Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c8a83e3-557e-3541-8c23-2799d9cf38de.roa
File: 5c8a83e3-557e-3541-8c23-2799d9cf38de.roa (raw, json)
Hash identifier: hMA25ANx0TCnOhJawnniezkRzSaJG72XE9oO6GJjxZs=
Subject key identifier: 17:40:50:CD:AB:72:03:AA:5B:06:8D:DD:DA:BC:1E:DB:4B:80:64:24
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F831D69B900D2E180DE803080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c8a83e3-557e-3541-8c23-2799d9cf38de.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.214.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:1d:69:b9:00:d2:e1:80:de:80:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=4e52f5fb-139b-4267-ba26-9cffd37f6393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:10:a5:eb:1d:50:ab:29:99:e8:75:5e:4e:
07:51:28:2d:46:b6:2c:6c:2f:7f:b9:61:32:29:23:
df:57:40:59:79:b4:4a:9d:cd:86:42:66:ad:2b:6e:
04:a0:91:1a:40:7d:e8:22:6d:ca:f5:34:46:b0:d9:
f9:40:7f:2f:6f:7a:b4:a4:21:b6:a3:21:a5:f5:7c:
b5:48:81:7e:0e:27:48:37:d9:2c:95:47:a4:2d:98:
5a:8b:8c:4b:12:22:e6:69:51:44:ad:c6:ce:6c:d7:
0b:fc:e1:90:f7:6a:90:38:4c:1f:71:ea:38:aa:25:
7d:b0:7c:f1:d6:80:6e:9c:98:9a:32:8a:f5:58:93:
12:0d:79:ff:de:9f:27:ea:86:b7:b1:d0:33:fb:be:
fb:32:14:a9:85:77:bc:a2:57:50:42:94:4a:6f:ec:
b9:1d:8a:b9:ff:ec:e5:f8:87:67:46:7b:3a:e9:fa:
ac:89:62:94:72:16:ad:2a:0f:1f:ea:25:f5:3b:7a:
1f:ff:90:25:81:cb:ca:97:ca:59:a8:61:64:62:32:
1f:9e:01:76:d7:0d:e2:4a:77:70:d3:cd:b7:e9:20:
65:0d:ee:2c:b1:f9:98:f3:87:0b:6a:9e:d7:d2:55:
8b:48:ae:95:22:ad:38:27:ac:8c:92:fe:f9:ae:ef:
6c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:40:50:CD:AB:72:03:AA:5B:06:8D:DD:DA:BC:1E:DB:4B:80:64:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c8a83e3-557e-3541-8c23-2799d9cf38de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.214.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:e4:29:a3:59:11:90:04:68:e9:72:a2:57:b5:82:6e:3b:62:
fd:3c:1e:8a:16:36:38:fd:53:c5:37:83:ce:68:df:c2:d2:c1:
5b:1a:e9:88:33:eb:db:61:69:79:4c:c3:81:ae:1b:b9:19:4a:
eb:b3:43:d0:0f:6e:8f:96:f6:38:5f:9d:3b:0a:6b:62:0c:2b:
05:25:fb:bf:50:51:8b:9d:43:73:fe:ce:e9:9b:8f:72:b2:42:
3b:8f:3d:3b:72:64:39:37:5d:9e:6b:c2:7e:78:84:09:ff:2c:
79:0c:91:8b:63:48:5b:4b:e5:cf:a8:61:d0:48:25:89:9b:e1:
3b:88:36:ff:30:fb:ce:a1:bd:99:b2:81:6c:99:5b:19:9d:ee:
5a:a4:d0:ac:8b:bf:01:a0:75:ef:b3:72:4a:7d:9d:07:7a:6f:
7b:5c:7b:1c:25:65:bc:c6:4e:cd:5a:9a:05:5a:4a:b7:6b:9a:
ee:1b:fd:1d:16:1d:4b:7e:15:fd:b4:26:63:ed:11:b7:1d:ff:
19:df:50:26:90:71:3d:af:80:bf:88:88:50:b9:6d:e8:b7:97:
f6:68:ac:10:54:90:8a:7c:fd:17:41:10:b1:50:42:7a:f2:88:
90:be:d1:99:ac:e5:88:2b:34:75:d0:fb:e7:31:87:91:fd:85:
c4:30:18:45
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+DHWm5ANLhgN6AMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAwODEyMDAwMFoXDTIyMTExMzA1MDAwMFowLzEtMCsGA1UEAxMk
NGU1MmY1ZmItMTM5Yi00MjY3LWJhMjYtOWNmZmQzN2Y2MzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhAQpesdUKspmeh1Xk4HUSgtRrYsbC9/uWEy
KSPfV0BZebRKnc2GQmatK24EoJEaQH3oIm3K9TRGsNn5QH8vb3q0pCG2oyGl9Xy1
SIF+DidIN9kslUekLZhai4xLEiLmaVFErcbObNcL/OGQ92qQOEwfceo4qiV9sHzx
1oBunJiaMor1WJMSDXn/3p8n6oa3sdAz+777MhSphXe8oldQQpRKb+y5HYq5/+zl
+IdnRns66fqsiWKUchatKg8f6iX1O3of/5AlgcvKl8pZqGFkYjIfngF21w3iSndw
08236SBlDe4ssfmY84cLap7X0lWLSK6VIq04J6yMkv75ru9sOQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBdAUM2rcgOqWwaN3dq8HttLgGQkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWM4YTgzZTMtNTU3ZS0z
NTQxLThjMjMtMjc5OWQ5Y2YzOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAENYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANuQpo1kRkARo6XKiV7WCbjti/TweihY2OP1TxTeDzmjfwtLBWxrpiDPr
22FpeUzDga4buRlK67ND0A9uj5b2OF+dOwprYgwrBSX7v1BRi51Dc/7O6ZuPcrJC
O489O3JkOTddnmvCfniECf8seQyRi2NIW0vlz6hh0EgliZvhO4g2/zD7zqG9mbKB
bJlbGZ3uWqTQrIu/AaB177NySn2dB3pve1x7HCVlvMZOzVqaBVpKt2ua7hv9HRYd
S34V/bQmY+0Rtx3/Gd9QJpBxPa+Av4iIULlt6LeX9misEFSQinz9F0EQsVBCevKI
kL7RmazliCs0ddD75zGHkf2FxDAYRQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:07 2025 by rpki-client