Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84a415d3-9b8d-32c6-a082-7a15a72e2730.roa
File: 84a415d3-9b8d-32c6-a082-7a15a72e2730.roa (raw, json)
Hash identifier: gRkfUWOFA+LCygDwlQzLMKJz9249VyHAxOPu63rZFIE=
Subject key identifier: 2D:02:14:4C:87:CF:EA:6B:39:EE:8C:1A:5D:9C:96:2F:0E:8A:2D:EC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FAA3AA9D7B44FFC8A87088BA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84a415d3-9b8d-32c6-a082-7a15a72e2730.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.219.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:3a:a9:d7:b4:4f:fc:8a:87:08:8b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=1c165718-161c-4773-9c8f-1a41536afd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5a:c0:e9:99:4e:fd:b9:e1:cf:09:09:a5:28:
91:e9:a2:6f:74:7d:f4:ef:97:30:7a:53:35:ac:87:
fb:9e:19:2e:4a:78:97:5f:36:c0:28:64:46:01:79:
bd:2b:bf:cc:ef:28:8c:5d:75:c0:c1:50:64:de:35:
10:59:8d:b1:92:5b:37:17:d4:0b:d3:b5:7a:cb:07:
95:92:54:7c:d1:a0:3a:0e:1e:7d:b7:0b:16:27:76:
19:a7:3a:f9:a0:d0:bc:81:e2:37:05:fa:11:11:55:
9d:1e:9f:c2:b6:12:2f:35:3a:ce:94:ee:5e:00:9b:
24:a3:0e:3d:a8:7f:f4:c8:d6:2d:3d:f5:4d:48:20:
f2:f1:06:8f:60:b4:36:64:2c:07:92:c7:34:48:a6:
ee:16:35:8b:08:06:bc:af:97:5b:e0:47:a8:6b:27:
d3:b4:1b:25:96:9e:cf:62:00:43:96:2a:71:b1:15:
3e:5b:53:de:e4:cb:17:7f:3d:d8:91:f3:e8:d1:b2:
d1:01:29:e5:e9:c0:64:07:eb:0d:a8:2b:12:d5:78:
5a:ba:47:9e:fa:ff:46:b6:c3:f6:07:ec:b6:b7:7a:
fa:73:4c:bb:23:e1:91:2e:b1:ac:92:4c:66:da:b9:
b6:a7:3d:45:c7:9e:9e:fd:47:26:cc:bd:de:53:f3:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:02:14:4C:87:CF:EA:6B:39:EE:8C:1A:5D:9C:96:2F:0E:8A:2D:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/84a415d3-9b8d-32c6-a082-7a15a72e2730.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.219.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:85:55:42:2a:4f:4b:85:c6:c9:a1:0c:a7:79:e6:fd:a2:93:
8a:52:b4:1e:cd:35:07:bb:2b:96:4f:0e:32:c1:54:00:f8:a4:
c1:6e:e2:ea:96:71:b8:85:84:10:31:e3:a0:a5:0f:3c:bb:17:
90:7c:65:6e:c2:ad:c9:b7:00:59:17:e2:7a:1b:b9:97:de:77:
b5:d5:8f:c2:3c:48:96:a3:d1:81:43:cb:64:85:90:88:3a:d4:
c5:ca:04:8c:9d:e0:cd:1e:7c:a1:44:cd:ae:c5:c4:7a:3c:78:
e5:4a:40:53:5c:b4:48:ec:5c:b7:b1:16:b6:a3:c3:d2:f2:f6:
44:b7:ac:28:83:66:5a:6b:b8:20:da:fa:c3:b1:d4:80:c3:c8:
82:d1:06:dd:89:dd:18:e5:d6:47:16:7f:1a:e2:c6:6d:37:74:
03:11:0d:d6:40:85:c3:1f:8b:37:cf:4d:77:46:6f:87:d7:9b:
c0:a1:3c:90:96:10:58:32:75:2c:2b:58:c0:12:c7:06:2d:0e:
3c:cf:55:43:b5:11:34:1a:52:cc:38:c9:28:4b:c8:9c:ed:3b:
b6:6e:8d:c0:2c:2c:f3:fa:b8:c2:f8:9a:66:d1:89:a9:11:5a:
c3:97:8d:ae:48:a2:5d:45:e6:04:92:e8:90:b4:b9:84:f2:a4:
5b:70:20:83
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+qOqnXtE/8iocIi6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyMjEyMDAwMFoXDTIyMTEyNzA1MDAwMFowLzEtMCsGA1UEAxMk
MWMxNjU3MTgtMTYxYy00NzczLTljOGYtMWE0MTUzNmFmZDM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1rA6ZlO/bnhzwkJpSiR6aJvdH3075cwelM1
rIf7nhkuSniXXzbAKGRGAXm9K7/M7yiMXXXAwVBk3jUQWY2xkls3F9QL07V6yweV
klR80aA6Dh59twsWJ3YZpzr5oNC8geI3BfoREVWdHp/CthIvNTrOlO5eAJskow49
qH/0yNYtPfVNSCDy8QaPYLQ2ZCwHksc0SKbuFjWLCAa8r5db4EeoayfTtBsllp7P
YgBDlipxsRU+W1Pe5MsXfz3YkfPo0bLRASnl6cBkB+sNqCsS1Xhaukee+v9GtsP2
B+y2t3r6c0y7I+GRLrGskkxm2rm2pz1Fx56e/UcmzL3eU/NxnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFC0CFEyHz+prOe6MGl2cli8Oii3sMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODRhNDE1ZDMtOWI4ZC0z
MmM2LWEwODItN2ExNWE3MmUyNzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAENswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfoVVQipPS4XGyaEMp3nm/aKTilK0Hs01B7srlk8OMsFUAPikwW7i6pZx
uIWEEDHjoKUPPLsXkHxlbsKtybcAWRfiehu5l953tdWPwjxIlqPRgUPLZIWQiDrU
xcoEjJ3gzR58oUTNrsXEejx45UpAU1y0SOxct7EWtqPD0vL2RLesKINmWmu4INr6
w7HUgMPIgtEG3YndGOXWRxZ/GuLGbTd0AxEN1kCFwx+LN89Nd0Zvh9ebwKE8kJYQ
WDJ1LCtYwBLHBi0OPM9VQ7URNBpSzDjJKEvInO07tm6NwCws8/q4wviaZtGJqRFa
w5eNrkiiXUXmBJLokLS5hPKkW3Aggw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:17:18 2025 by rpki-client