Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/398b7ce2-a4a8-3e05-9865-9595343ce3a2.roa
File: 398b7ce2-a4a8-3e05-9865-9595343ce3a2.roa (raw, json)
Hash identifier: C90kub7Lfsmpqo7gMItJ8K3L99amKxKCGlkWuLHmW3w=
Subject key identifier: C6:B7:31:B8:36:2B:D6:E4:A2:39:46:20:5A:9D:21:A6:A5:41:E8:C5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D7DA85AC1527A9A33D6B33EAC
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/398b7ce2-a4a8-3e05-9865-9595343ce3a2.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:a8:5a:c1:52:7a:9a:33:d6:b3:3e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=65fa9323-73b8-46d6-b6ab-5d5d4ffbb78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2a:60:7f:ae:53:13:ba:ee:8f:02:8e:ca:85:
68:48:2c:8f:ce:74:2c:a9:9e:46:92:bf:32:05:d3:
e4:80:52:2e:f6:3a:97:ef:47:23:a2:98:59:51:51:
3d:50:2b:e8:59:aa:43:68:0c:9d:d3:a4:8f:96:6d:
17:92:71:75:38:4d:9a:d5:42:b5:7e:7a:dd:7c:65:
d1:41:ea:8c:ce:b8:e8:a7:98:e8:0a:9c:da:57:36:
ab:6f:1e:e4:87:03:8d:6b:6c:08:6a:27:63:fb:63:
e9:17:cb:5e:3e:17:f8:d9:f0:9d:1c:47:a7:c7:aa:
52:e0:6d:61:d6:16:22:1e:85:fd:ca:14:b3:2f:70:
e6:a4:08:97:3a:9c:76:4b:f7:67:8e:9c:d2:36:dd:
e2:ed:66:b9:79:77:47:5a:ab:11:f0:7f:23:f5:7c:
61:c2:be:1a:ff:25:5f:68:8b:79:e1:ad:6f:ea:95:
f8:0d:95:d7:51:fa:9c:92:64:7a:ec:9f:c2:33:a9:
51:ad:02:26:0d:fa:d8:86:2c:d5:6a:c0:8d:22:21:
64:c3:55:bf:05:32:e0:d1:90:0e:c1:87:41:51:d0:
9e:12:e6:29:de:ea:03:12:b3:cb:70:e2:6d:f2:b3:
16:47:b7:f9:f9:c9:87:51:f9:83:20:ea:23:4c:e8:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B7:31:B8:36:2B:D6:E4:A2:39:46:20:5A:9D:21:A6:A5:41:E8:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/398b7ce2-a4a8-3e05-9865-9595343ce3a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:5c:0e:b4:52:41:05:4f:31:a0:3f:f8:e7:5c:3f:d0:3d:ef:
87:4f:4e:7f:dc:7f:e0:9b:3d:c6:a0:a5:b5:92:11:12:bf:67:
e4:7b:ed:41:9c:99:d1:a5:57:25:2a:49:5d:c6:79:58:61:c3:
c3:8c:e7:78:ac:d4:e2:8d:db:f4:6b:fe:c2:0e:fc:ba:ab:08:
3e:18:3a:3c:b4:41:eb:da:13:13:cf:bc:d4:c1:9f:02:68:ac:
d8:4e:46:06:7e:95:bf:38:24:69:77:05:7d:94:05:8c:c0:e6:
7d:76:45:ea:dc:d3:e3:4e:02:0b:d6:87:30:8c:c1:b4:45:f7:
5e:6e:2e:2f:cd:0d:62:d0:14:1a:e9:cb:f8:aa:bf:e0:14:f5:
1e:f5:44:6c:85:5f:3c:1b:9a:44:6b:df:d1:c5:d9:f4:b5:b5:
ce:c4:7d:72:47:35:61:05:3f:21:6e:ed:8d:68:95:5a:00:13:
e8:6b:a8:bf:51:77:dc:b6:27:52:48:54:ac:83:58:34:cb:22:
64:be:dc:92:9c:29:17:d4:e3:c8:f1:b4:85:6a:8d:91:ea:f8:
10:37:43:5d:a6:a7:eb:cb:c0:63:76:36:1c:45:90:5b:fc:bb:
90:18:75:ed:9a:49:b1:90:6b:07:cb:d8:dd:77:66:91:35:9e:
ce:10:07:d5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD19qFrBUnqaM9azPqwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQwNzA0MDAwMFoXDTIyMDUxMjA0MDAwMFowLzEtMCsGA1UEAxMk
NjVmYTkzMjMtNzNiOC00NmQ2LWI2YWItNWQ1ZDRmZmJiNzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSpgf65TE7rujwKOyoVoSCyPznQsqZ5Gkr8y
BdPkgFIu9jqX70cjophZUVE9UCvoWapDaAyd06SPlm0XknF1OE2a1UK1fnrdfGXR
QeqMzrjop5joCpzaVzarbx7khwONa2wIaidj+2PpF8tePhf42fCdHEenx6pS4G1h
1hYiHoX9yhSzL3DmpAiXOpx2S/dnjpzSNt3i7Wa5eXdHWqsR8H8j9Xxhwr4a/yVf
aIt54a1v6pX4DZXXUfqckmR67J/CM6lRrQImDfrYhizVasCNIiFkw1W/BTLg0ZAO
wYdBUdCeEuYp3uoDErPLcOJt8rMWR7f5+cmHUfmDIOojTOioPwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMa3Mbg2K9bkojlGIFqdIaalQejFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvMzk4YjdjZTItYTRhOC0z
ZTA1LTk4NjUtOTU5NTM0M2NlM2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApVwOtFJBBU8xoD/451w/0D3vh09Of9x/4Js9xqCltZIREr9n5HvtQZyZ
0aVXJSpJXcZ5WGHDw4zneKzU4o3b9Gv+wg78uqsIPhg6PLRB69oTE8+81MGfAmis
2E5GBn6VvzgkaXcFfZQFjMDmfXZF6tzT404CC9aHMIzBtEX3Xm4uL80NYtAUGunL
+Kq/4BT1HvVEbIVfPBuaRGvf0cXZ9LW1zsR9ckc1YQU/IW7tjWiVWgAT6Guov1F3
3LYnUkhUrINYNMsiZL7ckpwpF9TjyPG0hWqNker4EDdDXaan68vAY3Y2HEWQW/y7
kBh17ZpJsZBrB8vY3XdmkTWezhAH1Q==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:43 2025 by rpki-client