Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58917299-1c9a-3887-a3fd-acf7aca5b2a3.roa
File: 58917299-1c9a-3887-a3fd-acf7aca5b2a3.roa (raw, json)
Hash identifier: Ra2tPRw2E9jnsmRG740hrpSrG+vIqXECppUKsZlT8Ec=
Subject key identifier: D5:CE:6F:B8:00:7E:4F:22:0F:02:40:20:9D:62:7F:8F:43:60:79:63
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406D9F413767AB47A8450CA240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58917299-1c9a-3887-a3fd-acf7aca5b2a3.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:9f:41:37:67:ab:47:a8:45:0c:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=74ca04f5-ce9a-4d2a-be9a-6a5b2ddf772d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:6e:04:22:1f:ac:50:c7:b5:a7:5d:cc:f7:
1e:52:b4:40:f1:05:c2:3b:27:0d:d1:0a:d5:64:a7:
fb:5e:4a:e6:6c:c8:21:14:e7:51:b6:86:b7:0a:18:
b1:e9:f5:2f:5d:98:da:42:2d:46:13:19:01:15:1b:
35:f5:78:77:24:3f:02:aa:76:89:57:81:99:b9:fa:
f2:e2:fd:bf:db:a6:a1:cc:a7:6f:87:e0:53:58:0d:
9a:e1:47:9b:26:45:1b:d7:1b:df:6f:1b:9b:bd:5d:
ab:d8:ff:ba:ed:2f:b7:8e:89:ea:5c:2d:88:22:b8:
cf:df:b6:e7:e4:79:67:90:9a:93:7e:fe:ef:6f:5c:
52:e5:ea:28:ff:ac:04:89:62:97:d2:ab:8b:e2:65:
20:a6:9b:cb:6a:45:b3:3d:93:b0:fe:5a:99:7b:5c:
db:a4:ba:99:36:36:a3:13:bc:52:a1:bf:18:d4:ee:
03:cc:58:e1:6b:d9:26:94:54:22:55:65:3f:48:05:
e0:a6:0a:68:ed:13:95:5b:db:99:1b:da:92:29:37:
06:16:25:0b:e8:e7:f5:70:c5:de:20:aa:af:c7:52:
70:60:ec:84:c4:41:dd:94:c8:f0:80:60:2c:dd:38:
25:07:13:48:9e:8f:84:cb:25:7f:80:bf:b4:93:10:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CE:6F:B8:00:7E:4F:22:0F:02:40:20:9D:62:7F:8F:43:60:79:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/58917299-1c9a-3887-a3fd-acf7aca5b2a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:6b:64:8c:cc:9e:c2:51:c0:f5:e0:70:fb:b8:80:8a:1f:38:
ea:d2:b1:e8:b3:40:fe:5d:65:af:c5:ea:23:91:c1:b0:62:65:
36:0a:76:c7:ba:05:01:95:44:f3:49:53:d4:9e:9a:58:1b:10:
39:e3:66:0e:39:fd:f5:57:73:39:77:91:00:8a:43:7a:38:17:
4e:28:26:cd:3e:23:73:b2:7d:37:be:7b:0d:04:0d:84:6f:24:
46:16:f0:48:7d:a2:b4:52:3d:0e:3d:fc:51:72:df:c0:47:9a:
d0:1c:6c:c1:88:76:46:44:c0:c6:2e:bc:3a:d4:c9:39:4e:f1:
0b:79:ed:a4:26:b6:75:cd:f1:43:9b:77:2d:aa:68:cf:49:a7:
57:4a:97:fe:91:45:49:98:03:84:d3:6e:9d:3a:e4:94:fa:d2:
10:f8:0e:ba:f3:09:96:3d:1d:49:06:dd:bf:02:e3:8e:80:8b:
28:58:29:85:b4:c6:61:e6:7f:ad:46:e6:a5:c5:35:4b:4e:20:
ba:5c:d8:98:9f:be:89:94:c2:35:4e:33:d0:ba:52:4a:34:ff:
43:ca:05:16:77:20:fb:79:10:a2:c1:08:cf:19:ab:8f:53:0f:
a7:30:3a:97:79:33:f6:07:97:08:70:1a:7b:be:a5:d1:37:0b:
c4:ff:4c:94
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBtn0E3Z6tHqEUMokAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIzMTEyMDAwMFoXDTIzMDIwNTA1MDAwMFowLzEtMCsGA1UEAxMk
NzRjYTA0ZjUtY2U5YS00ZDJhLWJlOWEtNmE1YjJkZGY3NzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiJuBCIfrFDHtaddzPceUrRA8QXCOycN0QrV
ZKf7XkrmbMghFOdRtoa3Chix6fUvXZjaQi1GExkBFRs19Xh3JD8CqnaJV4GZufry
4v2/26ahzKdvh+BTWA2a4UebJkUb1xvfbxubvV2r2P+67S+3jonqXC2IIrjP37bn
5HlnkJqTfv7vb1xS5eoo/6wEiWKX0quL4mUgppvLakWzPZOw/lqZe1zbpLqZNjaj
E7xSob8Y1O4DzFjha9kmlFQiVWU/SAXgpgpo7ROVW9uZG9qSKTcGFiUL6Of1cMXe
IKqvx1JwYOyExEHdlMjwgGAs3TglBxNIno+EyyV/gL+0kxC82wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNXOb7gAfk8iDwJAIJ1if49DYHljMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNTg5MTcyOTktMWM5YS0z
ODg3LWEzZmQtYWNmN2FjYTViMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsGtkjMyewlHA9eBw+7iAih846tKx6LNA/l1lr8XqI5HBsGJlNgp2x7oF
AZVE80lT1J6aWBsQOeNmDjn99VdzOXeRAIpDejgXTigmzT4jc7J9N757DQQNhG8k
RhbwSH2itFI9Dj38UXLfwEea0BxswYh2RkTAxi68OtTJOU7xC3ntpCa2dc3xQ5t3
Lapoz0mnV0qX/pFFSZgDhNNunTrklPrSEPgOuvMJlj0dSQbdvwLjjoCLKFgphbTG
YeZ/rUbmpcU1S04gulzYmJ++iZTCNU4z0LpSSjT/Q8oFFncg+3kQosEIzxmrj1MP
pzA6l3kz9geXCHAae76l0TcLxP9MlA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:15 2025 by rpki-client