Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/931ea81e-f1bc-38e7-aa59-f96341be2caa.roa
File: 931ea81e-f1bc-38e7-aa59-f96341be2caa.roa (raw, json)
Hash identifier: njJTql47hSzq0zZgzomywQdRQRkaImeyax8a4Gekfpw=
Subject key identifier: A2:A6:C2:61:69:4A:25:80:A9:C2:EA:6D:AF:A4:39:D8:DB:5F:7D:7E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E43F4DA9B6B90551C6787B400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/931ea81e-f1bc-38e7-aa59-f96341be2caa.roa
Signing time: Thu 16 Jun 2022 12:00:00 +0000
ROA not before: Thu 16 Jun 2022 12:00:00 +0000
ROA not after: Fri 22 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:43:f4:da:9b:6b:90:55:1c:67:87:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 16 12:00:00 2022 GMT
Not After : Jul 22 04:00:00 2022 GMT
Subject: CN=e1ee5754-c396-4de7-af64-f2c940812cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f7:dc:6a:77:be:9d:6e:a7:13:3a:5d:3a:32:
53:d0:29:f7:07:5f:49:2e:c4:96:49:b6:f9:98:4d:
2e:54:8b:c2:19:d9:da:a7:86:1e:b7:e9:b1:2a:3f:
7f:74:8d:4e:6d:9d:67:51:38:07:cf:dc:2a:ce:19:
6e:7a:86:73:5b:94:be:7a:68:c7:22:cf:9a:97:08:
bd:16:ce:bb:0e:f0:90:f5:4f:f3:4c:b5:85:17:05:
81:e5:d4:85:91:07:5f:90:8d:ab:ab:b2:13:fa:59:
2e:6c:4b:31:0c:ff:29:59:71:43:53:3e:03:b8:b1:
c9:d9:6c:95:97:41:5a:bf:43:50:c1:c5:d6:28:b9:
30:b8:0d:e8:38:75:09:25:3c:c4:0d:bb:0d:28:b6:
03:8d:75:9f:91:89:17:30:82:58:e3:aa:6d:05:13:
0a:dd:f6:6c:3d:75:de:cd:47:e6:25:4f:f9:ae:60:
b0:9b:f5:a6:42:26:e1:05:c9:a4:7f:2a:c6:0e:02:
19:1f:c7:9c:a8:50:71:0e:ae:0d:01:87:f3:0b:ca:
56:7c:54:27:2e:35:31:15:54:6a:6b:fd:34:e8:b8:
d4:d2:08:0d:1b:dc:46:ca:f0:e6:92:47:53:f3:27:
c5:58:2a:f1:b0:84:18:f8:1f:14:9d:ce:63:61:72:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A6:C2:61:69:4A:25:80:A9:C2:EA:6D:AF:A4:39:D8:DB:5F:7D:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/931ea81e-f1bc-38e7-aa59-f96341be2caa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.128.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:6c:fd:5a:5a:75:0a:b3:2e:68:ff:3b:7d:8f:c6:44:48:08:
e3:bc:46:84:c5:39:28:0c:85:3a:51:c3:93:0d:19:b3:7f:d9:
a7:a2:86:82:2e:da:65:8d:fa:b4:b5:14:1a:28:a1:3f:8c:61:
bd:87:36:47:6d:60:e7:b6:a4:2c:7a:39:6b:78:97:20:0c:02:
57:b1:e2:58:c8:c2:00:63:03:86:e9:8a:44:07:7f:f2:94:87:
94:b8:80:be:eb:26:64:60:b9:c0:43:56:e1:41:6f:f0:cc:1a:
79:3c:6d:ba:f0:87:b4:0d:af:ba:4f:cf:3c:30:bc:0a:21:f5:
1d:68:7b:15:71:82:8e:b7:9c:01:6d:12:61:70:6c:eb:83:74:
14:24:13:19:b4:08:73:39:18:9d:9b:05:67:bd:46:35:81:d7:
b9:51:97:e3:f5:83:e6:6d:9c:40:44:fc:8c:f8:69:6c:e7:42:
51:b8:71:85:f8:55:73:f8:f1:45:40:41:db:9b:3a:24:88:fa:
15:3a:dd:96:4a:79:e6:7f:ae:89:b2:f1:cc:74:12:9e:5c:40:
19:f4:be:28:b2:3d:33:7c:4c:3d:f4:17:cf:7d:1a:f3:3f:ab:
e5:bc:52:c8:6d:70:bb:44:2f:f7:9e:99:ff:88:cb:02:29:b0:
c8:b3:43:c4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5D9Nqba5BVHGeHtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYxNjEyMDAwMFoXDTIyMDcyMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTFlZTU3NTQtYzM5Ni00ZGU3LWFmNjQtZjJjOTQwODEyY2MwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPfcane+nW6nEzpdOjJT0Cn3B19JLsSWSbb5
mE0uVIvCGdnap4Yet+mxKj9/dI1ObZ1nUTgHz9wqzhlueoZzW5S+emjHIs+alwi9
Fs67DvCQ9U/zTLWFFwWB5dSFkQdfkI2rq7IT+lkubEsxDP8pWXFDUz4DuLHJ2WyV
l0Fav0NQwcXWKLkwuA3oOHUJJTzEDbsNKLYDjXWfkYkXMIJY46ptBRMK3fZsPXXe
zUfmJU/5rmCwm/WmQibhBcmkfyrGDgIZH8ecqFBxDq4NAYfzC8pWfFQnLjUxFVRq
a/006LjU0ggNG9xGyvDmkkdT8yfFWCrxsIQY+B8Unc5jYXJ8cQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKKmwmFpSiWAqcLqba+kOdjbX31+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTMxZWE4MWUtZjFiYy0z
OGU3LWFhNTktZjk2MzQxYmUyY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHmz9Wlp1CrMuaP87fY/GREgI47xGhMU5KAyFOlHDkw0Zs3/Zp6KGgi7a
ZY36tLUUGiihP4xhvYc2R21g57akLHo5a3iXIAwCV7HiWMjCAGMDhumKRAd/8pSH
lLiAvusmZGC5wENW4UFv8MwaeTxtuvCHtA2vuk/PPDC8CiH1HWh7FXGCjrecAW0S
YXBs64N0FCQTGbQIczkYnZsFZ71GNYHXuVGX4/WD5m2cQET8jPhpbOdCUbhxhfhV
c/jxRUBB25s6JIj6FTrdlkp55n+uibLxzHQSnlxAGfS+KLI9M3xMPfQXz30a8z+r
5bxSyG1wu0Qv956Z/4jLAimwyLNDxA==
-----END CERTIFICATE-----
Generated at Wed Apr 16 18:25:54 2025 by rpki-client