Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85298f8e-98d4-3522-baa6-0b213e7b39b1.roa
File: 85298f8e-98d4-3522-baa6-0b213e7b39b1.roa (raw, json)
Hash identifier: DH7UizvXn74abkGWt5/xj8q8Tpd6ysGOh2akQ+DhA2g=
Subject key identifier: BA:C7:FB:3A:70:B2:8E:E7:44:AE:3C:6B:3A:7F:AD:D1:90:73:22:D8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF09306692CB13AFC00223280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85298f8e-98d4-3522-baa6-0b213e7b39b1.roa
Signing time: Wed 16 Nov 2022 12:00:00 +0000
ROA not before: Wed 16 Nov 2022 12:00:00 +0000
ROA not after: Thu 22 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f0:93:06:69:2c:b1:3a:fc:00:22:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 16 12:00:00 2022 GMT
Not After : Dec 22 05:00:00 2022 GMT
Subject: CN=76a72718-0445-4795-8250-d6fffc446ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:31:1a:27:34:c4:13:78:e1:c7:3b:32:c0:
7d:a9:9d:9d:2f:dd:b3:8b:5c:8a:2c:33:5a:29:92:
de:48:63:bf:ce:a7:9a:2d:36:24:b1:d6:13:ab:2b:
7a:be:c1:09:89:09:49:07:90:50:bd:eb:b3:11:ad:
01:1b:39:a2:54:d1:fd:51:d0:d3:e3:9c:e6:0a:26:
0e:9d:d8:08:06:71:6a:81:0a:98:0f:60:4c:fe:67:
ca:4a:c4:f2:c5:1d:6f:ef:3c:bd:68:1e:9d:2d:fb:
24:dd:d5:07:f8:04:7a:c7:35:22:a9:6c:35:e0:31:
a5:71:db:8d:4b:46:a8:1f:27:07:1a:02:e3:35:5d:
58:f8:74:f0:c0:e1:d9:a5:f3:a5:33:ed:23:e6:4a:
cd:d2:30:3f:40:6e:9b:1f:5f:79:eb:0d:be:5c:99:
14:95:5c:de:7d:b2:cd:f5:05:00:d1:4f:55:55:0d:
a1:bd:98:2a:61:2d:28:cd:1c:2f:4f:55:8c:01:d6:
46:ff:f1:84:50:44:36:a9:48:10:3a:8a:5d:13:06:
df:09:1e:0e:d9:68:3b:b3:5c:f5:46:83:d1:2f:2b:
08:63:93:04:69:72:07:ed:2c:97:35:4c:a7:93:44:
60:8e:11:64:c6:0f:43:82:79:e0:20:1c:98:c6:e1:
1a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C7:FB:3A:70:B2:8E:E7:44:AE:3C:6B:3A:7F:AD:D1:90:73:22:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/85298f8e-98d4-3522-baa6-0b213e7b39b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.70.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:b8:3a:14:9f:c6:e3:f7:f5:ca:14:8e:03:68:bf:ce:22:b5:
0c:f5:2f:4d:9d:3b:ec:bc:87:bc:fb:e6:93:6a:74:d8:ce:c0:
0b:6b:40:26:5f:28:df:30:c8:7c:0f:80:25:19:3a:65:c6:5c:
cc:16:75:a5:bf:33:c5:3a:68:86:6b:22:81:68:98:cf:37:3d:
0b:4e:a5:48:4e:e4:7c:d6:05:56:a4:e8:32:4a:de:1d:0e:3e:
4c:06:0e:4e:b1:c1:65:23:d7:99:1c:17:fd:b2:52:23:27:5b:
31:8c:e5:77:4c:ba:a3:86:40:6a:76:db:52:bd:6f:31:a7:2c:
3b:43:be:c4:52:82:d3:c2:e3:32:9f:bc:65:c6:1b:84:40:ab:
41:39:f9:69:2e:af:17:98:71:fd:6b:c9:b1:f6:94:6f:d9:c0:
57:43:b1:7d:ed:88:18:33:27:10:c0:29:10:04:e8:d7:08:8f:
7c:77:64:a3:54:7f:8b:70:f9:6e:53:82:e7:e1:13:3d:c1:41:
a4:f9:a7:49:29:ef:85:32:7a:50:75:66:74:a3:22:e1:dd:3d:
f6:bc:68:72:3e:d1:e5:9d:0b:42:cb:8b:f3:ee:e4:8f:88:7a:
d8:61:df:94:d2:4e:9b:b9:c5:1f:4f:58:4b:b5:40:7a:98:5d:
b5:7d:5e:cb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/wkwZpLLE6/AAiMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNjEyMDAwMFoXDTIyMTIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
NzZhNzI3MTgtMDQ0NS00Nzk1LTgyNTAtZDZmZmZjNDQ2ZWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvegxGic0xBN44cc7MsB9qZ2dL92zi1yKLDNa
KZLeSGO/zqeaLTYksdYTqyt6vsEJiQlJB5BQveuzEa0BGzmiVNH9UdDT45zmCiYO
ndgIBnFqgQqYD2BM/mfKSsTyxR1v7zy9aB6dLfsk3dUH+AR6xzUiqWw14DGlcduN
S0aoHycHGgLjNV1Y+HTwwOHZpfOlM+0j5krN0jA/QG6bH1956w2+XJkUlVzefbLN
9QUA0U9VVQ2hvZgqYS0ozRwvT1WMAdZG//GEUEQ2qUgQOopdEwbfCR4O2Wg7s1z1
RoPRLysIY5MEaXIH7SyXNUynk0RgjhFkxg9DgnngIByYxuEaKQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLrH+zpwso7nRK48azp/rdGQcyLYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODUyOThmOGUtOThkNC0z
NTIyLWJhYTYtMGIyMTNlN2IzOWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEEYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAErg6FJ/G4/f1yhSOA2i/ziK1DPUvTZ077LyHvPvmk2p02M7AC2tAJl8o
3zDIfA+AJRk6ZcZczBZ1pb8zxTpohmsigWiYzzc9C06lSE7kfNYFVqToMkreHQ4+
TAYOTrHBZSPXmRwX/bJSIydbMYzld0y6o4ZAanbbUr1vMacsO0O+xFKC08LjMp+8
ZcYbhECrQTn5aS6vF5hx/WvJsfaUb9nAV0Oxfe2IGDMnEMApEATo1wiPfHdko1R/
i3D5blOC5+ETPcFBpPmnSSnvhTJ6UHVmdKMi4d099rxocj7R5Z0LQsuL8+7kj4h6
2GHflNJOm7nFH09YS7VAephdtX1eyw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:09:00 2025 by rpki-client