Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98d5c2b5-64a3-3909-9f5a-2e2a9be0cddb.roa
File: 98d5c2b5-64a3-3909-9f5a-2e2a9be0cddb.roa (raw, json)
Hash identifier: iCEoxvcrTeqtvMeqNsvQNg6/QsbQls7SwUJWtQ3fmwg=
Subject key identifier: B6:DD:55:5E:EB:26:0E:20:1E:1A:97:2B:8D:31:19:CB:15:95:4F:75
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E28367B14C20C52374AF81E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98d5c2b5-64a3-3909-9f5a-2e2a9be0cddb.roa
Signing time: Mon 06 Jun 2022 12:00:00 +0000
ROA not before: Mon 06 Jun 2022 12:00:00 +0000
ROA not after: Tue 12 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:28:36:7b:14:c2:0c:52:37:4a:f8:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jun 6 12:00:00 2022 GMT
Not After : Jul 12 04:00:00 2022 GMT
Subject: CN=6e8750bb-745a-4101-9707-9232028febb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:69:0e:ce:ac:0c:aa:6a:2e:a4:94:81:49:
2d:be:5b:fd:d0:18:a1:fb:7f:e5:29:5e:24:64:6f:
54:e9:3f:08:db:0b:1e:fc:ae:a8:c8:1a:b0:71:c7:
c1:5d:85:0f:3c:bf:f9:56:05:ae:4b:5d:fa:8a:26:
44:c1:77:7f:85:d2:c2:12:4d:d6:de:84:ec:bb:4c:
2a:2d:37:2b:f8:05:c0:0e:ab:f2:6b:c8:a6:40:99:
2c:29:50:d3:90:2d:2b:00:7d:71:60:e2:5b:98:02:
f1:e3:39:d4:ed:7e:f5:43:fa:91:43:b4:80:a4:4f:
a6:38:bb:73:33:a0:23:9f:51:5b:a9:66:86:54:67:
7c:e8:c1:2a:0c:65:43:ed:f4:48:be:31:b3:82:33:
b7:67:85:ea:39:2f:4a:8c:d3:bc:d3:58:41:24:22:
b7:76:7f:15:0b:42:e5:74:c0:85:ca:39:e9:96:a8:
98:c4:da:f0:26:09:cf:f1:07:9b:a6:aa:00:26:75:
ad:aa:2b:18:aa:2d:8e:66:84:7d:79:88:dd:af:f8:
67:0d:1b:01:e9:4e:62:00:92:90:d3:c0:5d:8d:ba:
81:7e:93:5f:02:1a:2f:49:24:8c:34:8e:af:b1:d6:
bb:5f:dd:a5:b2:8a:81:a3:5d:24:b5:b8:b4:46:5f:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DD:55:5E:EB:26:0E:20:1E:1A:97:2B:8D:31:19:CB:15:95:4F:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/98d5c2b5-64a3-3909-9f5a-2e2a9be0cddb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:a1:27:5a:e2:69:00:dc:a8:2d:bf:1f:61:44:39:e0:26:2b:
89:c6:b7:f5:27:1c:da:81:4d:57:be:72:11:89:4c:6e:22:2c:
fc:94:fb:7f:e8:4a:03:e1:04:b1:2b:39:77:19:f0:bd:f9:4c:
ca:68:43:54:c4:38:bb:39:0f:23:f8:8d:9c:77:27:5b:ff:48:
d1:6c:ba:0b:19:7f:12:52:cb:a4:c7:a5:aa:e9:2e:d9:73:f2:
98:07:19:38:50:59:52:5e:2f:52:ff:5e:60:cc:66:48:fb:81:
90:50:cf:71:23:f0:ca:11:3c:fc:1a:0f:1b:95:a5:0d:19:b0:
54:0a:55:64:be:9e:5b:79:c3:ba:2f:db:7e:e6:4d:cb:93:39:
11:3e:5b:df:4d:b5:79:a8:a9:b7:6f:55:d2:0e:2a:a9:f1:fa:
d5:2f:3e:04:a8:fd:9e:59:d8:80:dc:2e:dc:70:88:aa:43:ea:
a8:45:ab:51:e9:d7:b0:35:31:47:df:c8:f0:d7:a3:97:7a:7d:
b8:8d:63:e2:53:fd:93:c3:6f:1e:3b:23:6d:0f:19:68:c9:21:
29:6d:db:68:95:3b:75:ae:69:1b:ab:6f:b1:bf:64:86:71:00:
ac:bd:6e:c4:85:08:72:62:13:ee:72:0d:3f:53:44:16:9d:01:
d8:82:50:3d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4oNnsUwgxSN0r4HgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDYwNjEyMDAwMFoXDTIyMDcxMjA0MDAwMFowLzEtMCsGA1UEAxMk
NmU4NzUwYmItNzQ1YS00MTAxLTk3MDctOTIzMjAyOGZlYmI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaFpDs6sDKpqLqSUgUktvlv90Bih+3/lKV4k
ZG9U6T8I2wse/K6oyBqwccfBXYUPPL/5VgWuS136iiZEwXd/hdLCEk3W3oTsu0wq
LTcr+AXADqvya8imQJksKVDTkC0rAH1xYOJbmALx4znU7X71Q/qRQ7SApE+mOLtz
M6Ajn1FbqWaGVGd86MEqDGVD7fRIvjGzgjO3Z4XqOS9KjNO801hBJCK3dn8VC0Ll
dMCFyjnplqiYxNrwJgnP8QebpqoAJnWtqisYqi2OZoR9eYjdr/hnDRsB6U5iAJKQ
08BdjbqBfpNfAhovSSSMNI6vsda7X92lsoqBo10ktbi0Rl95ZQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLbdVV7rJg4gHhqXK40xGcsVlU91MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOThkNWMyYjUtNjRhMy0z
OTA5LTlmNWEtMmUyYTliZTBjZGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEFYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApKEnWuJpANyoLb8fYUQ54CYrica39Scc2oFNV75yEYlMbiIs/JT7f+hK
A+EEsSs5dxnwvflMymhDVMQ4uzkPI/iNnHcnW/9I0Wy6Cxl/ElLLpMelquku2XPy
mAcZOFBZUl4vUv9eYMxmSPuBkFDPcSPwyhE8/BoPG5WlDRmwVApVZL6eW3nDui/b
fuZNy5M5ET5b3021eaipt29V0g4qqfH61S8+BKj9nlnYgNwu3HCIqkPqqEWrUenX
sDUxR9/I8Nejl3p9uI1j4lP9k8NvHjsjbQ8ZaMkhKW3baJU7da5pG6tvsb9khnEA
rL1uxIUIcmIT7nINP1NEFp0B2IJQPQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:15 2025 by rpki-client