Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67c6e0e4-d4d0-3b70-bd1c-25d916c0906c.roa
File: 67c6e0e4-d4d0-3b70-bd1c-25d916c0906c.roa (raw, json)
Hash identifier: gTfWWgW832EopLz02hBJvlx2kj+VI5AxeMtBca+RpNo=
Subject key identifier: ED:3A:7F:1F:76:58:67:01:F5:99:FA:88:EF:B1:FE:93:F1:44:33:A3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F56BD349472CF4DF22A0E7798
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67c6e0e4-d4d0-3b70-bd1c-25d916c0906c.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.189.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:56:bd:34:94:72:cf:4d:f2:2a:0e:77:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=0aac112c-e1d1-47a0-a00f-7f21f76934d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:ef:dc:68:ef:55:6d:e2:79:5a:40:49:4a:
2d:a0:c6:b4:e0:71:9d:a1:c4:c5:4a:c9:92:00:89:
7a:33:0a:a3:6e:c0:e8:a9:c4:f0:39:05:b4:00:8e:
b7:98:f5:6b:6a:b2:be:e5:cb:b2:76:e4:05:2e:47:
e1:37:11:6f:42:7f:5c:96:83:79:4f:18:ef:98:08:
de:ec:31:00:6c:13:df:8f:88:fe:c3:67:ee:a8:5f:
dd:ab:9a:56:04:dd:3a:c8:83:46:be:3b:ca:dc:9b:
41:7d:66:b0:8c:47:9c:cf:93:09:d7:be:42:f6:d8:
5e:31:11:45:d5:df:f5:69:5c:a2:d9:f2:16:64:49:
92:b5:67:9c:b8:07:40:d3:9c:11:1e:c9:47:09:82:
cd:26:34:35:43:d8:73:6b:51:15:28:89:2a:92:fd:
a3:73:7a:cc:1f:38:60:3e:ca:8f:a8:16:74:74:16:
90:d6:40:1f:8a:58:36:24:1f:22:7f:cd:d3:2d:c3:
56:1c:09:7d:35:3d:b7:8f:0b:5c:76:fd:d0:c9:25:
75:da:4c:e1:64:3c:d9:3d:9d:75:6d:a8:f9:7e:a2:
99:bc:98:60:42:bd:04:2a:79:13:99:99:c4:0a:fa:
f3:07:df:0b:eb:f4:e9:53:ed:f6:00:b6:13:d7:a4:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3A:7F:1F:76:58:67:01:F5:99:FA:88:EF:B1:FE:93:F1:44:33:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/67c6e0e4-d4d0-3b70-bd1c-25d916c0906c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.189.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:ee:d9:63:68:07:f5:a6:30:14:a0:ac:00:c5:d3:99:54:da:
22:6b:1c:20:87:07:ef:d0:20:3b:32:fa:ae:40:c6:ba:8a:ee:
e8:32:44:e2:b7:a5:15:2c:6d:a3:f4:7d:f9:2b:21:e4:bd:18:
38:5c:1d:b6:9a:ab:50:55:c5:31:ba:4d:58:ae:7b:c3:e6:41:
e7:fa:e4:ce:43:1d:26:b7:d5:c6:a9:bf:87:64:71:dd:89:d8:
45:27:f3:a8:13:c1:8b:44:e5:78:88:78:fe:a1:42:9f:54:b6:
16:26:f1:fa:11:e4:86:75:ad:71:06:5b:16:23:63:52:18:79:
38:c9:87:7b:fd:55:91:07:c3:16:1a:86:0f:b2:7f:e5:3c:5e:
23:24:e9:17:e9:b0:93:5c:ac:59:02:4e:7f:af:ce:bb:89:30:
03:e3:cd:d0:9c:5c:ff:0b:79:6c:8a:5b:5d:d6:57:83:2d:eb:
1a:df:3a:ea:6e:8d:44:93:52:cb:5e:16:31:74:ed:1e:ab:a5:
5e:69:85:6e:39:e1:f2:e0:16:ff:6a:f8:64:2a:4b:dc:64:24:
54:45:5b:b6:a4:6e:bf:6f:67:3f:ba:61:cc:71:65:1e:33:b1:
80:54:ad:2a:63:f7:63:51:aa:89:fd:1a:9a:97:85:e6:a1:50:
b1:04:dc:39
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9WvTSUcs9N8ioOd5gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkyMjEyMDAwMFoXDTIyMTAyODA0MDAwMFowLzEtMCsGA1UEAxMk
MGFhYzExMmMtZTFkMS00N2EwLWEwMGYtN2YyMWY3NjkzNGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgPv3GjvVW3ieVpASUotoMa04HGdocTFSsmS
AIl6MwqjbsDoqcTwOQW0AI63mPVrarK+5cuyduQFLkfhNxFvQn9cloN5TxjvmAje
7DEAbBPfj4j+w2fuqF/dq5pWBN06yINGvjvK3JtBfWawjEecz5MJ175C9theMRFF
1d/1aVyi2fIWZEmStWecuAdA05wRHslHCYLNJjQ1Q9hza1EVKIkqkv2jc3rMHzhg
PsqPqBZ0dBaQ1kAfilg2JB8if83TLcNWHAl9NT23jwtcdv3QySV12kzhZDzZPZ11
baj5fqKZvJhgQr0EKnkTmZnECvrzB98L6/TpU+32ALYT16RkYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFO06fx92WGcB9Zn6iO+x/pPxRDOjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNjdjNmUwZTQtZDRkMC0z
YjcwLWJkMWMtMjVkOTE2YzA5MDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEL0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHe7ZY2gH9aYwFKCsAMXTmVTaImscIIcH79AgOzL6rkDGuoru6DJE4rel
FSxto/R9+Ssh5L0YOFwdtpqrUFXFMbpNWK57w+ZB5/rkzkMdJrfVxqm/h2Rx3YnY
RSfzqBPBi0TleIh4/qFCn1S2Fibx+hHkhnWtcQZbFiNjUhh5OMmHe/1VkQfDFhqG
D7J/5TxeIyTpF+mwk1ysWQJOf6/Ou4kwA+PN0Jxc/wt5bIpbXdZXgy3rGt866m6N
RJNSy14WMXTtHqulXmmFbjnh8uAW/2r4ZCpL3GQkVEVbtqRuv29nP7phzHFlHjOx
gFStKmP3Y1Gqif0ampeF5qFQsQTcOQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:07:29 2025 by rpki-client