Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/435055bc-f16f-3e95-a03d-6f813a37a8b2.roa
File: 435055bc-f16f-3e95-a03d-6f813a37a8b2.roa (raw, json)
Hash identifier: SVRBPmDJiqL0EvIQN/yMHjWWKpS6T75zUUKdQaF98cM=
Subject key identifier: 4B:1B:27:4C:68:6D:E0:4A:EC:1D:02:69:5D:F9:DE:AA:49:7C:3D:0E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E49A7EF21FA0A930E2C280100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/435055bc-f16f-3e95-a03d-6f813a37a8b2.roa
Signing time: Sat 18 Jun 2022 12:00:00 +0000
ROA not before: Sat 18 Jun 2022 12:00:00 +0000
ROA not after: Sun 24 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.214.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:49:a7:ef:21:fa:0a:93:0e:2c:28:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 18 12:00:00 2022 GMT
Not After : Jul 24 04:00:00 2022 GMT
Subject: CN=b66b58b4-de01-4102-be3c-6faf81c37cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:9b:e8:f6:0d:60:b5:a6:17:b2:81:8a:23:
49:b2:62:e8:b8:4e:1b:4a:1d:2e:f8:e4:0c:67:dc:
5f:0a:e2:b5:8b:87:5f:ed:d2:c3:86:02:f5:ef:13:
47:4c:b3:18:a7:4a:ea:9b:2b:f1:65:20:26:ec:3f:
fd:05:d1:df:30:de:cd:f4:43:c2:15:82:28:71:53:
ca:e2:18:e0:17:fe:71:51:2e:e1:5f:46:e1:04:c0:
e4:29:65:5c:1e:76:ff:fe:b1:87:73:b3:50:4d:6b:
4f:74:05:48:9a:76:11:d4:ea:db:1d:78:01:08:a4:
15:8a:3d:0f:66:69:d7:1c:c5:2c:db:0b:6f:a8:ab:
ff:fa:1e:46:53:32:82:4a:a5:bb:53:43:75:d8:39:
f3:a2:8f:e8:1e:97:ed:68:98:68:7d:df:79:16:e1:
d9:cc:fa:66:2c:21:21:76:bd:3e:c7:a0:0d:7a:86:
6b:11:65:6b:3c:9f:3a:51:e1:96:25:c9:6c:86:79:
fc:e0:ec:23:b0:5d:0b:0c:4f:b3:72:fe:20:33:68:
ca:bd:c7:94:13:a3:5c:98:0d:74:9d:c3:65:28:54:
69:0a:2e:66:8c:1e:e8:a2:ca:36:cb:29:e0:d2:e1:
65:66:05:11:e2:3b:65:c0:24:3f:5a:28:ce:4f:d3:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1B:27:4C:68:6D:E0:4A:EC:1D:02:69:5D:F9:DE:AA:49:7C:3D:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/435055bc-f16f-3e95-a03d-6f813a37a8b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.214.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:f8:e8:93:27:79:d2:69:2b:9c:ed:dc:f1:ab:26:b6:e9:38:
ec:91:cc:8d:0d:7b:9b:f4:8a:56:6b:a4:17:64:ab:ff:85:d4:
b6:4a:f5:95:07:9a:a5:b6:93:6d:8f:9f:85:8d:17:1f:9b:46:
80:d8:16:e3:31:46:61:42:97:10:c4:7e:22:ef:c1:d2:06:0c:
dd:cd:91:80:2a:77:71:33:6f:60:28:a8:23:18:5b:36:99:60:
ca:6c:f0:63:49:e5:0a:81:f3:2e:f2:ac:b3:27:f1:91:c9:22:
ee:22:fe:96:3f:59:70:c9:2b:25:7c:db:86:d2:3c:ad:c8:c3:
ed:17:b2:86:98:e0:05:b5:d9:ee:11:55:6b:d7:7f:d6:0e:0b:
29:6d:4b:a4:47:87:a4:2b:f9:e9:9e:b1:9b:1e:9f:07:2e:46:
51:1e:27:f8:ce:30:50:83:e7:af:d9:73:3c:88:98:26:b2:c7:
a2:13:3d:4d:5d:e4:be:83:6a:54:f7:28:f5:78:93:e5:86:ae:
c0:11:ef:6e:2d:a5:46:a7:c9:64:6f:8b:3a:7f:8b:b0:5d:0b:
af:0f:77:f9:a4:d9:9a:df:37:57:26:48:ed:35:00:43:bc:1f:
bd:a3:d9:d5:7d:32:95:3c:58:b3:d0:c4:52:b3:e0:99:7f:74:
26:fb:38:0b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5Jp+8h+gqTDiwoAQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxODEyMDAwMFoXDTIyMDcyNDA0MDAwMFowLzEtMCsGA1UEAxMk
YjY2YjU4YjQtZGUwMS00MTAyLWJlM2MtNmZhZjgxYzM3Y2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCib6PYNYLWmF7KBiiNJsmLouE4bSh0u+OQM
Z9xfCuK1i4df7dLDhgL17xNHTLMYp0rqmyvxZSAm7D/9BdHfMN7N9EPCFYIocVPK
4hjgF/5xUS7hX0bhBMDkKWVcHnb//rGHc7NQTWtPdAVImnYR1OrbHXgBCKQVij0P
ZmnXHMUs2wtvqKv/+h5GUzKCSqW7U0N12Dnzoo/oHpftaJhofd95FuHZzPpmLCEh
dr0+x6ANeoZrEWVrPJ86UeGWJclshnn84OwjsF0LDE+zcv4gM2jKvceUE6NcmA10
ncNlKFRpCi5mjB7ooso2yyng0uFlZgUR4jtlwCQ/WijOT9OhZQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEsbJ0xobeBK7B0CaV353qpJfD0OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDM1MDU1YmMtZjE2Zi0z
ZTk1LWEwM2QtNmY4MTNhMzdhOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAENYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAl/jokyd50mkrnO3c8asmtuk47JHMjQ17m/SKVmukF2Sr/4XUtkr1lQea
pbaTbY+fhY0XH5tGgNgW4zFGYUKXEMR+Iu/B0gYM3c2RgCp3cTNvYCioIxhbNplg
ymzwY0nlCoHzLvKssyfxkcki7iL+lj9ZcMkrJXzbhtI8rcjD7ReyhpjgBbXZ7hFV
a9d/1g4LKW1LpEeHpCv56Z6xmx6fBy5GUR4n+M4wUIPnr9lzPIiYJrLHohM9TV3k
voNqVPco9XiT5YauwBHvbi2lRqfJZG+LOn+LsF0Lrw93+aTZmt83VyZI7TUAQ7wf
vaPZ1X0ylTxYs9DEUrPgmX90Jvs4Cw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 21:52:46 2025 by rpki-client