Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ac41d33-da7c-3963-8e76-ddae745eb83c.roa
File: 3ac41d33-da7c-3963-8e76-ddae745eb83c.roa (raw, json)
Hash identifier: 1mSn+CtLRnwt0vjW4Lq6HZl+8dE1V72HofViE46WbuM=
Subject key identifier: 63:35:0A:18:73:97:BC:3A:C1:FD:69:03:3A:C9:35:57:91:7F:2F:DE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C6BDD2BF59A348F1489C85E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ac41d33-da7c-3963-8e76-ddae745eb83c.roa
Signing time: Thu 30 Dec 2021 05:00:00 +0000
ROA not before: Thu 30 Dec 2021 05:00:00 +0000
ROA not after: Thu 03 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:dd:2b:f5:9a:34:8f:14:89:c8:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 30 05:00:00 2021 GMT
Not After : Feb 3 05:00:00 2022 GMT
Subject: CN=b1f09392-1b6f-4d9b-843a-0f91dda35c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:52:af:4a:1a:1f:c8:a4:7d:3a:77:73:6f:00:
3c:b1:00:a0:cc:b6:a6:ac:68:94:21:f1:97:1a:e6:
3b:53:7f:e8:47:b8:4f:68:71:f3:2b:eb:38:10:8a:
db:d5:c1:c7:9c:b2:92:0c:2c:a4:75:d9:fa:e4:95:
41:97:b1:02:4c:37:36:b6:24:d1:7b:2d:4e:88:69:
dd:c2:23:73:8b:d0:23:44:3a:22:0e:2c:17:05:7d:
50:50:ff:96:4e:91:93:07:09:b7:da:98:d6:00:25:
da:15:eb:c9:42:3d:82:3f:fc:dc:cd:b6:9f:8d:bb:
3e:fd:72:fa:73:ac:72:bf:dd:07:36:a6:d4:8b:70:
44:20:6e:31:2f:d5:a7:38:8f:dd:ab:d9:8f:34:4b:
8d:c6:9d:97:24:c4:65:26:33:ac:cd:be:17:21:1e:
aa:87:61:4c:40:5c:d6:e4:5e:08:d3:b3:3d:06:89:
d7:ad:4a:91:d2:54:66:cb:1a:84:92:7b:45:71:57:
f9:2a:cb:04:43:a3:85:b2:87:29:55:cd:9b:3d:5b:
0a:6f:08:0a:55:e8:7e:80:9f:91:3c:74:2c:fc:aa:
38:d7:c0:bd:f8:73:ef:bb:e2:c5:94:0b:63:27:b8:
cc:c5:cb:21:3e:84:73:fb:23:f2:c5:6c:79:87:24:
e5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:35:0A:18:73:97:BC:3A:C1:FD:69:03:3A:C9:35:57:91:7F:2F:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3ac41d33-da7c-3963-8e76-ddae745eb83c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:aa:1e:7e:99:f7:e1:9d:13:96:2e:cc:ca:42:2f:a8:12:f1:
da:45:b1:e1:4e:6b:b6:a9:0b:1c:b9:e2:5a:41:e7:61:c9:c0:
ff:e4:dd:29:a6:44:35:96:70:65:bf:5e:95:c7:da:dd:58:d5:
ea:03:9a:ae:af:d9:60:fe:75:82:0c:84:93:ce:02:ae:9a:ee:
b9:4b:2f:76:35:1b:67:ba:d8:01:a2:1a:d4:76:62:05:d5:57:
9c:54:56:65:85:21:ea:df:d2:f0:64:c4:05:69:ec:8b:d8:8f:
d6:98:48:3b:35:8c:22:f5:4a:52:5c:73:69:98:cf:d6:61:eb:
12:d3:85:f4:5f:7e:0c:65:ad:87:d4:31:d6:94:80:63:8a:f5:
82:c8:59:78:87:c0:7e:63:bc:2d:3a:43:02:8f:2c:87:2e:9a:
04:b6:62:d9:2e:41:9a:3b:61:ab:b1:a8:77:a9:c8:f6:28:c7:
41:b3:51:4e:e2:cf:0b:0f:5c:e8:bc:7a:af:72:c0:ea:28:f4:
b8:bb:94:7a:04:ca:dd:41:e2:96:66:99:f3:a6:90:ea:a5:f4:
8e:9c:5d:d1:eb:6d:40:03:05:d8:b5:f2:40:cb:4c:50:67:93:
51:9a:9f:28:f3:7d:19:9f:a3:d2:80:a1:90:73:92:b7:a0:61:
fc:50:23:0a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxr3Sv1mjSPFInIXoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIxMTIzMDA1MDAwMFoXDTIyMDIwMzA1MDAwMFowLzEtMCsGA1UEAxMk
YjFmMDkzOTItMWI2Zi00ZDliLTg0M2EtMGY5MWRkYTM1YzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglKvShofyKR9OndzbwA8sQCgzLamrGiUIfGX
GuY7U3/oR7hPaHHzK+s4EIrb1cHHnLKSDCykddn65JVBl7ECTDc2tiTRey1OiGnd
wiNzi9AjRDoiDiwXBX1QUP+WTpGTBwm32pjWACXaFevJQj2CP/zczbafjbs+/XL6
c6xyv90HNqbUi3BEIG4xL9WnOI/dq9mPNEuNxp2XJMRlJjOszb4XIR6qh2FMQFzW
5F4I07M9BonXrUqR0lRmyxqEkntFcVf5KssEQ6OFsocpVc2bPVsKbwgKVeh+gJ+R
PHQs/Ko418C9+HPvu+LFlAtjJ7jMxcshPoRz+yPyxWx5hyTlmQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGM1Chhzl7w6wf1pAzrJNVeRfy/eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2FjNDFkMzMtZGE3Yy0z
OTYzLThlNzYtZGRhZTc0NWViODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADKoefpn34Z0Tli7MykIvqBLx2kWx4U5rtqkLHLniWkHnYcnA/+TdKaZE
NZZwZb9elcfa3VjV6gOarq/ZYP51ggyEk84CrpruuUsvdjUbZ7rYAaIa1HZiBdVX
nFRWZYUh6t/S8GTEBWnsi9iP1phIOzWMIvVKUlxzaZjP1mHrEtOF9F9+DGWth9Qx
1pSAY4r1gshZeIfAfmO8LTpDAo8shy6aBLZi2S5Bmjthq7God6nI9ijHQbNRTuLP
Cw9c6Lx6r3LA6ij0uLuUegTK3UHilmaZ86aQ6qX0jpxd0ettQAMF2LXyQMtMUGeT
UZqfKPN9GZ+j0oChkHOSt6Bh/FAjCg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:07:47 2025 by rpki-client