Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84335686-5ffb-3336-91d3-9eacad9b8025.roa
File: 84335686-5ffb-3336-91d3-9eacad9b8025.roa (raw, json)
Hash identifier: doXb3zLWHYiU6k1tl7FIMxWIj92fPHkjcdEE48d5Lq8=
Subject key identifier: 13:27:C8:94:9E:9D:71:EF:EA:B8:19:79:75:C2:84:02:43:A0:99:84
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F3B93B17F8CDA29FEF4090980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84335686-5ffb-3336-91d3-9eacad9b8025.roa
Signing time: Mon 12 Sep 2022 12:00:00 +0000
ROA not before: Mon 12 Sep 2022 12:00:00 +0000
ROA not after: Tue 18 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3b:93:b1:7f:8c:da:29:fe:f4:09:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 12 12:00:00 2022 GMT
Not After : Oct 18 04:00:00 2022 GMT
Subject: CN=a788a1a3-8e53-4ba1-b66a-5f84f660e433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:39:c9:ed:2e:5d:35:9a:cb:2f:cf:33:ff:57:
70:3a:74:3b:be:9e:cf:f6:6c:f8:f4:2a:75:6c:36:
8a:91:51:7c:b0:0d:b0:88:4b:cf:38:52:2a:50:7a:
65:df:07:9d:ef:12:ac:91:da:5a:b6:7e:bc:ae:d9:
d5:03:4f:ff:7e:19:fb:1e:c3:10:25:54:9b:d4:3e:
15:34:96:92:6a:32:27:63:8e:2c:f2:a2:fb:36:db:
e0:1e:8a:82:b4:54:31:1f:eb:5a:60:2e:37:51:61:
a9:72:d7:65:1f:f9:52:0b:fe:a8:f2:4b:43:67:37:
d3:d5:1e:e0:17:9f:aa:bb:9d:6d:b1:5a:0c:a3:21:
0d:2e:70:4c:fa:a6:b0:04:e2:90:b5:ef:0e:1d:47:
ca:95:f5:7c:5f:50:5f:34:5c:38:49:4f:d3:1c:99:
a8:ad:f0:d2:d7:d9:4b:09:f4:fa:cd:cd:3a:2d:14:
5a:58:97:40:75:67:36:e3:5a:0b:d5:2c:65:75:35:
79:7e:a2:49:f5:0f:af:c4:f3:c1:26:f6:7e:ff:aa:
7e:c1:19:5e:8f:29:2e:8f:16:1b:30:08:1b:78:a6:
c4:c5:36:ba:45:87:7f:0c:fb:09:2c:9f:f4:d7:96:
1c:0f:53:44:be:ee:1b:41:2c:85:aa:79:4f:21:87:
98:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:27:C8:94:9E:9D:71:EF:EA:B8:19:79:75:C2:84:02:43:A0:99:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84335686-5ffb-3336-91d3-9eacad9b8025.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:5f:94:a1:b8:a4:98:bd:2c:89:c0:d8:62:d8:b0:2e:04:50:
31:52:59:77:91:83:ca:60:7e:ac:17:58:88:f4:14:b9:d3:a1:
9d:6e:f1:26:ad:d9:25:f7:71:ef:03:6b:3c:7d:a6:d1:51:0b:
77:39:50:52:4a:20:3a:b7:3a:c9:03:6e:e9:22:90:d6:00:a3:
1b:03:46:33:e8:fb:f3:d2:e1:63:88:a4:5c:2d:bf:94:02:ac:
4b:a8:08:e4:cf:ec:dc:27:8b:97:40:e2:2a:d4:46:7e:b4:b7:
c5:48:f0:9c:fb:f2:af:ee:d2:76:56:38:3a:73:ef:8e:16:96:
e0:3a:24:07:fd:be:80:62:3a:29:03:d6:40:b4:2c:fc:a9:6e:
58:94:36:69:c7:f7:c0:c0:3d:c9:5a:79:11:de:8d:9b:3a:79:
9e:a4:39:65:57:ed:1b:aa:9c:a6:df:be:f6:2b:fe:9d:4f:f1:
59:ac:f0:33:aa:ef:5a:7b:50:6e:6b:c6:34:f6:e9:21:a8:84:
2a:36:cf:2b:bc:94:68:ab:27:a6:5b:ee:fe:09:30:07:fc:b6:
9e:ea:88:3b:4f:7e:d6:11:fa:c2:f8:ab:be:ee:03:9c:7d:e9:
cb:fc:0b:22:4c:22:53:3a:aa:21:4f:c7:59:02:84:b3:06:21:
ec:65:c5:6b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD87k7F/jNop/vQJCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkxMjEyMDAwMFoXDTIyMTAxODA0MDAwMFowLzEtMCsGA1UEAxMk
YTc4OGExYTMtOGU1My00YmExLWI2NmEtNWY4NGY2NjBlNDMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjnJ7S5dNZrLL88z/1dwOnQ7vp7P9mz49Cp1
bDaKkVF8sA2wiEvPOFIqUHpl3wed7xKskdpatn68rtnVA0//fhn7HsMQJVSb1D4V
NJaSajInY44s8qL7NtvgHoqCtFQxH+taYC43UWGpctdlH/lSC/6o8ktDZzfT1R7g
F5+qu51tsVoMoyENLnBM+qawBOKQte8OHUfKlfV8X1BfNFw4SU/THJmorfDS19lL
CfT6zc06LRRaWJdAdWc241oL1SxldTV5fqJJ9Q+vxPPBJvZ+/6p+wRlejykujxYb
MAgbeKbExTa6RYd/DPsJLJ/015YcD1NEvu4bQSyFqnlPIYeYMQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBMnyJSenXHv6rgZeXXChAJDoJmEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODQzMzU2ODYtNWZmYi0z
MzM2LTkxZDMtOWVhY2FkOWI4MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAo1+UobikmL0sicDYYtiwLgRQMVJZd5GDymB+rBdYiPQUudOhnW7xJq3Z
Jfdx7wNrPH2m0VELdzlQUkogOrc6yQNu6SKQ1gCjGwNGM+j789LhY4ikXC2/lAKs
S6gI5M/s3CeLl0DiKtRGfrS3xUjwnPvyr+7SdlY4OnPvjhaW4DokB/2+gGI6KQPW
QLQs/KluWJQ2acf3wMA9yVp5Ed6Nmzp5nqQ5ZVftG6qcpt++9iv+nU/xWazwM6rv
WntQbmvGNPbpIaiEKjbPK7yUaKsnplvu/gkwB/y2nuqIO09+1hH6wvirvu4DnH3p
y/wLIkwiUzqqIU/HWQKEswYh7GXFaw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:06 2025 by rpki-client