Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/457f868d-e00c-3172-959b-a223cec5f796.roa
File: 457f868d-e00c-3172-959b-a223cec5f796.roa (raw, json)
Hash identifier: aehe60jw5AeOQ1ZCwgXtMF0KGdba2K6mvV1uWfzyJnc=
Subject key identifier: B2:75:FD:1C:D8:FF:2C:38:8F:11:A8:07:1E:4B:2C:E6:A1:46:9A:AE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409ADEE94416E3E490D731F740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/457f868d-e00c-3172-959b-a223cec5f796.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9a:de:e9:44:16:e3:e4:90:d7:31:f7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=6b09ae15-cdb1-4947-a0dd-39032bab53c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:86:65:05:d3:ef:46:6d:c9:5f:b9:20:e1:
69:38:77:49:81:24:1c:05:1b:e0:ff:04:99:9a:8f:
c0:d2:a6:be:bb:0a:fe:08:d6:25:93:7e:8d:f7:d8:
70:f8:7b:1d:a1:02:b8:8a:53:e3:19:99:e9:99:2e:
da:b9:f4:31:19:91:78:ca:57:8e:81:9f:be:21:be:
01:d1:75:06:37:ef:c5:18:7c:ef:30:10:b2:41:84:
ac:f6:6a:f5:d6:5a:86:bb:2f:60:3f:95:ce:bf:32:
72:d5:11:75:99:11:c5:86:0b:bf:02:46:70:70:30:
2c:22:0f:71:a2:f6:68:19:be:45:2f:42:5b:75:b8:
31:42:78:82:98:3e:27:22:11:b4:98:0a:61:bb:fd:
51:c9:a5:f9:a6:a0:c3:82:28:89:46:52:70:33:8e:
53:00:aa:e4:f1:d0:98:ff:2d:1f:0c:76:b7:b6:c2:
2c:dd:7b:01:43:9a:97:71:1e:44:98:f5:00:34:e1:
ff:87:b2:2a:38:36:91:ec:be:02:6e:4b:9a:84:ae:
f2:ef:14:1e:84:e3:4f:d8:cd:94:cd:64:33:4c:35:
52:d0:3b:5c:7f:b0:b7:7f:da:43:c3:c2:04:9c:79:
81:c4:d9:bd:3c:cb:64:17:3f:65:c5:55:03:2a:f3:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:75:FD:1C:D8:FF:2C:38:8F:11:A8:07:1E:4B:2C:E6:A1:46:9A:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/457f868d-e00c-3172-959b-a223cec5f796.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:e3:89:9e:20:fd:dc:00:3a:8d:ea:ca:1e:67:bf:78:90:df:
c9:35:c8:e4:bf:90:74:ae:f3:0b:d4:a0:5e:bf:65:a2:78:c3:
3a:10:3f:0b:76:d3:f1:e8:fb:20:3f:3f:c0:57:5d:77:8c:af:
81:d5:db:49:38:53:55:51:d3:45:e5:ef:1d:d5:82:0b:23:5f:
3e:de:d4:b7:34:a8:96:16:ad:83:46:64:37:9f:da:62:da:32:
0e:4d:a0:29:cf:c4:98:a3:05:9c:ec:3c:14:7e:cc:3c:d1:11:
22:cb:04:76:d2:85:7b:dc:25:38:90:45:37:99:62:2e:72:cd:
0c:4b:17:85:64:a7:3c:e8:ce:e6:bc:e8:b6:ac:11:11:c2:32:
8e:2f:fb:b1:75:3d:e7:3e:3f:bf:62:0e:17:e0:6e:ac:4a:7f:
26:7e:1c:39:31:72:a2:e5:c8:51:f5:af:8a:be:c0:8b:0d:82:
3b:cd:1f:c1:1e:af:9e:68:21:eb:7b:18:c7:b6:8a:39:f7:3a:
a1:79:e2:49:e8:e2:cf:50:4c:83:53:87:d2:2b:17:51:fa:22:
06:38:70:7e:63:a6:0f:3d:99:27:25:52:f8:ac:c7:6e:37:2d:
25:22:58:8f:a5:8f:05:cf:ab:10:55:a3:8f:43:d0:9f:8c:b4:
fa:bd:6a:e1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECa3ulEFuPkkNcx90AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExNjEyMDAwMFoXDTIzMDIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
NmIwOWFlMTUtY2RiMS00OTQ3LWEwZGQtMzkwMzJiYWI1M2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0mGZQXT70ZtyV+5IOFpOHdJgSQcBRvg/wSZ
mo/A0qa+uwr+CNYlk36N99hw+HsdoQK4ilPjGZnpmS7aufQxGZF4yleOgZ++Ib4B
0XUGN+/FGHzvMBCyQYSs9mr11lqGuy9gP5XOvzJy1RF1mRHFhgu/AkZwcDAsIg9x
ovZoGb5FL0JbdbgxQniCmD4nIhG0mAphu/1RyaX5pqDDgiiJRlJwM45TAKrk8dCY
/y0fDHa3tsIs3XsBQ5qXcR5EmPUANOH/h7IqODaR7L4CbkuahK7y7xQehONP2M2U
zWQzTDVS0Dtcf7C3f9pDw8IEnHmBxNm9PMtkFz9lxVUDKvMlewIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLJ1/RzY/yw4jxGoBx5LLOahRpquMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNDU3Zjg2OGQtZTAwYy0z
MTcyLTk1OWItYTIyM2NlYzVmNzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJOOJniD93AA6jerKHme/eJDfyTXI5L+QdK7zC9SgXr9lonjDOhA/C3bT
8ej7ID8/wFddd4yvgdXbSThTVVHTReXvHdWCCyNfPt7UtzSolhatg0ZkN5/aYtoy
Dk2gKc/EmKMFnOw8FH7MPNERIssEdtKFe9wlOJBFN5liLnLNDEsXhWSnPOjO5rzo
tqwREcIyji/7sXU95z4/v2IOF+BurEp/Jn4cOTFyouXIUfWvir7Aiw2CO80fwR6v
nmgh63sYx7aKOfc6oXniSejiz1BMg1OH0isXUfoiBjhwfmOmDz2ZJyVS+KzHbjct
JSJYj6WPBc+rEFWjj0PQn4y0+r1q4Q==
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:10:51 2025 by rpki-client