Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99e5f8bc-a8dd-34c8-af19-b5fa42fcfbc1.roa
File: 99e5f8bc-a8dd-34c8-af19-b5fa42fcfbc1.roa (raw, json)
Hash identifier: UdRJGkz2uY6o/ICQmCbv+FvqcrRyZ7VcChuWeEvbRXU=
Subject key identifier: 09:30:C5:81:FA:E2:1E:A0:38:A7:6E:FE:4B:AF:47:61:0C:37:47:70
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E8F287B6FC6E725962A9B7F18
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99e5f8bc-a8dd-34c8-af19-b5fa42fcfbc1.roa
Signing time: Wed 13 Jul 2022 12:00:00 +0000
ROA not before: Wed 13 Jul 2022 12:00:00 +0000
ROA not after: Thu 18 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:8f:28:7b:6f:c6:e7:25:96:2a:9b:7f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 13 12:00:00 2022 GMT
Not After : Aug 18 04:00:00 2022 GMT
Subject: CN=d4661184-42ff-45b4-94d3-e5fb8bb8672d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:8f:2d:92:8f:fc:8c:d0:6c:7c:08:68:9e:
1e:7c:4a:62:7e:bf:fb:39:88:db:39:1d:b7:9b:f9:
dd:d9:dd:c8:a2:13:d9:04:38:81:f0:b4:c6:a4:9f:
03:e3:8c:1b:5d:6f:99:d3:5e:ef:85:e4:a8:4e:a5:
ec:2e:a9:58:a5:83:53:d4:46:33:8d:cc:31:87:2a:
43:b5:e4:e2:10:bc:9a:c6:21:58:77:a2:63:c6:1f:
40:f9:fd:a3:bb:c7:49:e0:2c:21:39:b0:71:a4:4c:
49:7f:90:94:ac:63:17:ae:1e:af:ec:45:02:de:57:
9b:85:ee:a8:b3:8b:40:6c:ce:d8:93:ae:29:42:ff:
70:c3:49:e7:25:cd:3d:8f:ef:c7:71:e4:9d:74:e3:
a5:2b:7e:ed:68:f8:95:d1:22:39:df:00:fa:51:b3:
91:53:c4:eb:0a:1f:76:0e:b4:34:4c:ed:ed:cc:c2:
96:65:78:c2:27:22:25:bc:55:65:ce:6d:1e:4d:fc:
bf:49:76:46:11:e2:d2:59:fd:b6:c5:74:69:04:c9:
7a:f8:3a:33:74:c4:d7:d3:1f:34:5e:51:49:3f:98:
79:0c:c4:9e:78:13:3b:a7:86:86:2b:88:b9:fb:13:
cf:52:c2:ce:c0:7c:40:0e:e7:03:18:aa:f0:12:5f:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:30:C5:81:FA:E2:1E:A0:38:A7:6E:FE:4B:AF:47:61:0C:37:47:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/99e5f8bc-a8dd-34c8-af19-b5fa42fcfbc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:1e:cd:e9:b0:f6:be:92:6d:39:05:57:05:36:b9:57:6f:63:
8d:aa:d5:fd:8a:0b:ec:f0:97:04:72:54:1a:d2:be:47:57:d5:
f4:81:68:57:db:37:e0:7b:3f:98:22:2d:f3:1b:51:1d:f7:57:
6a:98:2f:24:00:8d:44:ae:82:06:c2:12:49:4a:bc:67:b8:5b:
9b:01:bf:3f:cf:41:2d:d2:ab:1d:7e:73:1b:f0:14:e7:f2:cb:
48:10:3e:cd:7b:fa:7b:ea:73:91:15:ff:3b:48:c6:50:00:3e:
1b:ec:c6:ec:b9:55:67:fc:dc:5f:53:87:c7:b7:2a:e4:84:7a:
af:5d:08:01:8f:16:51:8a:7c:ec:66:dd:9b:aa:22:be:3e:a6:
98:9a:65:9e:1c:19:31:5b:05:23:78:cc:2c:3f:ed:fb:78:1e:
57:c2:0b:74:ac:32:0b:ac:72:6b:d0:c7:29:e1:53:e9:10:54:
36:0b:d3:c4:4c:9f:54:50:cf:c5:a4:f3:7a:70:21:4f:cb:06:
14:9f:92:d9:b2:b8:43:53:5c:a1:ef:a7:48:d1:4c:25:23:b0:
76:eb:67:f5:28:66:a1:10:b4:4d:05:19:04:ca:e4:86:db:e1:
30:5c:6b:ca:e5:18:bf:14:c0:2b:a2:59:e9:dd:bb:b8:8a:f7:
46:1a:7f:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6PKHtvxuclliqbfxgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxMzEyMDAwMFoXDTIyMDgxODA0MDAwMFowLzEtMCsGA1UEAxMk
ZDQ2NjExODQtNDJmZi00NWI0LTk0ZDMtZTVmYjhiYjg2NzJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDKPLZKP/IzQbHwIaJ4efEpifr/7OYjbOR23
m/nd2d3IohPZBDiB8LTGpJ8D44wbXW+Z017vheSoTqXsLqlYpYNT1EYzjcwxhypD
teTiELyaxiFYd6Jjxh9A+f2ju8dJ4CwhObBxpExJf5CUrGMXrh6v7EUC3lebhe6o
s4tAbM7Yk64pQv9ww0nnJc09j+/HceSddOOlK37taPiV0SI53wD6UbORU8TrCh92
DrQ0TO3tzMKWZXjCJyIlvFVlzm0eTfy/SXZGEeLSWf22xXRpBMl6+DozdMTX0x80
XlFJP5h5DMSeeBM7p4aGK4i5+xPPUsLOwHxADucDGKrwEl9NcQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAkwxYH64h6gOKdu/kuvR2EMN0dwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOTllNWY4YmMtYThkZC0z
NGM4LWFmMTktYjVmYTQyZmNmYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEF8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAch7N6bD2vpJtOQVXBTa5V29jjarV/YoL7PCXBHJUGtK+R1fV9IFoV9s3
4Hs/mCIt8xtRHfdXapgvJACNRK6CBsISSUq8Z7hbmwG/P89BLdKrHX5zG/AU5/LL
SBA+zXv6e+pzkRX/O0jGUAA+G+zG7LlVZ/zcX1OHx7cq5IR6r10IAY8WUYp87Gbd
m6oivj6mmJplnhwZMVsFI3jMLD/t+3geV8ILdKwyC6xya9DHKeFT6RBUNgvTxEyf
VFDPxaTzenAhT8sGFJ+S2bK4Q1Ncoe+nSNFMJSOwdutn9ShmoRC0TQUZBMrkhtvh
MFxryuUYvxTAK6JZ6d27uIr3Rhp/XA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:40 2025 by rpki-client