Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5128ea72-d489-32af-acc1-9c0ad36361bd.roa
File: 5128ea72-d489-32af-acc1-9c0ad36361bd.roa (raw, json)
Hash identifier: 925JOJE73CqUb4MQqroWr0uXfxXyCA2tMa0dY0lqP20=
Subject key identifier: A6:56:00:FD:89:12:D7:A5:A8:FC:F6:86:BB:D5:66:69:7B:7D:DA:A3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DCC8D22EC644F1854A1C39D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5128ea72-d489-32af-acc1-9c0ad36361bd.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.92.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cc:8d:22:ec:64:4f:18:54:a1:c3:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=809b772f-85f0-4249-8cac-b169febba647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:99:b9:57:41:11:92:d4:c6:d7:dc:fa:bb:59:
fa:79:67:e3:0e:a3:07:5b:ec:9c:70:9b:fa:09:2e:
f0:27:1c:16:18:db:5d:b2:6f:bd:c2:ce:d9:f5:c6:
0a:1b:d1:7b:1c:5d:02:56:a4:d7:6c:45:e2:84:12:
6d:d9:d6:08:b4:6a:54:3c:3c:b0:13:45:01:66:da:
89:65:72:94:5b:43:71:35:7d:18:2f:54:fd:01:50:
0a:4d:5e:2d:49:e7:0c:6c:8c:df:6d:6a:1b:b5:0f:
ca:f2:c6:3d:e2:bc:f7:ba:0b:50:d4:64:e1:27:c5:
ba:6d:6a:70:34:cc:d4:86:c1:7b:c1:fc:cf:ff:8f:
57:ae:d2:f9:3e:65:49:e5:d6:d8:b4:aa:1d:84:cb:
c9:17:b4:89:1f:26:fc:1a:56:97:a5:47:8c:09:58:
ce:5d:cb:7a:7c:3f:ee:49:1b:47:61:97:53:b5:7c:
c7:24:b5:63:87:b8:0d:61:61:01:14:6b:b9:7e:f6:
57:5b:32:01:32:0e:6d:4a:14:a1:45:b4:5c:f6:13:
68:a8:45:85:ed:28:96:f2:64:b6:26:9a:24:89:65:
f5:7f:11:d2:32:92:a8:8d:f7:0c:25:2e:31:ad:ba:
c0:d5:bd:8c:67:0e:e6:05:a9:dc:00:75:c0:08:cc:
8b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:56:00:FD:89:12:D7:A5:A8:FC:F6:86:BB:D5:66:69:7B:7D:DA:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5128ea72-d489-32af-acc1-9c0ad36361bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.92.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:dd:21:7e:d8:aa:fb:45:fd:79:09:30:75:73:17:26:d0:84:
c7:05:64:a6:20:27:80:ea:02:76:5f:f0:ce:48:93:c7:75:97:
d2:c9:69:ce:fc:8c:f6:52:31:c5:cc:34:b1:ab:c4:38:1d:f2:
93:8c:9b:67:50:39:e9:f4:29:93:b6:71:7d:f5:47:31:40:96:
4b:8c:27:88:13:57:6f:9b:21:7a:68:43:c2:c2:a6:24:8f:7b:
83:c6:e8:bb:e1:bf:d8:45:4c:5a:fe:ed:37:4f:63:93:7f:99:
54:2e:00:c8:5b:bb:5b:58:c4:b1:83:65:e5:89:0d:1a:2d:b8:
45:eb:7f:20:89:2e:ee:9e:0f:e5:21:96:5e:cd:5a:71:c3:3b:
f6:73:60:97:dc:e5:a9:db:b6:dd:73:24:ec:b3:90:fb:b0:94:
22:42:27:00:f3:c0:a1:4b:e6:63:3c:b6:ac:58:0f:61:f1:3e:
90:58:42:e4:93:75:01:a3:40:4d:cf:a9:b1:ad:fa:bf:2a:3d:
3b:a3:d8:c8:7b:6e:db:f4:aa:9e:3c:cd:cf:e2:1a:7a:ed:63:
68:dd:ee:9e:c0:6f:b8:d0:16:35:55:9a:5d:3c:85:27:ea:ed:
9f:17:ab:5c:50:11:42:b0:4e:0d:a1:2c:9e:69:b2:2e:3d:27:
cb:bb:a2:ef
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3MjSLsZE8YVKHDnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUwNDEyMDAwMFoXDTIyMDYwOTA0MDAwMFowLzEtMCsGA1UEAxMk
ODA5Yjc3MmYtODVmMC00MjQ5LThjYWMtYjE2OWZlYmJhNjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZm5V0ERktTG19z6u1n6eWfjDqMHW+yccJv6
CS7wJxwWGNtdsm+9ws7Z9cYKG9F7HF0CVqTXbEXihBJt2dYItGpUPDywE0UBZtqJ
ZXKUW0NxNX0YL1T9AVAKTV4tSecMbIzfbWobtQ/K8sY94rz3ugtQ1GThJ8W6bWpw
NMzUhsF7wfzP/49XrtL5PmVJ5dbYtKodhMvJF7SJHyb8GlaXpUeMCVjOXct6fD/u
SRtHYZdTtXzHJLVjh7gNYWEBFGu5fvZXWzIBMg5tShShRbRc9hNoqEWF7SiW8mS2
JpokiWX1fxHSMpKojfcMJS4xrbrA1b2MZw7mBancAHXACMyLawIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKZWAP2JEtelqPz2hrvVZml7fdqjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTEyOGVhNzItZDQ4OS0z
MmFmLWFjYzEtOWMwYWQzNjM2MWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEFwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXt0hftiq+0X9eQkwdXMXJtCExwVkpiAngOoCdl/wzkiTx3WX0slpzvyM
9lIxxcw0savEOB3yk4ybZ1A56fQpk7ZxffVHMUCWS4wniBNXb5shemhDwsKmJI97
g8bou+G/2EVMWv7tN09jk3+ZVC4AyFu7W1jEsYNl5YkNGi24Ret/IIku7p4P5SGW
Xs1accM79nNgl9zlqdu23XMk7LOQ+7CUIkInAPPAoUvmYzy2rFgPYfE+kFhC5JN1
AaNATc+psa36vyo9O6PYyHtu2/SqnjzNz+Iaeu1jaN3unsBvuNAWNVWaXTyFJ+rt
nxerXFARQrBODaEsnmmyLj0ny7ui7w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:50 2025 by rpki-client