Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99c78c9a-5a13-3221-8a89-898f2c040d97.roa
File: 99c78c9a-5a13-3221-8a89-898f2c040d97.roa (raw, json)
Hash identifier: men3/fzQu6yatRLsKNq4lhZnQG4/nNoXS9PWfknMVRM=
Subject key identifier: A0:86:EB:9A:13:5A:B5:C9:A3:2C:AD:2D:8C:51:C9:EE:63:35:FA:BE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD63A27F20861A1198A101A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99c78c9a-5a13-3221-8a89-898f2c040d97.roa
Signing time: Mon 07 Nov 2022 22:33:08 +0000
ROA not before: Mon 07 Nov 2022 22:33:08 +0000
ROA not after: Tue 13 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d6:3a:27:f2:08:61:a1:19:8a:10:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 7 22:33:08 2022 GMT
Not After : Dec 13 05:00:00 2022 GMT
Subject: CN=e20e3d6f-ed4a-45f0-a5e3-1e9efa3acd12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:09:5e:7b:22:17:c2:11:e1:02:cd:54:8f:a9:
43:ef:94:70:1b:99:da:42:99:43:87:c8:c5:8b:4c:
b4:98:d2:c1:eb:9f:a2:b2:e0:11:86:09:03:a9:65:
ee:99:d4:d1:f5:f5:9c:7a:41:c7:62:4b:bf:67:b9:
e0:3a:71:e5:1c:3d:ea:da:0a:0c:f9:54:c4:37:d1:
74:1c:2c:40:bb:66:82:96:20:8c:d0:7a:77:52:4e:
70:48:44:45:0d:6e:6b:6b:b3:d0:f8:b6:60:66:b6:
a4:6a:a9:36:7f:05:c2:d7:4f:61:13:a1:cc:a7:c6:
33:1c:17:21:b0:d3:c6:7d:42:35:2a:ba:90:c0:bc:
ab:95:54:49:d1:f6:15:ab:29:d8:89:ac:3c:07:93:
ad:51:ef:cf:fc:85:92:95:26:34:ae:3e:b0:c6:af:
4e:80:d0:82:24:6f:1c:fc:1a:fc:36:2a:ed:93:d0:
e5:28:ee:86:56:bb:d0:24:5a:ed:e4:e5:ec:e6:e6:
4f:f9:a2:ec:90:48:33:80:39:51:9a:7d:ea:ae:ab:
ab:92:91:90:74:17:52:61:09:33:f8:3e:a6:97:2e:
4f:cf:5b:15:7f:6e:2e:d3:00:0d:63:45:56:24:a3:
8b:65:db:f7:b7:04:72:1b:51:dd:0e:c9:f3:49:75:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:86:EB:9A:13:5A:B5:C9:A3:2C:AD:2D:8C:51:C9:EE:63:35:FA:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99c78c9a-5a13-3221-8a89-898f2c040d97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:5d:e3:78:6a:19:85:71:24:3f:18:da:c0:26:13:1e:33:9c:
99:fc:53:c6:f3:05:bd:2f:64:ca:88:fd:4c:66:7c:3e:ab:e6:
e7:82:99:b3:62:b8:a9:b9:45:f7:1e:be:08:d1:5b:78:47:0f:
a4:b3:0b:3d:2e:1e:3f:68:d8:01:a0:39:b5:c6:3a:e8:8f:74:
d5:d1:69:cc:76:93:fa:f7:68:b6:a7:f3:9c:35:fb:eb:20:e8:
4f:c3:13:59:d0:c1:ee:46:2c:3a:69:24:b3:0e:fb:e1:a9:99:
d3:a9:cb:2e:5e:d6:36:45:9a:f3:1a:e7:77:df:a8:2e:18:30:
42:7e:dd:87:94:2f:c1:29:ea:e2:0c:09:a2:18:7f:10:bb:46:
e9:d8:76:35:a8:c2:cf:4a:6f:b2:b8:2a:fa:a1:f6:e2:f2:80:
bc:96:03:79:3d:92:e8:68:93:56:ec:5a:9b:fd:c4:59:0e:2a:
8c:9b:54:a0:35:30:78:bb:ce:66:87:2b:04:f9:ca:5f:92:f3:
03:68:25:fe:e8:f6:6d:34:a9:cd:34:bc:13:ba:12:32:91:8b:
46:5d:73:de:51:af:80:09:b4:3d:4d:32:f9:e2:69:f6:f9:3d:
ee:42:b8:4e:3c:5e:bb:d2:65:ca:8d:64:3e:51:b7:29:c0:af:
29:09:b1:3e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/WOifyCGGhGYoQGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwNzIyMzMwOFoXDTIyMTIxMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZTIwZTNkNmYtZWQ0YS00NWYwLWE1ZTMtMWU5ZWZhM2FjZDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAleeyIXwhHhAs1Uj6lD75RwG5naQplDh8jF
i0y0mNLB65+isuARhgkDqWXumdTR9fWcekHHYku/Z7ngOnHlHD3q2goM+VTEN9F0
HCxAu2aCliCM0Hp3Uk5wSERFDW5ra7PQ+LZgZrakaqk2fwXC109hE6HMp8YzHBch
sNPGfUI1KrqQwLyrlVRJ0fYVqynYiaw8B5OtUe/P/IWSlSY0rj6wxq9OgNCCJG8c
/Br8Nirtk9DlKO6GVrvQJFrt5OXs5uZP+aLskEgzgDlRmn3qrqurkpGQdBdSYQkz
+D6mly5Pz1sVf24u0wANY0VWJKOLZdv3twRyG1HdDsnzSXWzbQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKCG65oTWrXJoyytLYxRye5jNfq+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTljNzhjOWEtNWExMy0z
MjIxLThhODktODk4ZjJjMDQwZDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMV3jeGoZhXEkPxjawCYTHjOcmfxTxvMFvS9kyoj9TGZ8Pqvm54KZs2K4
qblF9x6+CNFbeEcPpLMLPS4eP2jYAaA5tcY66I901dFpzHaT+vdotqfznDX76yDo
T8MTWdDB7kYsOmkksw774amZ06nLLl7WNkWa8xrnd9+oLhgwQn7dh5QvwSnq4gwJ
ohh/ELtG6dh2NajCz0pvsrgq+qH24vKAvJYDeT2S6GiTVuxam/3EWQ4qjJtUoDUw
eLvOZocrBPnKX5LzA2gl/uj2bTSpzTS8E7oSMpGLRl1z3lGvgAm0PU0y+eJp9vk9
7kK4Tjxeu9Jlyo1kPlG3KcCvKQmxPg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:11:06 2025 by rpki-client