Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5fdab7da-964c-3045-8ae1-795f6adbedbc.roa
File: 5fdab7da-964c-3045-8ae1-795f6adbedbc.roa (raw, json)
Hash identifier: QfnkfRximWG/KoRQUo5AOH8aBb5HcrhFY5NR26FT3Es=
Subject key identifier: 49:91:0E:BD:1B:A1:1C:0B:76:DA:40:34:97:A1:86:71:2B:4C:EB:FC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF3AA16CA0DE3C77F16716C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5fdab7da-964c-3045-8ae1-795f6adbedbc.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.151.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f3:aa:16:ca:0d:e3:c7:7f:16:71:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=4c35bcc3-7537-4226-b20a-a648388c98a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:49:68:22:34:7a:51:a0:08:f5:2d:33:9b:
10:e3:a0:34:20:5c:1d:8e:6a:01:22:7d:91:08:68:
e6:a8:bb:ad:9f:0b:85:ba:49:04:55:2f:d0:72:12:
3d:b5:c3:c4:97:09:f9:ab:c1:6b:d5:e4:44:45:e7:
0b:f8:f4:01:d0:fd:0c:12:a7:f8:28:4d:f7:1e:8b:
c7:e0:b1:e1:c3:01:07:d1:0c:f4:ba:8f:84:1e:db:
c7:e5:5f:c2:1e:2b:3c:60:23:82:28:43:8d:81:6b:
81:5f:5e:f2:fc:2c:23:0e:2c:33:c6:77:40:50:f4:
03:3a:61:92:6e:08:08:e9:ff:bc:7e:e3:09:d7:37:
51:ad:00:16:8a:73:82:15:e2:51:74:d0:a7:a5:e0:
eb:a0:38:c8:c1:f3:b6:5b:e6:22:46:31:d5:59:2e:
53:08:53:bc:e8:d5:b1:32:5b:c5:20:81:48:74:79:
8f:9f:e3:bd:cc:ed:e7:8a:02:ad:5d:c6:f9:b8:b0:
48:e7:49:1f:13:f8:a0:f5:6c:49:f6:25:b6:b2:52:
8a:cd:af:4e:68:c4:b8:54:d7:92:99:90:9f:b5:c1:
89:ba:d4:98:c4:71:12:71:9a:7f:a5:82:77:72:d1:
56:78:f8:51:0f:4e:c7:e7:78:0e:f6:db:3f:44:a0:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:0E:BD:1B:A1:1C:0B:76:DA:40:34:97:A1:86:71:2B:4C:EB:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5fdab7da-964c-3045-8ae1-795f6adbedbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.151.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:82:d9:7c:bc:8d:7d:19:f1:5b:ea:2e:e2:14:dc:70:ec:ce:
2a:29:25:a3:34:95:cc:97:2a:0f:a4:c2:46:03:b3:25:db:2a:
1c:40:cf:36:e5:2e:05:0f:20:d6:0c:f1:50:e9:64:7c:62:8d:
32:db:d2:56:1c:7b:d1:89:85:8c:36:9b:32:64:00:ca:99:e1:
35:a6:5c:66:db:da:6e:b5:91:36:ad:71:27:86:4e:e1:d0:72:
48:6a:a9:e7:f5:99:b7:55:0c:c9:c2:b6:78:f4:d9:89:a3:fc:
b5:16:f5:b1:9b:6a:ba:00:91:b0:8e:29:64:ca:6d:3b:97:ac:
fe:ae:a5:c1:0f:87:f2:d9:0e:5a:67:7a:b1:67:f4:d6:d0:69:
f9:6d:0e:a1:46:b1:88:57:2f:22:54:95:f3:41:cd:6e:99:6a:
a8:6c:58:18:09:dc:de:f5:77:c7:9f:5b:9f:b8:30:98:fe:dd:
27:ca:96:d6:26:79:95:7b:21:2d:26:3f:10:3e:e6:3c:f4:91:
62:4c:c6:05:0e:36:2b:a8:34:9c:2c:a0:97:82:ec:26:42:67:
5a:43:ea:e2:17:88:21:f8:6e:01:b4:65:5a:7f:bd:d3:3e:64:
5a:e0:a4:93:84:ac:8a:0b:03:77:9f:b5:96:d4:3c:e6:20:6c:
ff:ee:cc:6c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3zqhbKDePHfxZxbAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUxODEyMDAwMFoXDTIyMDYyMzA0MDAwMFowLzEtMCsGA1UEAxMk
NGMzNWJjYzMtNzUzNy00MjI2LWIyMGEtYTY0ODM4OGM5OGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRxJaCI0elGgCPUtM5sQ46A0IFwdjmoBIn2R
CGjmqLutnwuFukkEVS/QchI9tcPElwn5q8Fr1eRERecL+PQB0P0MEqf4KE33HovH
4LHhwwEH0Qz0uo+EHtvH5V/CHis8YCOCKEONgWuBX17y/CwjDiwzxndAUPQDOmGS
bggI6f+8fuMJ1zdRrQAWinOCFeJRdNCnpeDroDjIwfO2W+YiRjHVWS5TCFO86NWx
MlvFIIFIdHmPn+O9zO3nigKtXcb5uLBI50kfE/ig9WxJ9iW2slKKza9OaMS4VNeS
mZCftcGJutSYxHEScZp/pYJ3ctFWePhRD07H53gO9ts/RKDuGwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEmRDr0boRwLdtpANJehhnErTOv8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNWZkYWI3ZGEtOTY0Yy0z
MDQ1LThhZTEtNzk1ZjZhZGJlZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdoLZfLyNfRnxW+ou4hTccOzOKiklozSVzJcqD6TCRgOzJdsqHEDPNuUu
BQ8g1gzxUOlkfGKNMtvSVhx70YmFjDabMmQAypnhNaZcZtvabrWRNq1xJ4ZO4dBy
SGqp5/WZt1UMycK2ePTZiaP8tRb1sZtqugCRsI4pZMptO5es/q6lwQ+H8tkOWmd6
sWf01tBp+W0OoUaxiFcvIlSV80HNbplqqGxYGAnc3vV3x59bn7gwmP7dJ8qW1iZ5
lXshLSY/ED7mPPSRYkzGBQ42K6g0nCygl4LsJkJnWkPq4heIIfhuAbRlWn+90z5k
WuCkk4SsigsDd5+1ltQ85iBs/+7MbA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:53 2025 by rpki-client