Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/713dfa23-78db-3dc8-8687-7832b977814f.roa
File: 713dfa23-78db-3dc8-8687-7832b977814f.roa (raw, json)
Hash identifier: KSNSzjhh+hz3A18Q5/obo0kIYdgDL5t8/Zhhvc2/TNE=
Subject key identifier: 9F:A1:16:A2:E2:60:76:72:CF:AB:1B:7F:AC:2C:EA:48:B0:72:DA:CA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E9F1FBF36034F8233F323DD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/713dfa23-78db-3dc8-8687-7832b977814f.roa
Signing time: Mon 18 Jul 2022 12:00:00 +0000
ROA not before: Mon 18 Jul 2022 12:00:00 +0000
ROA not after: Tue 23 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:9f:1f:bf:36:03:4f:82:33:f3:23:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 18 12:00:00 2022 GMT
Not After : Aug 23 04:00:00 2022 GMT
Subject: CN=b0c5ab4f-88ef-4ac0-8524-eea129f6438f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ae:3a:5c:19:27:9f:be:94:a5:55:d9:7a:90:
58:2a:c5:04:68:56:c2:1f:99:92:d5:41:75:46:8e:
7a:c1:f9:28:4e:d0:b3:47:ac:e5:60:dd:f8:87:95:
af:e6:c1:da:cb:d0:c5:00:f1:77:ee:ba:c3:9b:e2:
5e:08:bd:f9:d2:0b:97:53:1c:cc:8c:9e:f2:2e:44:
f8:b8:6a:b1:96:ec:22:5f:4b:b8:e4:04:e5:ca:cd:
72:51:82:ef:90:ee:07:30:d9:3a:ca:d4:d9:9a:e0:
26:c1:53:a5:05:cd:13:7f:ba:71:6b:c8:b7:6a:59:
c9:59:24:7d:15:a2:e7:55:41:5f:54:68:2a:3d:9a:
4c:9e:71:c1:71:35:5d:97:21:84:f7:9b:80:bd:d8:
c9:48:d6:d6:2b:79:cc:a5:4f:bc:85:1d:99:f8:e1:
9f:ef:cb:c0:46:9b:c8:88:29:9a:b8:30:e3:fe:96:
97:21:51:c6:0a:c5:64:ca:1c:cf:45:91:86:40:d4:
f2:d6:91:41:49:7c:89:7b:c6:64:7c:25:75:98:ca:
5c:05:8a:65:6a:66:af:f3:94:83:46:0f:c2:ba:a0:
8c:8c:41:19:9c:d8:13:69:e6:5d:9f:ff:bd:bd:41:
23:30:c5:92:27:32:2f:cf:22:81:d8:eb:0b:74:01:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A1:16:A2:E2:60:76:72:CF:AB:1B:7F:AC:2C:EA:48:B0:72:DA:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/713dfa23-78db-3dc8-8687-7832b977814f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:20:cf:80:3d:a9:01:5d:83:8d:7a:93:7e:c0:65:a4:6e:70:
54:b4:43:1d:80:1e:bf:9f:60:10:80:db:b6:6e:32:2d:e8:c5:
6a:9b:de:98:2c:0a:ad:9d:30:94:0e:e3:e9:64:42:1e:eb:3b:
8e:59:b7:66:cd:f3:29:3c:c1:5a:d2:89:fb:ca:e1:ed:3a:2b:
f3:e0:3e:0c:8b:e6:7a:8c:86:36:fc:e6:fa:25:3e:15:cb:61:
bd:48:df:09:ca:77:18:87:ab:d2:a4:07:b4:59:96:e5:a4:c8:
f6:a0:86:c6:9e:08:a2:0d:47:eb:9e:3b:21:b0:2c:bb:70:c1:
34:59:37:ed:62:a4:36:95:10:a7:81:96:ae:0f:21:64:d2:31:
8a:58:97:31:a4:2c:9d:24:cd:72:91:c7:11:f7:e4:04:b3:6c:
b0:62:a5:11:48:ac:1a:4b:34:74:31:e9:92:ae:e8:50:cc:a7:
54:53:55:e4:44:fc:5c:c8:af:ca:7b:5a:1e:d6:ab:99:4c:f6:
fc:ba:a6:a3:1b:6c:cd:4b:a0:f5:57:f5:95:3f:bc:39:e5:f5:
8e:fc:13:c2:0d:f6:dc:30:c7:2a:fd:56:70:16:d6:3a:4d:ae:
03:aa:af:f8:41:ed:82:f6:00:22:6b:d2:0d:da:d1:4c:0b:24:
94:c1:58:f6
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6fH782A0+CM/Mj3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxODEyMDAwMFoXDTIyMDgyMzA0MDAwMFowLzEtMCsGA1UEAxMk
YjBjNWFiNGYtODhlZi00YWMwLTg1MjQtZWVhMTI5ZjY0MzhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK46XBknn76UpVXZepBYKsUEaFbCH5mS1UF1
Ro56wfkoTtCzR6zlYN34h5Wv5sHay9DFAPF37rrDm+JeCL350guXUxzMjJ7yLkT4
uGqxluwiX0u45ATlys1yUYLvkO4HMNk6ytTZmuAmwVOlBc0Tf7pxa8i3alnJWSR9
FaLnVUFfVGgqPZpMnnHBcTVdlyGE95uAvdjJSNbWK3nMpU+8hR2Z+OGf78vARpvI
iCmauDDj/paXIVHGCsVkyhzPRZGGQNTy1pFBSXyJe8ZkfCV1mMpcBYplamav85SD
Rg/CuqCMjEEZnNgTaeZdn/+9vUEjMMWSJzIvzyKB2OsLdAHs9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ+hFqLiYHZyz6sbf6ws6kiwctrKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvNzEzZGZhMjMtNzhkYi0z
ZGM4LTg2ODctNzgzMmI5Nzc4MTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYyDPgD2pAV2DjXqTfsBlpG5wVLRDHYAev59gEIDbtm4yLejFapvemCwK
rZ0wlA7j6WRCHus7jlm3Zs3zKTzBWtKJ+8rh7Tor8+A+DIvmeoyGNvzm+iU+Fcth
vUjfCcp3GIer0qQHtFmW5aTI9qCGxp4Iog1H6547IbAsu3DBNFk37WKkNpUQp4GW
rg8hZNIxiliXMaQsnSTNcpHHEffkBLNssGKlEUisGks0dDHpkq7oUMynVFNV5ET8
XMivyntaHtarmUz2/LqmoxtszUug9Vf1lT+8OeX1jvwTwg323DDHKv1WcBbWOk2u
A6qv+EHtgvYAImvSDdrRTAsklMFY9g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:23 2025 by rpki-client