1:f6:
04:e7:a1:2c:70:06:dd:30:d6:94:61:6d:c7:f6:32:
0c:fb:aa:da:fd:12:ab:a5:aa:f7:44:95:3a:dc:81:
94:6e:8d:4b:76:4b:ac:98:64:c7:48:0a:a3:43:09:
10:f5:16:07:a3:8b:c4:48:b4:43:5f:4c:fd:4a:23:
65:cf:05:8b:10:f3:dc:11:4a:21:90:2a:6d:8a:f4:
c3:5a:02:42:c2:93:eb:8c:5e:bd:e3:80:4d:d7:e2:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:07:DA:E6:AE:EA:DE:A9:10:CC:75:E8:F8:A3:CB:40:DE:84:4D:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33264bf4-5ff7-353e-bd5b-30be5a87db9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:73:9d:4b:e7:da:b1:8e:65:af:27:83:54:b0:03:e4:d3:db:
51:e6:dd:6c:b6:b0:3a:54:f1:48:ca:8d:e1:a4:11:07:d9:ea:
17:92:b2:6f:5d:76:cc:5d:a1:55:b8:3e:24:21:34:e4:cc:3c:
5f:e8:5c:66:70:56:80:b3:63:d3:d6:ed:98:22:ab:0f:26:38:
21:63:78:12:c8:0e:30:1a:4c:25:41:1e:65:4d:99:5a:db:6c:
67:07:18:dc:1d:93:26:2a:c7:ab:7a:27:1c:f4:da:5a:93:99:
3b:d9:a2:81:5e:8b:a4:a4:21:9d:d9:83:f5:3c:59:93:03:3c:
93:f6:48:83:d6:4c:de:81:c9:98:04:51:0a:da:e3:a8:31:82:
1d:0d:73:4d:b2:2a:08:1d:cf:2a:8c:fd:81:00:9a:30:59:95:
75:75:64:58:76:1c:c9:4b:2e:b0:dc:06:e3:ef:87:72:ed:ed:
0e:38:cb:be:7d:b5:25:3d:a6:9e:50:81:40:fb:4b:36:53:e5:
04:10:7c:16:5c:a2:94:3b:dc:46:9c:75:55:ec:13:e9:62:0d:
f4:bd:2f:f1:91:23:d9:28:fe:c7:91:1c:96:2c:d1:b3:6a:37:
e5:f3:b9:c3:56:9b:13:3b:5d:55:2c:3e:5f:f0:36:2d:9c:06:
42:6a:72:c0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/4FAYq3ALdV9rONwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExOTEyMDAwMFoXDTIyMTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
ZmZjNTg0MjctZDMyNy00YmExLWE5YWEtZWU2YmFjZTEzNGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGqMOq+lziX8A3qhPlzB38oBH8bZqxZEZsnY
6UwjWKJME6otz6ZUPGHN+I+5yJNRCrtrCR+SoLudf+iCwT0CTzSm/uJo96CNX5fr
ofWl0S6B8d/sWkJv7cuqGTA8p+J7RYV7y4IHOozLgL0YuOvrROwZFrKK4VonpjnS
pgfQatLWxn69eLPk6IM+bYVPDRsGWmULNknOHgPhKaS9P6L6xnNJwfYE56EscAbd
MNaUYW3H9jIM+6ra/RKrpar3RJU63IGUbo1LdkusmGTHSAqjQwkQ9RYHo4vESLRD
X0z9SiNlzwWLEPPcEUohkCptivTDWgJCwpPrjF6944BN1+LDNQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIUH2uau6t6pEMx16Pijy0DehE2zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzMyNjRiZjQtNWZmNy0z
NTNlLWJkNWItMzBiZTVhODdkYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAS3OdS+fasY5lryeDVLAD5NPbUebdbLawOlTxSMqN4aQRB9nqF5Kyb112
zF2hVbg+JCE05Mw8X+hcZnBWgLNj09btmCKrDyY4IWN4EsgOMBpMJUEeZU2ZWtts
ZwcY3B2TJirHq3onHPTaWpOZO9migV6LpKQhndmD9TxZkwM8k/ZIg9ZM3oHJmARR
CtrjqDGCHQ1zTbIqCB3PKoz9gQCaMFmVdXVkWHYcyUsusNwG4++Hcu3tDjjLvn21
JT2mnlCBQPtLNlPlBBB8FlyilDvcRpx1VewT6WIN9L0v8ZEj2Sj+x5EclizRs2o3
5fO5w1abEztdVSw+X/A2LZwGQmpywA==
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:58:14 2025 by rpki-client