Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87a0f4e0-366b-3e30-bb8d-d844de3376e5.roa
File: 87a0f4e0-366b-3e30-bb8d-d844de3376e5.roa (raw, json)
Hash identifier: HC9EE/j1kZMXI4J7HI9ROzFHt6y3GSluaybpJNHKHEg=
Subject key identifier: FE:EB:17:F0:E0:B9:50:BC:D7:80:7D:69:33:99:A4:11:BD:38:38:62
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584017B7800213104CEDD4AC3D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87a0f4e0-366b-3e30-bb8d-d844de3376e5.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.79.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:b7:80:02:13:10:4c:ed:d4:ac:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=8df1298b-20f6-4787-9d2a-0f34c241fbfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:49:16:c0:af:11:aa:58:86:be:bb:ae:b0:
95:c9:f1:8b:b2:32:b6:33:5a:71:98:d5:a8:fd:06:
0d:ae:73:2f:4d:4e:99:20:ae:fb:f5:4d:a8:52:02:
15:30:d0:5b:11:6f:19:c4:3b:a8:93:9c:2d:4c:1c:
ed:bb:a9:50:ca:da:cc:8b:2e:cc:5e:ae:b5:0f:6f:
d0:04:22:76:32:1b:e9:88:56:f0:00:3b:2b:3e:20:
92:4d:43:5b:b1:ac:35:00:0c:ad:84:1f:50:1a:f2:
72:fb:62:72:d3:65:7f:b4:09:49:21:4b:3d:84:3a:
17:b3:97:36:81:fe:a0:54:08:1e:f2:78:40:b3:5e:
d1:cf:90:dc:31:a3:93:07:39:9e:82:f7:22:04:1a:
88:9c:cd:93:ea:1b:70:50:ee:ba:c7:cf:c4:07:01:
0b:ff:f4:4b:39:ec:59:66:04:f9:dc:2e:16:1a:a9:
b8:69:23:21:ae:3f:71:fb:44:af:c8:3f:7f:16:67:
0e:9d:27:4c:bf:5e:ba:53:d2:42:ef:82:cc:77:64:
87:e0:cb:ab:e6:30:29:66:f1:ee:d8:15:08:27:48:
7b:87:de:39:80:6c:3f:7b:72:1e:d7:b7:10:1d:e2:
81:b8:88:18:60:19:b6:2b:3f:fb:8d:06:95:0e:ce:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EB:17:F0:E0:B9:50:BC:D7:80:7D:69:33:99:A4:11:BD:38:38:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/87a0f4e0-366b-3e30-bb8d-d844de3376e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.79.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:23:2d:9a:df:ef:84:75:9c:d0:9e:4a:16:ac:f6:9c:61:d4:
cf:bc:8d:6f:af:68:8c:36:9c:7a:fd:bf:ac:c7:92:18:5b:23:
24:3a:76:2f:9f:c6:8a:6c:c2:a1:a6:32:8a:81:fa:52:90:7f:
3e:f9:ad:72:50:9b:91:8c:67:fb:fa:40:a9:27:c2:41:af:f1:
58:46:94:0f:ae:1b:62:71:ff:24:c5:20:38:03:cd:fe:22:a9:
f0:da:6c:f4:16:2e:8c:cd:79:00:f8:d8:26:b0:d6:74:f1:c6:
32:60:d3:63:a9:5c:db:bb:43:67:9c:73:d0:72:7d:d4:4a:a2:
a4:ad:c9:5f:76:c8:34:d3:0d:97:bf:f3:3f:95:89:fc:1a:b1:
aa:62:5b:60:87:b8:8e:32:3d:20:14:10:f0:98:4b:a5:bb:ec:
c9:c0:58:aa:a9:d5:5c:1c:dc:37:28:98:b8:30:b8:f4:22:1d:
3d:2b:19:9b:95:94:ac:1d:85:6e:fa:82:5b:ad:ae:e8:b2:5c:
05:61:b9:51:45:72:1f:8f:43:03:14:63:b9:6d:7d:03:2b:a3:
96:be:80:9d:50:68:80:79:e2:c9:89:dd:87:36:40:a1:c4:e8:
f0:bf:8d:2b:99:05:a9:97:d1:75:95:83:c2:5c:0c:8e:32:f3:
bf:b3:6b:5f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAXt4ACExBM7dSsPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEzMDEyMDAwMFoXDTIzMDEwNTA1MDAwMFowLzEtMCsGA1UEAxMk
OGRmMTI5OGItMjBmNi00Nzg3LTlkMmEtMGYzNGMyNDFmYmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUBJFsCvEapYhr67rrCVyfGLsjK2M1pxmNWo
/QYNrnMvTU6ZIK779U2oUgIVMNBbEW8ZxDuok5wtTBztu6lQytrMiy7MXq61D2/Q
BCJ2MhvpiFbwADsrPiCSTUNbsaw1AAythB9QGvJy+2Jy02V/tAlJIUs9hDoXs5c2
gf6gVAge8nhAs17Rz5DcMaOTBzmegvciBBqInM2T6htwUO66x8/EBwEL//RLOexZ
ZgT53C4WGqm4aSMhrj9x+0SvyD9/FmcOnSdMv166U9JC74LMd2SH4Mur5jApZvHu
2BUIJ0h7h945gGw/e3Ie17cQHeKBuIgYYBm2Kz/7jQaVDs6ERwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFP7rF/DguVC814B9aTOZpBG9ODhiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvODdhMGY0ZTAtMzY2Yi0z
ZTMwLWJiOGQtZDg0NGRlMzM3NmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEE8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPyMtmt/vhHWc0J5KFqz2nGHUz7yNb69ojDacev2/rMeSGFsjJDp2L5/G
imzCoaYyioH6UpB/PvmtclCbkYxn+/pAqSfCQa/xWEaUD64bYnH/JMUgOAPN/iKp
8Nps9BYujM15APjYJrDWdPHGMmDTY6lc27tDZ5xz0HJ91EqipK3JX3bINNMNl7/z
P5WJ/BqxqmJbYIe4jjI9IBQQ8JhLpbvsycBYqqnVXBzcNyiYuDC49CIdPSsZm5WU
rB2FbvqCW62u6LJcBWG5UUVyH49DAxRjuW19Ayujlr6AnVBogHniyYndhzZAocTo
8L+NK5kFqZfRdZWDwlwMjjLzv7NrXw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:15 2025 by rpki-client