Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e88ca35-ff58-3710-ac73-d09005e33fad.roa
File: 9e88ca35-ff58-3710-ac73-d09005e33fad.roa (raw, json)
Hash identifier: 9T2HAUMf+uTvd6sfLx0P82C1cOSgZB33GOpqDtz+V1g=
Subject key identifier: B2:68:F3:E9:91:EC:52:AC:9B:BF:45:1D:E6:C9:C6:77:E1:3B:2F:FE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F3ECE0D2B43C3E500A91BFB00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e88ca35-ff58-3710-ac73-d09005e33fad.roa
Signing time: Wed 14 Sep 2022 12:00:00 +0000
ROA not before: Wed 14 Sep 2022 12:00:00 +0000
ROA not after: Thu 20 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.118.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3e:ce:0d:2b:43:c3:e5:00:a9:1b:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 14 12:00:00 2022 GMT
Not After : Oct 20 04:00:00 2022 GMT
Subject: CN=36441152-517a-4fb0-b684-54678b51ebb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9f:18:a9:cf:73:09:ac:7f:f8:bd:78:91:28:
41:f9:f1:ef:17:a6:4d:a3:82:92:b0:a8:c3:b3:cb:
e3:49:ac:25:82:db:ff:34:55:99:4d:47:01:6c:f0:
f3:d1:e5:b0:3e:ac:c1:13:14:f9:1d:2e:ef:09:c0:
cf:0a:33:59:56:e6:bd:c7:53:8c:60:e3:69:81:69:
5e:43:8e:05:e9:ce:47:11:5b:a2:74:b8:c6:8d:98:
64:01:07:16:81:7d:f9:30:44:c9:b4:d0:db:62:5c:
e5:ee:11:4a:46:79:3b:52:ae:95:32:23:df:a7:06:
9d:dc:e4:7f:35:35:18:e3:b5:cf:80:26:06:ab:66:
4b:59:b2:cb:04:b4:a0:87:ac:30:e5:59:71:c6:8b:
6d:cf:21:78:b4:58:61:19:ea:55:b8:90:11:e4:b7:
b2:27:ba:6e:8a:fb:0f:be:4d:87:4f:ef:08:81:62:
f3:f6:99:5e:b7:ee:23:61:0b:ed:86:e0:99:29:95:
74:1c:51:98:e9:22:c8:08:94:88:70:85:af:d7:13:
32:b1:2a:60:59:a9:f5:06:fe:bd:46:35:93:a7:59:
4f:d0:25:37:19:c1:a1:23:3d:3a:74:f2:79:26:b2:
0e:fb:2b:fc:e1:72:83:2e:70:58:2a:bd:63:29:0a:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:68:F3:E9:91:EC:52:AC:9B:BF:45:1D:E6:C9:C6:77:E1:3B:2F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9e88ca35-ff58-3710-ac73-d09005e33fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.118.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:95:f8:f8:40:9d:f6:ac:e2:a6:fa:e7:de:6d:11:73:fa:c9:
65:7b:0a:ba:f2:f6:55:72:cd:00:0d:40:d6:2c:6c:04:b6:6b:
50:21:94:1a:8c:f0:09:28:f4:d7:60:37:3e:69:64:17:d8:e3:
a9:87:87:1c:3d:f5:27:84:ed:b2:98:b9:7c:36:8e:45:0c:66:
96:a2:07:ee:26:8c:f0:29:e6:8f:71:b8:bc:dc:b7:03:ec:bf:
88:cd:64:e3:b9:bf:33:b3:c4:43:05:90:86:18:1c:8e:21:ff:
f9:d9:e7:41:78:04:0d:8f:3b:ac:59:a1:ad:07:ec:f2:3f:4c:
ad:c2:6f:e4:c1:ab:64:1c:de:b3:00:18:83:80:51:d1:07:02:
44:67:b7:0b:4b:52:48:ee:8c:de:94:24:cb:8e:93:f3:41:88:
2f:4e:3f:1e:a2:59:0e:bc:ae:08:e0:14:7c:24:b7:85:52:73:
d5:3a:69:e0:3d:cc:c3:09:1f:b6:82:03:9c:29:39:00:03:5f:
04:84:30:6f:2f:22:f2:52:69:f6:c4:05:8e:ea:56:26:65:c2:
04:1e:bd:19:6d:82:71:2d:c6:29:c2:da:04:bb:31:af:f6:0d:
25:7c:4d:e3:e8:9e:48:cf:96:20:30:29:03:d4:57:04:84:ef:
cb:ee:98:ea
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8+zg0rQ8PlAKkb+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkxNDEyMDAwMFoXDTIyMTAyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MzY0NDExNTItNTE3YS00ZmIwLWI2ODQtNTQ2NzhiNTFlYmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp8Yqc9zCax/+L14kShB+fHvF6ZNo4KSsKjD
s8vjSawlgtv/NFWZTUcBbPDz0eWwPqzBExT5HS7vCcDPCjNZVua9x1OMYONpgWle
Q44F6c5HEVuidLjGjZhkAQcWgX35METJtNDbYlzl7hFKRnk7Uq6VMiPfpwad3OR/
NTUY47XPgCYGq2ZLWbLLBLSgh6ww5VlxxottzyF4tFhhGepVuJAR5LeyJ7puivsP
vk2HT+8IgWLz9plet+4jYQvthuCZKZV0HFGY6SLICJSIcIWv1xMysSpgWan1Bv69
RjWTp1lP0CU3GcGhIz06dPJ5JrIO+yv84XKDLnBYKr1jKQortQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLJo8+mR7FKsm79FHebJxnfhOy/+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvOWU4OGNhMzUtZmY1OC0z
NzEwLWFjNzMtZDA5MDA1ZTMzZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADZX4+ECd9qzipvrn3m0Rc/rJZXsKuvL2VXLNAA1A1ixsBLZrUCGUGozw
CSj012A3PmlkF9jjqYeHHD31J4Ttspi5fDaORQxmlqIH7iaM8Cnmj3G4vNy3A+y/
iM1k47m/M7PEQwWQhhgcjiH/+dnnQXgEDY87rFmhrQfs8j9MrcJv5MGrZBzeswAY
g4BR0QcCRGe3C0tSSO6M3pQky46T80GIL04/HqJZDryuCOAUfCS3hVJz1Tpp4D3M
wwkftoIDnCk5AANfBIQwby8i8lJp9sQFjupWJmXCBB69GW2CcS3GKcLaBLsxr/YN
JXxN4+ieSM+WIDApA9RXBITvy+6Y6g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:18 2025 by rpki-client