Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/995c9a22-7349-38a5-bb0f-e5fe62cdce94.roa
File: 995c9a22-7349-38a5-bb0f-e5fe62cdce94.roa (raw, json)
Hash identifier: r/orma9/CfgT2NFBnPaKm+w0Yo6r/EGypHYjCw1MKxU=
Subject key identifier: E5:7D:DD:E4:2F:EA:00:A4:12:7E:E6:B3:B3:C2:46:DB:20:CF:EE:3B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406493C1FFBDC7793DAB728240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/995c9a22-7349-38a5-bb0f-e5fe62cdce94.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:64:93:c1:ff:bd:c7:79:3d:ab:72:82:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=7eff8765-ecca-465b-a525-430c5b2338db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:c8:6f:da:ef:7d:f8:84:f4:fd:4d:95:74:
7d:7a:3f:b4:4a:da:f1:d2:7a:63:01:69:86:17:23:
6a:62:7f:51:45:c4:1e:d6:dd:63:50:6c:30:b5:02:
81:ee:f4:63:71:4e:a4:e2:52:d8:b4:3a:ae:a1:af:
44:d9:2f:a8:6a:71:bd:37:eb:98:c0:c7:85:4d:3f:
ac:11:8c:df:3a:16:ed:99:0b:87:34:6e:be:0e:1b:
da:d2:c5:d8:32:0e:bd:46:4a:8b:ff:64:90:de:2b:
5b:2c:d7:57:b7:c1:fa:5b:e3:39:84:06:80:cb:b8:
1b:d5:68:ae:97:24:a0:69:98:ab:be:a3:5e:fd:b2:
e6:bc:96:cb:99:ef:80:2c:40:26:2b:44:be:8b:f6:
60:35:65:a9:d2:08:77:ee:1e:98:9f:96:eb:24:c8:
79:7b:ba:3d:c0:69:1f:ea:f2:bf:78:ae:0d:2b:89:
d2:41:77:ca:8a:e7:e0:76:c7:f8:7b:38:b0:10:82:
03:4a:f5:3d:7d:83:81:51:b0:d2:69:c3:2f:ad:20:
12:48:70:0a:01:e8:7f:86:62:03:b1:69:74:6c:40:
41:df:5d:0a:92:db:71:6a:8b:17:07:e9:e9:48:01:
eb:95:35:fd:d9:04:38:f7:39:77:f0:d7:ad:a8:28:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7D:DD:E4:2F:EA:00:A4:12:7E:E6:B3:B3:C2:46:DB:20:CF:EE:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/995c9a22-7349-38a5-bb0f-e5fe62cdce94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.156.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:11:30:ab:1c:e8:92:cd:3e:f0:ac:c8:b8:b0:da:54:44:56:
cf:5d:be:db:31:cd:82:67:bb:b0:1e:0b:f6:f8:95:3d:47:ae:
e2:e1:20:2e:70:24:26:ea:2f:d7:fa:eb:72:8f:35:dc:2b:ba:
ac:66:6b:58:20:46:27:18:95:f9:b8:2b:9d:de:10:18:7b:3f:
68:a4:49:c5:bf:d4:de:17:74:f2:2d:35:db:ee:af:f9:d1:6f:
d5:ac:03:94:ff:2b:a3:b4:4a:4e:8b:1a:fe:95:fe:11:db:35:
f7:8c:70:7c:68:f7:1c:71:41:df:4b:c9:39:f9:6b:e9:8e:71:
28:14:51:3a:89:2c:6c:b5:83:5e:e7:15:ce:d8:31:8b:8b:e4:
e2:a0:8d:2b:f4:e9:0b:3f:19:a9:bc:92:33:af:54:98:e6:fc:
36:cd:57:bb:4f:e3:3f:26:0e:4a:89:94:0f:1d:c0:6e:00:1e:
ae:9f:fc:b1:31:6b:67:c9:e2:3a:70:2a:00:7a:4e:e2:13:02:
b8:3c:8f:46:f4:04:f8:19:01:56:62:a4:12:e1:be:14:ed:38:
ae:d0:50:9a:91:6f:f4:54:f1:62:28:4e:bd:04:1a:28:52:26:
77:70:d6:2d:a1:0c:1d:66:a0:e7:9f:14:b9:96:14:a7:da:60:
8a:7e:9f:a0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBkk8H/vcd5PatygkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyODEyMDAwMFoXDTIzMDIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
N2VmZjg3NjUtZWNjYS00NjViLWE1MjUtNDMwYzViMjMzOGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/LIb9rvffiE9P1NlXR9ej+0Strx0npjAWmG
FyNqYn9RRcQe1t1jUGwwtQKB7vRjcU6k4lLYtDquoa9E2S+oanG9N+uYwMeFTT+s
EYzfOhbtmQuHNG6+Dhva0sXYMg69RkqL/2SQ3itbLNdXt8H6W+M5hAaAy7gb1Wiu
lySgaZirvqNe/bLmvJbLme+ALEAmK0S+i/ZgNWWp0gh37h6Yn5brJMh5e7o9wGkf
6vK/eK4NK4nSQXfKiufgdsf4eziwEIIDSvU9fYOBUbDSacMvrSASSHAKAeh/hmID
sWl0bEBB310KkttxaosXB+npSAHrlTX92QQ49zl38NetqCh1jQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOV93eQv6gCkEn7ms7PCRtsgz+47MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTk1YzlhMjItNzM0OS0z
OGE1LWJiMGYtZTVmZTYyY2RjZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhhEwqxzoks0+8KzIuLDaVERWz12+2zHNgme7sB4L9viVPUeu4uEgLnAk
Juov1/rrco813Cu6rGZrWCBGJxiV+bgrnd4QGHs/aKRJxb/U3hd08i012+6v+dFv
1awDlP8ro7RKTosa/pX+Eds194xwfGj3HHFB30vJOflr6Y5xKBRROoksbLWDXucV
ztgxi4vk4qCNK/TpCz8ZqbySM69UmOb8Ns1Xu0/jPyYOSomUDx3AbgAerp/8sTFr
Z8niOnAqAHpO4hMCuDyPRvQE+BkBVmKkEuG+FO04rtBQmpFv9FTxYihOvQQaKFIm
d3DWLaEMHWag558UuZYUp9pgin6foA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:28:21 2023 by rpki-client on console-ams.rpki-client.org