Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ea943cf-6e04-3e9d-9852-177cccf0a322.roa
File: 7ea943cf-6e04-3e9d-9852-177cccf0a322.roa (raw, json)
Hash identifier: vKSVPG6vUpC1fSKHgYHEjMLaolLULhHqe0wMR28nIJo=
Subject key identifier: 78:6A:32:A6:2D:3D:30:59:16:E7:6B:45:94:58:D8:40:A3:7A:4B:E9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401A5D0515E91811FEEC4A6C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ea943cf-6e04-3e9d-9852-177cccf0a322.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:5d:05:15:e9:18:11:fe:ec:4a:6c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=55a71eef-3b59-4eb9-9961-e0d5905b7d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:1f:53:38:a9:da:c5:1d:9f:77:21:18:48:
14:cd:5b:10:d8:6c:43:8b:53:53:44:4d:c4:fa:fa:
f5:01:df:63:7e:43:00:13:1b:b2:73:36:49:c6:96:
2f:76:3f:b6:c0:0f:2d:31:56:d1:1c:f5:22:bf:f6:
0b:15:3a:95:31:c8:71:5f:2b:a4:ae:b9:68:af:56:
73:17:ae:df:77:08:38:db:c3:7b:64:72:2b:8f:aa:
27:10:16:99:39:39:6c:b2:3c:58:31:f4:07:8c:36:
20:ff:e6:9f:de:90:1e:59:2d:4c:11:24:84:8b:56:
ff:ff:53:85:88:65:d1:11:63:43:04:8b:85:10:f7:
eb:1d:86:a6:20:e3:aa:8d:19:73:79:f7:6f:0d:35:
b6:3e:de:42:41:67:17:07:b3:2d:2b:6a:f3:ea:c6:
89:a3:38:97:b2:b8:1b:4a:1e:0f:9f:cd:f6:5d:41:
1c:55:b8:ba:7e:a2:bc:ab:90:85:14:94:bd:93:9d:
3a:e9:b7:b6:00:16:a6:0e:84:fe:09:5b:99:fd:45:
4f:ce:cd:ce:a6:dd:27:87:c8:a3:33:e7:28:38:18:
e9:70:81:1f:21:0b:2a:31:a3:f6:6b:31:00:c4:72:
97:12:75:a7:9d:fe:a0:26:2f:f9:b7:da:7a:fa:f3:
05:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6A:32:A6:2D:3D:30:59:16:E7:6B:45:94:58:D8:40:A3:7A:4B:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/7ea943cf-6e04-3e9d-9852-177cccf0a322.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:40:9e:5f:b9:d8:1f:2c:27:06:5d:fa:0e:f1:f2:a4:4b:8c:
59:40:d2:b6:1a:30:43:94:bf:01:5d:fc:12:c2:e2:83:ed:3c:
8b:ea:04:b7:cf:61:de:5e:48:22:89:a1:d0:5a:36:94:a4:75:
f6:03:f1:76:7f:61:ec:49:78:f9:21:65:3a:50:09:c8:f6:dc:
6a:d7:ca:01:44:09:62:f2:8c:1a:27:54:79:c8:59:64:d9:02:
b9:af:7e:21:f2:bc:ce:10:63:b2:6c:e8:7d:ab:9b:df:4b:3a:
da:59:25:65:55:83:9a:4f:68:4e:33:a7:7b:16:23:2c:00:89:
a7:ac:48:d6:4a:a5:f6:d4:2a:63:86:1f:e5:d6:ed:84:b8:01:
50:b6:38:33:0f:e6:8b:16:2d:86:7f:69:4b:0b:12:01:21:c2:
52:8a:54:4e:2d:91:d9:ab:65:ec:0f:c7:da:54:e5:c4:67:ea:
13:14:00:d6:b4:8f:12:62:22:3f:f2:b8:b3:ee:57:08:e3:e9:
08:a1:24:06:5b:72:29:3d:72:9d:81:3f:99:af:11:89:75:41:
69:52:1f:18:a3:80:1d:06:fd:5e:a8:c7:85:bf:c1:fd:ef:b7:
38:56:ac:32:6e:8f:3b:fd:40:84:d8:72:86:f0:c4:dd:7b:7d:
90:4f:5b:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAaXQUV6RgR/uxKbIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIwMTEyMDAwMFoXDTIzMDEwNjA1MDAwMFowLzEtMCsGA1UEAxMk
NTVhNzFlZWYtM2I1OS00ZWI5LTk5NjEtZTBkNTkwNWI3ZDkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVEfUzip2sUdn3chGEgUzVsQ2GxDi1NTRE3E
+vr1Ad9jfkMAExuyczZJxpYvdj+2wA8tMVbRHPUiv/YLFTqVMchxXyukrrlor1Zz
F67fdwg428N7ZHIrj6onEBaZOTlssjxYMfQHjDYg/+af3pAeWS1MESSEi1b//1OF
iGXREWNDBIuFEPfrHYamIOOqjRlzefdvDTW2Pt5CQWcXB7MtK2rz6saJoziXsrgb
Sh4Pn832XUEcVbi6fqK8q5CFFJS9k5066be2ABamDoT+CVuZ/UVPzs3Opt0nh8ij
M+coOBjpcIEfIQsqMaP2azEAxHKXEnWnnf6gJi/5t9p6+vMF+QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHhqMqYtPTBZFudrRZRY2ECjekvpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvN2VhOTQzY2YtNmUwNC0z
ZTlkLTk4NTItMTc3Y2NjZjBhMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEDcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbECeX7nYHywnBl36DvHypEuMWUDSthowQ5S/AV38EsLig+08i+oEt89h
3l5IIomh0Fo2lKR19gPxdn9h7El4+SFlOlAJyPbcatfKAUQJYvKMGidUechZZNkC
ua9+IfK8zhBjsmzofaub30s62lklZVWDmk9oTjOnexYjLACJp6xI1kql9tQqY4Yf
5dbthLgBULY4Mw/mixYthn9pSwsSASHCUopUTi2R2atl7A/H2lTlxGfqExQA1rSP
EmIiP/K4s+5XCOPpCKEkBltyKT1ynYE/ma8RiXVBaVIfGKOAHQb9XqjHhb/B/e+3
OFasMm6PO/1AhNhyhvDE3Xt9kE9bUw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:41 2025 by rpki-client