Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3b65ead-9f01-3c4f-871c-fef1aeb4bf63.roa
File: a3b65ead-9f01-3c4f-871c-fef1aeb4bf63.roa (raw, json)
Hash identifier: fAjM+hP4yBgZcNnPa0SYknpPOvPCWl12WQzU1aoUnww=
Subject key identifier: 47:A0:DC:73:7F:49:26:AB:A2:DF:77:19:42:7C:74:BA:C8:33:1A:94
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840787F8DA6FD47EB7694136790
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3b65ead-9f01-3c4f-871c-fef1aeb4bf63.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:7f:8d:a6:fd:47:eb:76:94:13:67:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=9963b688-7fe9-450c-b983-7882915723c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:7e:9f:bb:dc:75:69:f4:a2:18:d9:bd:3b:
93:e0:e7:d1:c6:d5:e4:86:98:60:47:f9:d6:25:4b:
f5:25:99:f0:d6:ba:e8:39:87:37:c2:d3:c3:59:86:
d9:d8:bd:8a:19:cf:e2:4d:9f:da:4e:9f:56:97:3d:
cb:5c:ed:2b:c3:a2:c8:45:31:53:0f:18:73:60:07:
68:1f:7a:98:c7:71:db:65:87:70:4f:b8:5f:58:98:
40:fb:05:98:68:e4:44:dc:fa:99:92:c6:ed:d3:f2:
00:31:65:1d:7a:b1:00:9a:f1:b1:a7:19:ed:17:93:
34:83:68:21:ca:e6:a6:51:7c:4e:50:5f:32:a7:e8:
43:9b:58:b7:51:43:ad:d7:9f:c3:d8:58:7f:cb:42:
4f:6e:fd:a1:13:78:ab:ad:40:d0:5e:11:2b:23:de:
ae:f3:21:e7:d1:e8:86:59:98:54:db:76:00:4c:ac:
4b:23:4f:5f:d5:cb:71:3c:c8:93:74:89:1a:c5:73:
37:a4:80:fe:28:17:35:51:d9:62:d5:cb:0b:06:ab:
66:d1:d6:55:9e:51:1e:48:29:38:61:21:34:21:29:
bd:a2:b5:c1:e6:20:7d:80:92:87:f6:ed:24:33:6b:
65:dd:8d:5b:d3:f5:3d:71:15:d7:92:5e:40:c5:01:
0d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A0:DC:73:7F:49:26:AB:A2:DF:77:19:42:7C:74:BA:C8:33:1A:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a3b65ead-9f01-3c4f-871c-fef1aeb4bf63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:8a:22:2a:7d:89:74:3f:ae:41:5b:53:2c:07:ef:03:fc:d0:
b8:72:01:6d:73:5e:42:dc:80:2c:73:b2:3e:b0:34:83:d1:1c:
68:d9:93:76:8f:e5:d2:8c:21:94:df:63:c1:72:a7:68:01:48:
35:ed:6e:06:2d:a4:a5:63:89:e6:d6:80:6e:cf:66:e6:ce:57:
d3:29:1a:1a:f1:5f:f4:3c:88:29:3b:6f:de:e3:76:a7:74:e9:
8e:92:fb:a7:99:9a:22:37:e3:d9:5b:36:40:c8:1d:7f:7a:83:
db:36:7e:52:fb:5f:45:2b:da:79:ae:81:dc:0a:0e:fa:fe:3d:
09:b5:fc:a5:44:86:44:13:35:46:8d:7a:a4:8e:a9:64:d8:c2:
ce:4e:ad:cf:95:eb:33:ae:4c:dc:d7:c9:a1:a1:13:ac:74:bd:
4b:92:d6:46:0f:20:ba:51:ed:1f:a2:be:33:26:4a:77:9f:6b:
4f:38:5d:b7:1e:7b:3a:b1:e7:20:03:64:af:6e:c7:f2:57:63:
8e:82:13:00:f1:36:3d:d2:53:44:41:8c:80:13:ea:e8:12:fa:
af:60:87:dc:4d:6c:cc:19:97:b7:a2:54:9d:2d:b1:14:52:14:
27:3f:47:8a:f1:00:fe:25:e8:d7:5f:37:e0:a1:a4:d6:c5:24:
33:16:da:05
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB4f42m/UfrdpQTZ5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEwNDEyMDAwMFoXDTIzMDIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
OTk2M2I2ODgtN2ZlOS00NTBjLWI5ODMtNzg4MjkxNTcyM2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo9+n7vcdWn0ohjZvTuT4OfRxtXkhphgR/nW
JUv1JZnw1rroOYc3wtPDWYbZ2L2KGc/iTZ/aTp9Wlz3LXO0rw6LIRTFTDxhzYAdo
H3qYx3HbZYdwT7hfWJhA+wWYaORE3PqZksbt0/IAMWUderEAmvGxpxntF5M0g2gh
yuamUXxOUF8yp+hDm1i3UUOt15/D2Fh/y0JPbv2hE3irrUDQXhErI96u8yHn0eiG
WZhU23YATKxLI09f1ctxPMiTdIkaxXM3pID+KBc1Udli1csLBqtm0dZVnlEeSCk4
YSE0ISm9orXB5iB9gJKH9u0kM2tl3Y1b0/U9cRXXkl5AxQENRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEeg3HN/SSarot93GUJ8dLrIMxqUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTNiNjVlYWQtOWYwMS0z
YzRmLTg3MWMtZmVmMWFlYjRiZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQYoiKn2JdD+uQVtTLAfvA/zQuHIBbXNeQtyALHOyPrA0g9EcaNmTdo/l
0owhlN9jwXKnaAFINe1uBi2kpWOJ5taAbs9m5s5X0ykaGvFf9DyIKTtv3uN2p3Tp
jpL7p5maIjfj2Vs2QMgdf3qD2zZ+UvtfRSvaea6B3AoO+v49CbX8pUSGRBM1Ro16
pI6pZNjCzk6tz5XrM65M3NfJoaETrHS9S5LWRg8gulHtH6K+MyZKd59rTzhdtx57
OrHnIANkr27H8ldjjoITAPE2PdJTREGMgBPq6BL6r2CH3E1szBmXt6JUnS2xFFIU
Jz9HivEA/iXo11834KGk1sUkMxbaBQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:05:02 2025 by rpki-client