Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d1be4ad-35fb-39f3-bf9d-fde7f79add37.roa
File: 3d1be4ad-35fb-39f3-bf9d-fde7f79add37.roa (raw, json)
Hash identifier: LfqEYrWccMu22EnQc3TKx+YBc30lcCt71Wrp4oLGBkU=
Subject key identifier: 0C:46:EF:FC:C4:FE:84:2F:A0:5B:6C:1C:17:62:C1:2A:C1:A2:CE:8E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E41EB86E6CF53408C952C1B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d1be4ad-35fb-39f3-bf9d-fde7f79add37.roa
Signing time: Wed 15 Jun 2022 12:00:00 +0000
ROA not before: Wed 15 Jun 2022 12:00:00 +0000
ROA not after: Thu 21 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:41:eb:86:e6:cf:53:40:8c:95:2c:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 15 12:00:00 2022 GMT
Not After : Jul 21 04:00:00 2022 GMT
Subject: CN=7eca56bd-ca5e-4d0d-a2f1-7b7c038e971d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:8c:22:3b:2b:99:97:c2:46:2d:9d:04:b8:
e5:e2:5e:2d:77:4b:a2:98:51:d7:5b:36:a3:f1:53:
fb:81:b6:a8:f7:56:9d:2a:20:21:bc:00:69:4c:15:
ae:d1:d5:bd:40:0f:f8:d5:7d:79:8a:eb:5a:cd:90:
84:51:cd:89:d1:a5:ed:e4:53:6b:dc:7c:e4:ae:32:
0f:e8:f4:5a:81:e9:29:58:a6:a1:92:a2:ef:73:81:
ed:6f:3c:c7:b3:a4:45:bd:74:91:40:56:d5:70:1d:
2f:78:72:69:54:ca:be:04:a7:9a:ba:ba:05:f0:60:
b3:24:36:aa:c3:79:93:25:ee:0a:59:a9:fc:33:bc:
2c:09:44:f4:d4:0a:aa:7b:d4:fe:5a:45:69:ad:61:
58:1a:b2:59:81:97:a2:2d:89:94:9f:58:ff:0b:19:
44:4e:9f:7e:af:5e:8e:25:b9:c4:9d:b2:d3:b4:7e:
31:c0:69:cc:88:71:74:b0:32:8c:bf:cb:d7:a7:6c:
d3:5e:99:aa:fd:87:70:43:d5:17:22:08:0e:20:e3:
ec:30:ca:d3:f4:43:53:11:b4:c9:ee:69:23:f0:54:
34:13:9a:1a:53:b4:fa:dd:a9:83:37:42:05:eb:6e:
05:d2:a1:71:ad:07:d1:43:09:10:5b:00:6d:02:7c:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:46:EF:FC:C4:FE:84:2F:A0:5B:6C:1C:17:62:C1:2A:C1:A2:CE:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3d1be4ad-35fb-39f3-bf9d-fde7f79add37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:dc:f1:e9:a0:49:38:0d:fb:82:f7:26:35:24:3b:cd:a8:58:
65:b7:9a:56:89:89:a2:fd:08:48:36:4a:64:8e:6c:39:41:19:
1e:2c:ca:7a:45:c3:f4:47:9c:bb:84:5e:b2:71:a6:b7:fe:fa:
f3:d7:0f:a8:97:0e:20:e2:b3:bf:cf:05:c8:e3:69:5e:30:67:
ab:01:75:84:3d:3d:49:b5:db:c8:3b:a3:12:f4:d8:ae:f5:eb:
73:3f:00:8e:aa:33:59:bc:bb:b3:12:d2:05:83:f3:11:43:be:
6c:6b:3b:ff:2d:7e:ae:2c:8f:b4:0f:d9:eb:f0:28:eb:16:a9:
ff:ec:2b:cb:00:38:45:1b:84:c5:d4:26:a9:ed:e1:a7:f1:66:
e5:11:a1:6d:89:0e:ea:20:95:dc:a2:fd:1b:6e:b9:f0:72:a0:
b7:82:a5:0e:17:7b:20:0d:12:b6:e5:9d:72:59:5e:a2:43:e1:
e8:3c:72:ef:e6:35:30:fc:f2:f4:eb:08:2a:3e:be:cc:50:47:
d2:dd:3b:f4:01:08:36:f0:1d:d6:1e:e9:c4:66:a6:a2:2e:f6:
e8:b1:fe:6f:59:55:8a:77:74:74:e4:ed:10:66:a1:fd:6a:f2:
48:cf:d0:2a:6a:29:97:22:1b:53:ac:5b:03:7e:1a:4b:f0:af:
2c:29:80:a0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5B64bmz1NAjJUsGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxNTEyMDAwMFoXDTIyMDcyMTA0MDAwMFowLzEtMCsGA1UEAxMk
N2VjYTU2YmQtY2E1ZS00ZDBkLWEyZjEtN2I3YzAzOGU5NzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5uMIjsrmZfCRi2dBLjl4l4td0uimFHXWzaj
8VP7gbao91adKiAhvABpTBWu0dW9QA/41X15iutazZCEUc2J0aXt5FNr3HzkrjIP
6PRagekpWKahkqLvc4HtbzzHs6RFvXSRQFbVcB0veHJpVMq+BKeauroF8GCzJDaq
w3mTJe4KWan8M7wsCUT01Aqqe9T+WkVprWFYGrJZgZeiLYmUn1j/CxlETp9+r16O
JbnEnbLTtH4xwGnMiHF0sDKMv8vXp2zTXpmq/YdwQ9UXIggOIOPsMMrT9ENTEbTJ
7mkj8FQ0E5oaU7T63amDN0IF624F0qFxrQfRQwkQWwBtAnzQtwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAxG7/zE/oQvoFtsHBdiwSrBos6OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvM2QxYmU0YWQtMzVmYi0z
OWYzLWJmOWQtZmRlN2Y3OWFkZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAItzx6aBJOA37gvcmNSQ7zahYZbeaVomJov0ISDZKZI5sOUEZHizKekXD
9Eecu4ResnGmt/7689cPqJcOIOKzv88FyONpXjBnqwF1hD09SbXbyDujEvTYrvXr
cz8AjqozWby7sxLSBYPzEUO+bGs7/y1+riyPtA/Z6/Ao6xap/+wrywA4RRuExdQm
qe3hp/Fm5RGhbYkO6iCV3KL9G2658HKgt4KlDhd7IA0StuWdclleokPh6Dxy7+Y1
MPzy9OsIKj6+zFBH0t079AEINvAd1h7pxGamoi726LH+b1lVind0dOTtEGah/Wry
SM/QKmoplyIbU6xbA34aS/CvLCmAoA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:24 2025 by rpki-client