Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bcd3de5-14bc-3c32-8a75-d9c7f240550d.roa
File: 7bcd3de5-14bc-3c32-8a75-d9c7f240550d.roa (raw, json)
Hash identifier: qI6D1FvFyUKLtDqZFULWUAtGHOtU89ZYCcPoVXUuVA0=
Subject key identifier: 37:CA:FA:FC:C4:F7:41:A5:6E:CE:1D:EA:77:7C:2B:07:21:4F:5A:62
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC95FED3CA6F2393AA43F5480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bcd3de5-14bc-3c32-8a75-d9c7f240550d.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c9:5f:ed:3c:a6:f2:39:3a:a4:3f:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=e9896a44-9887-4d00-8d96-26013023058c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ac:69:87:18:6f:9b:b3:2d:7f:f4:b3:67:59:
fb:00:b2:92:4a:3d:63:61:fd:e4:af:94:b1:5b:a5:
93:66:86:f2:25:5f:e7:9a:42:43:aa:69:da:c9:d2:
68:90:3d:af:1c:ce:5d:c2:88:44:4a:71:22:b8:76:
f6:6b:7b:ae:64:2e:55:f6:70:5b:89:26:a4:4f:bf:
70:31:12:59:1f:1a:a2:2d:0c:b9:3b:a0:f2:38:bf:
68:dc:d6:c4:67:cd:56:fb:d5:19:01:2e:e1:e6:09:
b5:d7:e8:3d:28:9e:71:86:38:b9:24:72:a4:65:28:
a3:df:d2:4e:f5:c5:93:d9:06:19:52:42:5a:d9:e7:
60:7d:1b:04:15:af:9a:6e:31:23:ca:a2:d1:52:46:
ff:7d:ae:64:23:95:b5:fc:82:c6:56:32:0d:0a:4b:
72:82:7e:39:82:17:45:bb:42:dc:40:34:50:31:0e:
27:2b:58:43:66:5f:e6:4e:a3:04:75:ab:6d:cb:d4:
bd:d9:7c:06:99:a5:ff:79:2e:13:4a:a0:74:ee:86:
c0:cd:12:4c:48:f3:fe:af:14:67:45:8a:b2:75:e4:
5c:c4:b0:92:53:81:bb:4d:84:ff:c2:43:eb:ff:b5:
74:e7:c0:cf:12:5a:97:b7:4a:c7:12:ba:9c:8e:58:
94:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CA:FA:FC:C4:F7:41:A5:6E:CE:1D:EA:77:7C:2B:07:21:4F:5A:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7bcd3de5-14bc-3c32-8a75-d9c7f240550d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:f2:79:73:79:3a:70:85:75:97:10:c6:3c:4c:34:89:7f:48:
4d:6f:48:04:5d:1d:8c:7c:64:69:48:94:1e:9a:b6:ed:a2:4f:
98:85:5c:ee:82:07:d6:fb:9c:75:26:44:c5:49:d6:5f:51:ee:
73:99:6d:72:90:84:5e:8e:d1:73:a5:57:3e:71:2c:bc:45:df:
82:1e:6c:4d:71:33:cb:62:d1:a4:35:a5:6e:89:6b:1a:fa:da:
bc:cd:9d:31:e1:c1:f7:2f:ca:7a:95:73:6c:12:dc:42:35:1a:
68:07:55:68:83:12:29:75:48:9e:41:8c:ee:d3:32:5c:fb:fe:
01:72:88:36:9d:34:6b:06:b6:89:11:7c:1c:b8:33:03:02:e4:
50:a2:5a:1c:98:ba:65:3e:ef:27:e3:d7:0c:46:ff:fe:d9:5b:
ae:4e:98:d3:f1:43:4f:54:e3:ad:79:b8:d4:94:7f:c4:d9:30:
07:e1:dd:e3:80:fc:f8:88:27:61:4e:78:60:45:00:fb:1c:2b:
ba:0e:4d:66:ed:2b:41:81:93:16:6c:d7:db:07:f6:4c:23:f4:
dd:47:09:2d:cf:91:f1:c4:c7:14:a2:4b:ab:8b:a3:e1:5d:d5:
5d:86:4e:f3:58:69:79:59:8d:cd:8e:b7:9d:d4:1d:49:22:73:
3f:e0:be:b3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/JX+08pvI5OqQ/VIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwMjEyMDAwMFoXDTIyMTIwODA1MDAwMFowLzEtMCsGA1UEAxMk
ZTk4OTZhNDQtOTg4Ny00ZDAwLThkOTYtMjYwMTMwMjMwNThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqxphxhvm7Mtf/SzZ1n7ALKSSj1jYf3kr5Sx
W6WTZobyJV/nmkJDqmnaydJokD2vHM5dwohESnEiuHb2a3uuZC5V9nBbiSakT79w
MRJZHxqiLQy5O6DyOL9o3NbEZ81W+9UZAS7h5gm11+g9KJ5xhji5JHKkZSij39JO
9cWT2QYZUkJa2edgfRsEFa+abjEjyqLRUkb/fa5kI5W1/ILGVjINCktygn45ghdF
u0LcQDRQMQ4nK1hDZl/mTqMEdatty9S92XwGmaX/eS4TSqB07obAzRJMSPP+rxRn
RYqydeRcxLCSU4G7TYT/wkPr/7V058DPElqXt0rHErqcjliUYQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDfK+vzE90Glbs4d6nd8KwchT1piMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvN2JjZDNkZTUtMTRiYy0z
YzMyLThhNzUtZDljN2YyNDA1NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoPJ5c3k6cIV1lxDGPEw0iX9ITW9IBF0djHxkaUiUHpq27aJPmIVc7oIH
1vucdSZExUnWX1Huc5ltcpCEXo7Rc6VXPnEsvEXfgh5sTXEzy2LRpDWlbolrGvra
vM2dMeHB9y/KepVzbBLcQjUaaAdVaIMSKXVInkGM7tMyXPv+AXKINp00awa2iRF8
HLgzAwLkUKJaHJi6ZT7vJ+PXDEb//tlbrk6Y0/FDT1TjrXm41JR/xNkwB+Hd44D8
+IgnYU54YEUA+xwrug5NZu0rQYGTFmzX2wf2TCP03UcJLc+R8cTHFKJLq4uj4V3V
XYZO81hpeVmNzY63ndQdSSJzP+C+sw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:18 2025 by rpki-client