Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9082e6a7-c15d-3e83-94a5-04d9026b66c3.roa
File: 9082e6a7-c15d-3e83-94a5-04d9026b66c3.roa (raw, json)
Hash identifier: F/V3mF85C7BmilnjxLWWNXvNmdfiNGvzRTNjoHtHiEA=
Subject key identifier: F3:16:D5:36:FF:49:C1:1E:D4:6E:20:E2:5F:F5:57:25:45:82:D8:66
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403DA348BD67FCDBC299853600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9082e6a7-c15d-3e83-94a5-04d9026b66c3.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.119.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:a3:48:bd:67:fc:db:c2:99:85:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=2893958b-09f1-4a91-ae21-43bf40e93da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fb:59:0f:9f:45:39:ef:9c:8b:59:14:7e:1b:
a3:a4:01:f0:89:32:f0:4e:27:07:55:34:ae:f3:b6:
13:e5:fb:87:16:44:61:e4:07:87:68:33:f9:88:ad:
0e:14:ff:3d:fa:0e:1c:65:65:55:6b:a9:50:72:8e:
8b:c6:18:04:78:4e:88:a2:1b:ea:78:d5:a5:9a:84:
6c:f7:69:c1:f4:cb:97:84:77:a7:99:e8:57:43:78:
5a:cc:fd:c5:69:60:71:65:91:9c:52:4e:9c:a1:da:
97:91:7e:cb:ee:27:c4:6c:68:23:7c:e7:0c:a1:59:
87:8d:6b:e5:dc:b2:19:c3:32:33:0b:25:ec:45:f8:
f2:6e:e1:54:ae:36:43:4d:35:5a:43:98:25:03:27:
5d:38:5c:eb:99:a5:a7:31:cf:e6:07:e7:a4:c5:ec:
01:f6:60:f6:3e:22:63:44:a5:7a:9a:5e:7d:bd:18:
84:02:05:67:98:c4:04:02:f9:22:f7:bc:e5:26:58:
32:0c:e4:97:08:36:ac:98:8f:56:55:4e:95:be:b4:
ee:20:78:1d:40:2a:a4:e5:fd:bb:f1:92:28:ef:0d:
22:f8:52:4e:3e:77:30:2f:ff:b9:86:fb:93:e5:82:
c1:56:d8:07:cd:ce:54:9e:3e:73:eb:db:ba:ee:c9:
e4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:16:D5:36:FF:49:C1:1E:D4:6E:20:E2:5F:F5:57:25:45:82:D8:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9082e6a7-c15d-3e83-94a5-04d9026b66c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.119.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:5f:7a:a9:e6:a2:e4:d5:d2:e5:51:b0:e1:91:b1:f5:a0:eb:
1f:5e:4a:6e:ec:69:68:8c:ce:c4:1d:08:5a:72:95:60:19:51:
3f:37:07:11:49:d9:f0:21:f0:50:0d:27:60:cf:52:58:01:87:
e8:56:6d:a7:9e:a8:91:a4:10:40:10:33:7b:f2:7c:51:58:9d:
be:fa:b2:84:e0:82:d6:d5:c0:dd:ca:3b:af:75:63:18:dc:da:
bb:92:85:a4:f1:13:11:fe:36:3f:f2:1a:5e:0a:52:60:3d:b1:
1c:78:96:b5:5b:49:40:ce:c2:6d:2d:0b:86:42:63:8c:1e:d6:
32:f1:ac:d2:ae:b9:ac:b1:e6:c2:be:06:32:a3:3a:21:51:c1:
73:b9:ab:0f:bb:b2:49:f2:48:97:51:89:e1:ef:04:b0:e6:f4:
86:33:74:4f:6a:2d:2b:6c:ad:1b:44:5c:5b:3b:19:47:51:0d:
1c:37:f0:c4:dc:33:d1:bc:4f:e3:58:15:2f:4b:00:ef:a3:55:
4a:0b:94:cf:4f:e5:b6:ce:a7:c7:0a:f8:d3:d6:80:fb:8e:38:
0c:6d:19:9a:58:95:7f:fb:5b:6d:ed:59:63:16:53:f1:e6:74:
51:df:de:fd:57:f7:d1:33:95:7c:09:24:e3:ae:5f:48:1a:84:
20:b9:9c:a4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA9o0i9Z/zbwpmFNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
Mjg5Mzk1OGItMDlmMS00YTkxLWFlMjEtNDNiZjQwZTkzZGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPtZD59FOe+ci1kUfhujpAHwiTLwTicHVTSu
87YT5fuHFkRh5AeHaDP5iK0OFP89+g4cZWVVa6lQco6LxhgEeE6IohvqeNWlmoRs
92nB9MuXhHenmehXQ3hazP3FaWBxZZGcUk6codqXkX7L7ifEbGgjfOcMoVmHjWvl
3LIZwzIzCyXsRfjybuFUrjZDTTVaQ5glAyddOFzrmaWnMc/mB+ekxewB9mD2PiJj
RKV6ml59vRiEAgVnmMQEAvki97zlJlgyDOSXCDasmI9WVU6VvrTuIHgdQCqk5f27
8ZIo7w0i+FJOPncwL/+5hvuT5YLBVtgHzc5Unj5z69u67snktQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPMW1Tb/ScEe1G4g4l/1VyVFgthmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTA4MmU2YTctYzE1ZC0z
ZTgzLTk0YTUtMDRkOTAyNmI2NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFF96qeai5NXS5VGw4ZGx9aDrH15KbuxpaIzOxB0IWnKVYBlRPzcHEUnZ
8CHwUA0nYM9SWAGH6FZtp56okaQQQBAze/J8UVidvvqyhOCC1tXA3co7r3VjGNza
u5KFpPETEf42P/IaXgpSYD2xHHiWtVtJQM7CbS0LhkJjjB7WMvGs0q65rLHmwr4G
MqM6IVHBc7mrD7uySfJIl1GJ4e8EsOb0hjN0T2otK2ytG0RcWzsZR1ENHDfwxNwz
0bxP41gVL0sA76NVSguUz0/lts6nxwr409aA+444DG0ZmliVf/tbbe1ZYxZT8eZ0
Ud/e/Vf30TOVfAkk465fSBqEILmcpA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:17 2025 by rpki-client