Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37ac4ce8-ccd1-3e81-9c22-13f937b59973.roa
File: 37ac4ce8-ccd1-3e81-9c22-13f937b59973.roa (raw, json)
Hash identifier: adiNGNiRJagw+2r5MaqCtFxO0Mcg6yAHgHY+z/o48Jg=
Subject key identifier: 39:1B:D3:10:4A:90:AB:7A:38:64:93:11:93:C5:EC:BC:CE:B4:03:D5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D5955817C349AF872D5571E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37ac4ce8-ccd1-3e81-9c22-13f937b59973.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:55:81:7c:34:9a:f8:72:d5:57:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=faeac173-b414-475e-a385-5d43ff5ec1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:5c:6e:44:2d:2e:7b:a5:5c:2c:75:b3:f7:
04:97:1c:bc:f3:11:7e:20:96:1a:83:fa:84:f5:88:
88:23:ad:e5:2d:23:30:17:4f:56:cc:90:b4:b7:59:
f2:a6:b1:c5:f4:65:90:47:54:1d:69:50:e6:64:99:
04:cc:75:e2:58:ac:74:f7:2d:5e:76:96:3a:5f:72:
d4:c9:f4:af:9e:c0:de:21:d8:bc:2b:77:1c:05:5f:
ea:d6:49:28:81:f3:df:96:0a:99:e7:cd:fb:78:0f:
0c:4d:c6:53:29:89:c1:9a:71:15:02:8a:d2:78:8a:
0e:1a:c8:69:0a:bc:78:75:74:51:a4:3b:89:3b:98:
c8:9a:2e:79:4f:df:88:f4:42:a5:84:2d:2a:5e:00:
ef:aa:49:26:ad:20:9e:97:0b:eb:d9:cd:a2:6c:78:
63:7d:db:c3:55:6c:2e:98:c6:9b:ca:54:03:80:c5:
6c:7d:30:1c:3e:ac:e1:90:d7:3d:01:c9:b9:6c:26:
df:dc:71:10:ec:f2:16:74:ff:72:18:0a:23:bf:95:
77:b4:ba:7d:04:db:74:c4:0e:ff:b2:80:71:03:7b:
42:15:b9:f1:7a:b8:b5:c4:ff:90:eb:19:0b:ce:5e:
2c:38:fe:5a:cd:7d:c3:e5:f9:c8:a3:60:f0:6e:80:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1B:D3:10:4A:90:AB:7A:38:64:93:11:93:C5:EC:BC:CE:B4:03:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/37ac4ce8-ccd1-3e81-9c22-13f937b59973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b4:87:d3:af:03:65:56:e3:1f:a9:de:9f:eb:5b:3b:e5:4b:83:
59:14:8c:fb:9f:ca:b4:fd:44:49:b5:88:f5:f7:b5:40:a5:6f:
6c:eb:df:ee:61:61:42:0b:89:95:01:57:a5:49:d6:1d:68:d4:
ff:10:9a:a5:ce:39:bc:0e:c4:ad:eb:df:a7:c4:69:cc:28:25:
92:85:59:8d:03:6a:39:c0:0b:40:f2:20:c7:ec:90:08:2a:3a:
dc:b3:81:0b:d5:3c:9f:fb:12:e0:36:00:eb:68:1e:f5:b6:72:
80:a6:2b:b2:85:58:67:52:52:88:ec:af:3f:53:4f:e9:c9:fb:
cf:0c:d5:d4:c3:ef:28:59:24:da:c6:49:bc:ca:45:e8:1c:27:
20:72:ef:7f:0f:0d:de:20:8c:b9:44:2e:63:ae:89:e9:57:a4:
4d:6c:fc:a1:6f:6e:c4:29:90:9c:b3:11:ab:9b:34:8b:ce:11:
7e:1e:8a:52:0c:43:7a:a7:30:03:00:85:9b:ea:eb:27:3f:07:
69:52:d0:46:db:76:ac:e2:85:74:a4:ed:04:cd:63:55:30:29:
31:28:99:8c:29:fd:78:09:d1:74:fb:74:0a:b6:fe:73:7f:a3:
e5:7d:cc:5e:f4:87:c8:df:47:f0:75:93:1f:70:23:a5:d7:b5:
82:87:75:f7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1ZVYF8NJr4ctVXHgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZmFlYWMxNzMtYjQxNC00NzVlLWEzODUtNWQ0M2ZmNWVjMWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhppcbkQtLnulXCx1s/cElxy88xF+IJYag/qE
9YiII63lLSMwF09WzJC0t1nyprHF9GWQR1QdaVDmZJkEzHXiWKx09y1edpY6X3LU
yfSvnsDeIdi8K3ccBV/q1kkogfPflgqZ5837eA8MTcZTKYnBmnEVAorSeIoOGshp
Crx4dXRRpDuJO5jImi55T9+I9EKlhC0qXgDvqkkmrSCelwvr2c2ibHhjfdvDVWwu
mMabylQDgMVsfTAcPqzhkNc9Acm5bCbf3HEQ7PIWdP9yGAojv5V3tLp9BNt0xA7/
soBxA3tCFbnxeri1xP+Q6xkLzl4sOP5azX3D5fnIo2DwboBclwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDkb0xBKkKt6OGSTEZPF7LzOtAPVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzdhYzRjZTgtY2NkMS0z
ZTgxLTljMjItMTNmOTM3YjU5OTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEMwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtIfTrwNlVuMfqd6f61s75UuDWRSM+5/KtP1ESbWI9fe1QKVvbOvf7mFh
QguJlQFXpUnWHWjU/xCapc45vA7Erevfp8RpzCglkoVZjQNqOcALQPIgx+yQCCo6
3LOBC9U8n/sS4DYA62ge9bZygKYrsoVYZ1JSiOyvP1NP6cn7zwzV1MPvKFkk2sZJ
vMpF6BwnIHLvfw8N3iCMuUQuY66J6VekTWz8oW9uxCmQnLMRq5s0i84Rfh6KUgxD
eqcwAwCFm+rrJz8HaVLQRtt2rOKFdKTtBM1jVTApMSiZjCn9eAnRdPt0Crb+c3+j
5X3MXvSHyN9H8HWTH3Ajpde1god19w==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:49 2025 by rpki-client