Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34a2f3a2-8fa1-3073-8035-9c4a534dc3fa.roa
File: 34a2f3a2-8fa1-3073-8035-9c4a534dc3fa.roa (raw, json)
Hash identifier: MVqVVBMbwgvMGQVo24n+9gY4IHuVyUepXAJwN5uZGm4=
Subject key identifier: 36:9D:01:3F:B6:9D:C2:C2:78:E2:97:9A:02:AF:FD:8D:20:09:85:33
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6EA00CBE3A1C6DEEAC8E0CE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34a2f3a2-8fa1-3073-8035-9c4a534dc3fa.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6e:a0:0c:be:3a:1c:6d:ee:ac:8e:0c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=c1fa6417-02dc-4a2d-b158-c4a568cd0810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:49:51:a7:e0:b3:22:03:c1:c0:34:53:03:
79:bd:dd:7d:eb:6b:54:74:9e:90:f0:b9:4e:94:f3:
c3:ff:c8:c8:aa:6e:34:79:4f:86:2f:cb:5f:97:e7:
e8:48:4b:2e:ef:80:ad:9a:7b:2a:86:ad:67:e4:11:
e1:4d:8e:43:72:32:34:9c:e0:1f:4b:3c:d7:ec:86:
67:bc:48:ee:6e:4d:73:20:93:93:39:24:9d:26:b7:
59:7b:24:f1:4e:ac:3d:eb:b2:7e:d7:db:36:d0:8a:
81:4d:ba:5d:d6:34:b4:c3:cf:eb:cf:0b:b5:59:e7:
58:47:6b:de:88:04:e3:5b:f4:c3:86:cc:3e:0d:ec:
0b:d4:3d:b8:84:c8:61:6b:27:ac:5a:53:19:1b:99:
4f:fd:b9:c0:f0:4d:99:95:c8:6b:a5:a2:0a:e6:2e:
1e:a1:b5:45:4e:77:d3:ad:84:9b:94:f7:40:a2:6a:
c1:a9:58:fc:5e:82:c8:a1:04:6e:3d:80:c7:cb:d5:
93:f3:df:a5:cb:c1:41:d1:fe:d6:21:97:94:a3:26:
1a:a8:88:30:18:d8:30:2c:59:63:cd:7c:d0:c1:be:
f5:b5:23:c4:db:b5:4f:9c:b4:20:a1:4c:cc:0e:f2:
fc:23:3d:a8:d5:c3:c0:21:69:af:0a:6f:46:87:df:
b5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9D:01:3F:B6:9D:C2:C2:78:E2:97:9A:02:AF:FD:8D:20:09:85:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/34a2f3a2-8fa1-3073-8035-9c4a534dc3fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:c9:f7:9c:63:64:c3:b9:e9:29:fe:f0:e3:26:13:ed:22:66:
47:49:e5:e8:bc:eb:ea:10:98:7f:ca:11:0a:ac:f4:d4:ab:00:
d3:8c:7d:ce:86:69:f0:f5:fb:35:86:64:db:65:ae:ff:05:d2:
ee:29:43:fd:dd:a6:5c:d0:0f:96:66:1b:8c:d7:a5:88:7f:91:
8b:70:60:ee:85:1b:b1:59:14:91:4b:4d:f0:bc:02:17:1d:ec:
88:91:f3:d1:62:3d:ad:3a:6d:f7:63:68:6b:8b:50:42:4d:bc:
2d:26:55:45:f7:ae:60:43:20:52:24:d8:28:2e:6b:dc:53:ef:
e8:84:f1:f1:61:1f:fe:56:1c:0b:a5:f7:1a:4b:17:07:6f:e0:
2c:25:91:08:da:d9:62:a6:8b:24:6f:92:aa:b3:59:db:37:b8:
5d:78:e6:55:ab:c1:a7:05:65:22:a7:98:57:9e:1a:e7:cf:4e:
8a:39:49:6b:b6:f6:ab:e1:a0:53:06:1c:3f:0b:cd:53:7d:28:
bf:1b:3e:65:5b:c7:7e:eb:65:ab:fc:bd:11:33:3f:fc:f3:83:
b0:94:42:9a:e0:8b:a0:91:c4:b1:f2:2c:65:8b:8f:22:ef:88:
2a:00:b1:ff:9e:ea:8d:62:0f:52:f8:e8:cf:94:2a:90:e1:95:
e5:cb:df:08
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxuoAy+Ohxt7qyODOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMTA1MDAwMFoXDTIyMDIwNDA1MDAwMFowLzEtMCsGA1UEAxMk
YzFmYTY0MTctMDJkYy00YTJkLWIxNTgtYzRhNTY4Y2QwODEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq9JUafgsyIDwcA0UwN5vd1962tUdJ6Q8LlO
lPPD/8jIqm40eU+GL8tfl+foSEsu74Ctmnsqhq1n5BHhTY5DcjI0nOAfSzzX7IZn
vEjubk1zIJOTOSSdJrdZeyTxTqw967J+19s20IqBTbpd1jS0w8/rzwu1WedYR2ve
iATjW/TDhsw+DewL1D24hMhhayesWlMZG5lP/bnA8E2ZlchrpaIK5i4eobVFTnfT
rYSblPdAomrBqVj8XoLIoQRuPYDHy9WT89+ly8FB0f7WIZeUoyYaqIgwGNgwLFlj
zXzQwb71tSPE27VPnLQgoUzMDvL8Iz2o1cPAIWmvCm9Gh9+15QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDadAT+2ncLCeOKXmgKv/Y0gCYUzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzRhMmYzYTItOGZhMS0z
MDczLTgwMzUtOWM0YTUzNGRjM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJ0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAjMn3nGNkw7npKf7w4yYT7SJmR0nl6Lzr6hCYf8oRCqz01KsA04x9zoZp
8PX7NYZk22Wu/wXS7ilD/d2mXNAPlmYbjNeliH+Ri3Bg7oUbsVkUkUtN8LwCFx3s
iJHz0WI9rTpt92Noa4tQQk28LSZVRfeuYEMgUiTYKC5r3FPv6ITx8WEf/lYcC6X3
GksXB2/gLCWRCNrZYqaLJG+SqrNZ2ze4XXjmVavBpwVlIqeYV54a589OijlJa7b2
q+GgUwYcPwvNU30ovxs+ZVvHfutlq/y9ETM//PODsJRCmuCLoJHEsfIsZYuPIu+I
KgCx/57qjWIPUvjoz5QqkOGV5cvfCA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:18 2025 by rpki-client