Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8df2587-0244-347b-a137-f9b9f4f72fda.roa
File: a8df2587-0244-347b-a137-f9b9f4f72fda.roa (raw, json)
Hash identifier: +rRFdj564S8s3kc843GmPf1vSjqmchZPyHVJjA2Uijw=
Subject key identifier: 3C:65:D0:00:83:BE:F2:B8:FD:28:B0:4B:94:D5:7A:8F:4E:1D:7A:52
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409ADEBACCCC9AA7F57261C180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8df2587-0244-347b-a137-f9b9f4f72fda.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.117.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9a:de:ba:cc:cc:9a:a7:f5:72:61:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=1b333147-c21a-41f6-a536-4bc91ecdca7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:92:40:d3:51:af:ef:00:46:04:e3:e3:2d:d5:
04:7f:8b:08:6d:66:9a:cd:05:cb:10:c0:ca:f5:e1:
94:e8:3b:b5:36:54:51:53:e3:aa:d9:0d:fa:c9:f7:
47:7c:67:00:38:f4:b8:80:53:a4:1f:53:d5:21:3a:
71:89:99:85:e6:10:9d:7e:a0:28:f4:8c:17:30:15:
45:3c:7f:b5:76:12:1a:f8:c4:28:fd:55:87:b5:2d:
f0:3c:a2:73:0f:78:e7:7f:16:6b:32:4e:bb:2a:1b:
d6:07:05:4e:05:6f:4a:02:82:52:84:74:e6:a5:23:
e3:96:03:f2:29:30:cd:2a:e2:33:11:83:76:47:f8:
e0:59:38:76:d3:8b:39:07:48:88:c1:b8:89:c7:19:
0c:55:3f:c5:a8:5f:20:1d:b7:02:ab:0b:f0:19:5f:
38:a4:05:b2:8b:e6:91:1b:9f:62:c0:24:90:92:f9:
d9:23:e3:13:fe:f0:a4:99:ea:66:2c:8b:3f:e3:c0:
00:31:06:1c:6c:f7:47:b5:3f:56:51:e7:ab:e9:19:
a9:02:f9:6e:13:70:98:3e:49:1d:be:7d:0b:fd:c5:
e5:47:be:0e:e8:4b:a6:4b:ff:c0:6a:53:5f:01:b1:
2b:dc:fe:7c:41:b8:b0:a6:aa:99:0d:14:c0:f3:53:
06:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:65:D0:00:83:BE:F2:B8:FD:28:B0:4B:94:D5:7A:8F:4E:1D:7A:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a8df2587-0244-347b-a137-f9b9f4f72fda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.117.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:8c:ef:11:c5:6b:a6:e1:11:66:23:34:2c:df:7b:04:10:83:
41:b9:84:23:21:d5:3c:ec:61:ce:fc:e4:d9:a6:d5:e1:61:a0:
d4:95:0c:09:9f:4d:6b:61:b7:f7:b4:6a:44:c4:38:2b:9c:bc:
9b:ca:81:bb:6c:05:1a:93:31:df:76:e1:d7:38:d1:b1:9f:b4:
a5:e5:d0:22:9e:e7:d9:ab:46:26:94:1a:76:af:62:ea:bf:bc:
51:be:5b:22:81:cd:f6:93:7c:84:13:9c:41:45:43:f7:51:f8:
7d:d8:80:d0:f5:7d:38:15:d8:74:fc:8f:cf:64:ce:76:97:01:
e8:91:cf:4e:78:6f:cd:f3:21:94:53:62:cf:84:92:ea:62:67:
3c:97:0b:52:c2:b0:aa:15:0c:29:9b:1e:85:63:73:70:ce:de:
10:45:f8:48:ed:e8:ef:1d:fc:0b:10:82:87:19:18:03:e0:ac:
ec:38:07:27:c1:25:4e:28:72:40:13:14:c0:ec:58:e5:db:ff:
51:58:6a:c8:2c:62:bf:f8:f4:c2:f4:8d:05:4e:90:0b:84:56:
9e:07:6e:68:29:5b:fc:2d:7f:eb:d3:f8:de:cf:8d:16:64:85:
9f:99:f1:2e:21:a9:aa:84:ec:5d:c2:e6:29:8b:01:3d:d4:31:
39:78:75:d9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECa3rrMzJqn9XJhwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExNjEyMDAwMFoXDTIzMDIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
MWIzMzMxNDctYzIxYS00MWY2LWE1MzYtNGJjOTFlY2RjYTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpJA01Gv7wBGBOPjLdUEf4sIbWaazQXLEMDK
9eGU6Du1NlRRU+Oq2Q36yfdHfGcAOPS4gFOkH1PVITpxiZmF5hCdfqAo9IwXMBVF
PH+1dhIa+MQo/VWHtS3wPKJzD3jnfxZrMk67KhvWBwVOBW9KAoJShHTmpSPjlgPy
KTDNKuIzEYN2R/jgWTh204s5B0iIwbiJxxkMVT/FqF8gHbcCqwvwGV84pAWyi+aR
G59iwCSQkvnZI+MT/vCkmepmLIs/48AAMQYcbPdHtT9WUeer6RmpAvluE3CYPkkd
vn0L/cXlR74O6EumS//AalNfAbEr3P58QbiwpqqZDRTA81MGRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDxl0ACDvvK4/SiwS5TVeo9OHXpSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYThkZjI1ODctMDI0NC0z
NDdiLWExMzctZjliOWY0ZjcyZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYozvEcVrpuERZiM0LN97BBCDQbmEIyHVPOxhzvzk2abV4WGg1JUMCZ9N
a2G397RqRMQ4K5y8m8qBu2wFGpMx33bh1zjRsZ+0peXQIp7n2atGJpQadq9i6r+8
Ub5bIoHN9pN8hBOcQUVD91H4fdiA0PV9OBXYdPyPz2TOdpcB6JHPTnhvzfMhlFNi
z4SS6mJnPJcLUsKwqhUMKZsehWNzcM7eEEX4SO3o7x38CxCChxkYA+Cs7DgHJ8El
TihyQBMUwOxY5dv/UVhqyCxiv/j0wvSNBU6QC4RWngduaClb/C1/69P43s+NFmSF
n5nxLiGpqoTsXcLmKYsBPdQxOXh12Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:26:58 2023 by rpki-client on console-fra.rpki-client.org