Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66ab1cff-cd61-3305-b6b5-169c632b9b9e.roa
File: 66ab1cff-cd61-3305-b6b5-169c632b9b9e.roa (raw, json)
Hash identifier: DxoW88ZQjzHe+jg2gPCBaulbRgfBr20Nc2mbUZcNfUY=
Subject key identifier: 18:1E:D5:85:95:81:B2:BF:78:59:16:B7:3A:E1:24:A6:40:E4:4A:23
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840901C44D202E6693053D3CA80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66ab1cff-cd61-3305-b6b5-169c632b9b9e.roa
Signing time: Thu 12 Jan 2023 12:00:00 +0000
ROA not before: Thu 12 Jan 2023 12:00:00 +0000
ROA not after: Fri 17 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.104.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:90:1c:44:d2:02:e6:69:30:53:d3:ca:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 12 12:00:00 2023 GMT
Not After : Feb 17 05:00:00 2023 GMT
Subject: CN=b14a317a-1549-4d53-970a-33631a6bbe48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:71:b0:f5:39:d6:c4:15:28:e0:19:64:a2:
80:67:56:de:4c:29:aa:1f:1f:e3:ec:1a:ea:cf:91:
ac:31:9a:67:04:9c:cf:be:dd:76:a1:81:c6:fe:e7:
bf:b1:b6:20:e3:2d:a1:6a:ae:40:9e:51:fe:6f:71:
10:68:a7:5f:7b:88:b8:f2:4a:b8:f5:cc:75:04:38:
24:46:4f:a5:e4:96:cd:81:f0:30:16:ce:e3:6d:cb:
ae:7b:31:ec:eb:b8:ef:29:ca:8b:25:36:2a:60:94:
e6:61:ec:ee:16:ba:47:db:61:3a:0a:a9:cf:0a:76:
ea:bc:7a:2a:e5:8f:58:14:68:16:08:42:bc:2c:74:
e5:e3:f5:f9:37:ae:02:f2:bb:d6:03:11:9c:29:22:
26:13:d4:ca:21:59:cf:f8:c6:d9:70:dd:9f:7f:4f:
9a:c7:0a:b1:4f:6a:54:e2:e2:ec:d0:2b:78:ca:85:
96:80:9f:cf:7f:fb:fa:04:a5:e7:9b:f6:b7:02:fa:
7a:53:c0:3e:1f:f9:83:99:57:d3:8c:27:fc:78:2b:
c6:14:7a:01:ae:36:27:f8:90:70:d3:ee:f7:2e:a5:
80:da:05:bf:af:3c:23:c1:8d:54:04:ee:59:2f:4e:
1d:6f:16:57:f0:b4:96:86:57:16:89:8c:38:a7:4e:
f3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:1E:D5:85:95:81:B2:BF:78:59:16:B7:3A:E1:24:A6:40:E4:4A:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/66ab1cff-cd61-3305-b6b5-169c632b9b9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.104.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:87:99:7b:da:d5:c7:be:11:bd:5e:83:dd:87:ee:90:f3:e4:
99:2e:37:3a:58:c2:b9:56:d4:20:5b:b5:e7:e7:98:b0:4a:c5:
4f:d3:15:42:4d:fe:82:a6:46:c5:6a:cd:a7:a3:9d:48:32:cd:
15:b5:ee:16:29:22:78:0b:7a:93:71:9e:ba:2e:cb:64:1b:5c:
4a:4a:0e:e6:31:85:e7:8a:56:f6:66:62:5c:21:11:48:81:f8:
4a:66:f7:5c:07:b1:d5:87:f3:48:50:22:37:fa:4c:00:2a:1b:
b4:68:6f:40:cc:49:84:44:32:1a:5a:3b:b2:ec:8b:a3:12:5e:
df:b5:90:b0:40:45:00:26:61:b6:5e:cb:af:ba:38:2c:68:68:
b1:01:bc:71:90:30:f3:02:04:8a:4b:41:38:7f:41:ef:32:82:
f7:e6:ab:d7:a9:e0:03:c9:00:c0:f2:0e:69:78:5d:5a:ab:01:
ce:b6:07:6c:7a:5c:b1:25:95:17:30:a5:77:48:c0:ab:5a:89:
4a:00:92:72:15:ed:bf:da:ef:7a:28:78:07:ea:b2:aa:6a:75:
16:b5:cb:73:ca:12:e8:68:73:64:ec:bc:74:6e:5f:09:92:0d:
ee:d8:eb:56:03:5d:1b:73:7d:24:73:bd:a1:fe:1d:23:c0:e7:
0e:39:e9:5f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECQHETSAuZpMFPTyoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMjEyMDAwMFoXDTIzMDIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
YjE0YTMxN2EtMTU0OS00ZDUzLTk3MGEtMzM2MzFhNmJiZTQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4txsPU51sQVKOAZZKKAZ1beTCmqHx/j7Brq
z5GsMZpnBJzPvt12oYHG/ue/sbYg4y2haq5AnlH+b3EQaKdfe4i48kq49cx1BDgk
Rk+l5JbNgfAwFs7jbcuuezHs67jvKcqLJTYqYJTmYezuFrpH22E6CqnPCnbqvHoq
5Y9YFGgWCEK8LHTl4/X5N64C8rvWAxGcKSImE9TKIVnP+MbZcN2ff0+axwqxT2pU
4uLs0Ct4yoWWgJ/Pf/v6BKXnm/a3Avp6U8A+H/mDmVfTjCf8eCvGFHoBrjYn+JBw
0+73LqWA2gW/rzwjwY1UBO5ZL04dbxZX8LSWhlcWiYw4p07zAwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBge1YWVgbK/eFkWtzrhJKZA5EojMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjZhYjFjZmYtY2Q2MS0z
MzA1LWI2YjUtMTY5YzYzMmI5YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEGgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkIeZe9rVx74RvV6D3YfukPPkmS43OljCuVbUIFu15+eYsErFT9MVQk3+
gqZGxWrNp6OdSDLNFbXuFikieAt6k3Geui7LZBtcSkoO5jGF54pW9mZiXCERSIH4
Smb3XAex1YfzSFAiN/pMACobtGhvQMxJhEQyGlo7suyLoxJe37WQsEBFACZhtl7L
r7o4LGhosQG8cZAw8wIEiktBOH9B7zKC9+ar16ngA8kAwPIOaXhdWqsBzrYHbHpc
sSWVFzCld0jAq1qJSgCSchXtv9rveih4B+qyqmp1FrXLc8oS6GhzZOy8dG5fCZIN
7tjrVgNdG3N9JHO9of4dI8DnDjnpXw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:45 2025 by rpki-client