Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c9f44f9-18de-332b-a0f5-c1eaf697592d.roa
File: 3c9f44f9-18de-332b-a0f5-c1eaf697592d.roa (raw, json)
Hash identifier: Jf4h9J/G0AOIUr51P+aFhKF3y6mHPBkJ2ZTcfplFSTQ=
Subject key identifier: 95:4B:B0:B8:5F:C3:65:98:BE:C4:31:3C:FC:0F:94:D2:C3:0D:97:B1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584019C83B76E9AF728A59AAFC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c9f44f9-18de-332b-a0f5-c1eaf697592d.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.107.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:c8:3b:76:e9:af:72:8a:59:aa:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=ad9642ef-c9f8-49aa-b330-4e9afceb4c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:f0:e0:b2:93:0a:32:64:7c:1a:f5:72:6e:
51:c4:de:35:76:f6:c0:05:78:26:20:c5:aa:e4:d1:
d6:11:7a:c4:f0:77:24:b4:a9:df:9e:02:86:93:64:
4d:2e:7c:a5:18:66:ee:45:64:65:54:ed:c6:af:50:
f3:76:a7:ef:05:f9:88:08:82:a9:0b:68:a4:06:25:
a5:4e:c6:1a:f6:9b:0c:a2:64:4e:a4:5e:36:5f:3a:
bd:3c:28:75:ec:42:dd:7e:8a:13:8e:09:dc:8e:c6:
aa:1a:ae:76:28:94:c3:1b:fe:91:d1:09:54:92:d0:
61:c9:61:18:a8:d3:0f:4d:b5:6e:4a:ee:44:15:91:
83:cf:87:3b:73:ea:1a:41:50:28:91:a3:c8:38:c8:
95:2a:38:32:c9:b3:52:c8:35:77:16:6a:dd:5b:30:
81:d3:37:52:79:24:91:cf:6a:bc:a6:41:d1:ef:3c:
42:d1:a1:44:2b:f6:11:7a:31:3d:b7:10:8a:15:6e:
73:78:09:77:8f:93:3d:ff:8a:4f:0a:6d:2d:c9:3f:
ba:6c:93:b0:7b:b5:fa:36:a6:73:16:8a:b9:93:5c:
d7:1f:4c:1f:5d:84:e1:18:dd:18:40:03:5b:68:55:
12:dd:c1:bf:d8:7c:f3:c9:17:9c:15:eb:6a:84:34:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4B:B0:B8:5F:C3:65:98:BE:C4:31:3C:FC:0F:94:D2:C3:0D:97:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3c9f44f9-18de-332b-a0f5-c1eaf697592d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.107.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:d5:90:51:44:8c:50:8a:f9:89:c6:8d:61:01:37:db:44:ff:
a6:41:27:9b:2f:b5:19:b5:b9:57:8d:c7:5f:21:2e:3a:32:b0:
73:69:41:0c:5f:4b:0c:15:fc:5c:2f:f8:5f:e6:21:24:5f:69:
9d:fc:eb:59:d4:d3:10:bf:d2:17:c7:27:0e:75:7b:69:7c:ca:
4f:18:63:5f:fe:08:b2:71:eb:42:32:ab:dd:61:98:48:6b:e9:
77:1c:a2:39:af:5b:52:8f:7b:81:31:ed:80:f8:0d:82:ee:66:
14:0c:38:3f:2e:e4:80:15:cb:a1:73:96:c0:67:b5:46:df:e4:
5d:29:54:7f:eb:9a:ee:52:cd:b1:25:a3:f8:51:32:46:8a:65:
d9:56:e5:79:ea:a7:e8:ce:ba:ab:02:44:93:b1:23:3b:dd:94:
30:a9:2c:4c:53:6e:3c:dd:0b:ed:c0:66:21:e3:47:14:ff:14:
95:12:c9:3f:fb:7c:20:91:e0:a1:05:bf:7d:e5:72:22:19:bb:
3f:2f:e1:b1:9e:78:fb:3a:44:24:e4:0f:a9:cb:73:dd:78:ff:
ec:fe:7a:e6:42:34:e8:cb:d9:88:ee:91:fa:9f:f6:f7:58:59:
b5:4b:41:45:f1:bd:b2:84:bd:f0:94:76:4d:99:f0:0a:f0:fc:
88:e9:8c:b8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAZyDt26a9yilmq/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMTEyMDAwMFoXDTIzMDEwNjA1MDAwMFowLzEtMCsGA1UEAxMk
YWQ5NjQyZWYtYzlmOC00OWFhLWIzMzAtNGU5YWZjZWI0YzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQHw4LKTCjJkfBr1cm5RxN41dvbABXgmIMWq
5NHWEXrE8HcktKnfngKGk2RNLnylGGbuRWRlVO3Gr1DzdqfvBfmICIKpC2ikBiWl
TsYa9psMomROpF42Xzq9PCh17ELdfooTjgncjsaqGq52KJTDG/6R0QlUktBhyWEY
qNMPTbVuSu5EFZGDz4c7c+oaQVAokaPIOMiVKjgyybNSyDV3FmrdWzCB0zdSeSSR
z2q8pkHR7zxC0aFEK/YRejE9txCKFW5zeAl3j5M9/4pPCm0tyT+6bJOwe7X6NqZz
Foq5k1zXH0wfXYThGN0YQANbaFUS3cG/2HzzyRecFetqhDT+NwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJVLsLhfw2WYvsQxPPwPlNLDDZexMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2M5ZjQ0ZjktMThkZS0z
MzJiLWEwZjUtYzFlYWY2OTc1OTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEGswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbtWQUUSMUIr5icaNYQE320T/pkEnmy+1GbW5V43HXyEuOjKwc2lBDF9L
DBX8XC/4X+YhJF9pnfzrWdTTEL/SF8cnDnV7aXzKTxhjX/4IsnHrQjKr3WGYSGvp
dxyiOa9bUo97gTHtgPgNgu5mFAw4Py7kgBXLoXOWwGe1Rt/kXSlUf+ua7lLNsSWj
+FEyRopl2Vbleeqn6M66qwJEk7EjO92UMKksTFNuPN0L7cBmIeNHFP8UlRLJP/t8
IJHgoQW/feVyIhm7Py/hsZ54+zpEJOQPqctz3Xj/7P565kI06MvZiO6R+p/291hZ
tUtBRfG9soS98JR2TZnwCvD8iOmMuA==
-----END CERTIFICATE-----
Generated at Tue Apr 15 20:55:29 2025 by rpki-client