Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c5f655b-a672-34ac-bd53-1f622910cb14.roa
File: 8c5f655b-a672-34ac-bd53-1f622910cb14.roa (raw, json)
Hash identifier: 3e41FnPkVZR+ZrPI8EadxIEIf0r+YV8TwBbPhL9xeb0=
Subject key identifier: 78:D7:0F:63:51:49:75:17:CB:D4:C8:17:22:FE:31:31:0D:5F:30:57
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B378ED64037ADBCE22B92540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c5f655b-a672-34ac-bd53-1f622910cb14.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.90.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b3:78:ed:64:03:7a:db:ce:22:b9:25:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=764bf8e7-8d11-44b9-bef2-88c88cc39c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:78:be:a2:50:78:9b:e2:9c:ec:bb:69:00:
a3:aa:8a:ed:a5:16:10:01:95:74:df:db:14:6b:03:
c2:85:fe:ff:25:01:d4:e9:d8:d1:5b:74:27:c6:12:
c4:e7:09:b4:db:3f:80:87:d2:28:cf:7d:7f:32:0c:
6a:28:bc:31:0c:24:34:c9:61:f2:65:27:17:43:aa:
af:47:1f:00:50:f2:46:6e:d2:34:6b:e3:b8:17:f6:
47:9d:54:7e:86:1e:4d:36:71:6a:ba:11:96:d4:aa:
d6:7c:29:03:d5:77:c2:d0:6f:71:40:b2:c2:b2:06:
ff:94:60:94:1c:15:10:8e:8a:6e:32:ab:e2:90:60:
0e:4f:fd:28:d7:43:58:a2:dc:8a:4d:54:91:dc:4e:
93:77:0f:15:2f:db:6a:c8:a4:f5:9a:c6:1e:cd:b1:
e2:71:81:b1:49:d1:ca:35:9a:e2:25:23:83:d9:2c:
55:a8:70:5f:da:ce:3c:d5:85:23:0e:e4:ca:e2:8d:
9d:66:33:3b:50:f1:9e:e1:1f:8a:e1:17:ef:74:aa:
02:95:3f:e9:55:18:ad:53:c1:dc:cc:e7:28:a9:89:
06:b0:e1:20:09:2d:ef:b5:b3:71:6d:65:6f:62:9b:
af:1a:ba:d1:af:09:ee:27:2b:36:64:f8:06:c3:f6:
a4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D7:0F:63:51:49:75:17:CB:D4:C8:17:22:FE:31:31:0D:5F:30:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8c5f655b-a672-34ac-bd53-1f622910cb14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.90.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:17:b4:18:d5:02:6d:38:a6:f4:e8:80:25:c0:ff:67:aa:19:
1a:ec:8f:43:64:c4:53:ec:d4:02:35:25:c2:9f:04:d7:70:7c:
fb:60:69:5a:1f:53:3a:82:cc:3d:0d:5e:dd:9f:64:f2:c3:de:
56:fb:57:3d:a6:11:3c:db:5d:36:60:27:a8:3b:96:83:3f:de:
40:67:7e:01:21:d1:ec:8f:72:76:c0:4f:98:82:17:eb:2c:15:
25:0b:63:37:aa:3a:ed:6a:84:cb:a4:9c:77:19:a2:3e:40:ff:
a9:3c:38:83:16:1c:8c:23:32:1c:bb:16:20:19:67:3a:94:75:
7d:d4:83:99:20:20:c8:87:de:fa:91:d6:7a:e9:ad:8e:0a:85:
d0:3b:73:64:55:37:37:d1:1f:e1:c8:2a:1e:6b:ce:bb:e2:cd:
15:be:9d:83:fd:fa:44:6e:c6:2e:23:e0:b7:c3:fd:ec:e6:56:
8d:84:b7:6c:21:63:c9:e4:ab:b6:df:88:d9:c0:28:6f:a1:15:
be:94:4c:10:3a:0f:92:4d:d4:3b:7b:5b:91:bb:4f:b3:ba:b8:
52:59:5b:9c:55:e4:51:7c:81:4d:cb:51:37:83:b9:45:0c:cc:
24:0e:49:58:dc:f6:32:50:71:7c:70:e3:21:c0:37:5e:e3:cf:
12:cc:5e:6c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECzeO1kA3rbziK5JUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEyNTEyMDAwMFoXDTIzMDMwMjA1MDAwMFowLzEtMCsGA1UEAxMk
NzY0YmY4ZTctOGQxMS00NGI5LWJlZjItODhjODhjYzM5YzQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEh4vqJQeJvinOy7aQCjqortpRYQAZV039sU
awPChf7/JQHU6djRW3QnxhLE5wm02z+Ah9Ioz31/MgxqKLwxDCQ0yWHyZScXQ6qv
Rx8AUPJGbtI0a+O4F/ZHnVR+hh5NNnFquhGW1KrWfCkD1XfC0G9xQLLCsgb/lGCU
HBUQjopuMqvikGAOT/0o10NYotyKTVSR3E6Tdw8VL9tqyKT1msYezbHicYGxSdHK
NZriJSOD2SxVqHBf2s481YUjDuTK4o2dZjM7UPGe4R+K4RfvdKoClT/pVRitU8Hc
zOcoqYkGsOEgCS3vtbNxbWVvYpuvGrrRrwnuJys2ZPgGw/akKwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHjXD2NRSXUXy9TIFyL+MTENXzBXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOGM1ZjY1NWItYTY3Mi0z
NGFjLWJkNTMtMWY2MjI5MTBjYjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEFowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPxe0GNUCbTim9OiAJcD/Z6oZGuyPQ2TEU+zUAjUlwp8E13B8+2BpWh9T
OoLMPQ1e3Z9k8sPeVvtXPaYRPNtdNmAnqDuWgz/eQGd+ASHR7I9ydsBPmIIX6ywV
JQtjN6o67WqEy6ScdxmiPkD/qTw4gxYcjCMyHLsWIBlnOpR1fdSDmSAgyIfe+pHW
eumtjgqF0DtzZFU3N9Ef4cgqHmvOu+LNFb6dg/36RG7GLiPgt8P97OZWjYS3bCFj
yeSrtt+I2cAob6EVvpRMEDoPkk3UO3tbkbtPs7q4UllbnFXkUXyBTctRN4O5RQzM
JA5JWNz2MlBxfHDjIcA3XuPPEsxebA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:02 2025 by rpki-client