Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9a6d3fb-60b4-3ec7-8737-0025b1aa337a.roa
File: a9a6d3fb-60b4-3ec7-8737-0025b1aa337a.roa (raw, json)
Hash identifier: 4t1xrTuc8DAseqEf7h9mqADwfClbWvCfh95Yr8JL3w4=
Subject key identifier: 50:CC:46:24:38:BE:01:81:44:E9:42:71:86:F6:8B:FE:41:80:52:06
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D6480C13D4F3D5A3927877D60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9a6d3fb-60b4-3ec7-8737-0025b1aa337a.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 03 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:64:80:c1:3d:4f:3d:5a:39:27:87:7d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : May 3 04:00:00 2022 GMT
Subject: CN=6710d407-b17c-4884-be0b-518653c8e0b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3e:51:95:7d:af:34:fb:5e:04:00:11:2c:ec:
0d:9a:8f:d3:8e:40:92:26:a9:75:5a:6f:1f:40:19:
1d:20:5b:78:3b:39:77:3e:f3:19:db:01:42:ba:49:
1e:62:b1:ee:cd:3f:a1:4d:b3:d3:23:9d:12:da:61:
60:39:2b:38:53:65:8c:75:56:d2:a3:a7:f5:b1:6a:
86:bf:a6:0a:0b:e8:54:03:d7:21:b9:19:db:d6:0c:
b4:89:ee:cc:56:01:89:18:15:20:4e:bf:57:cc:3a:
b7:39:28:13:d4:d1:f9:6a:f0:e8:b6:4d:60:fc:ac:
0d:99:d2:54:a4:6b:c1:79:57:a6:e7:61:52:68:ee:
fb:0a:a5:c4:d1:f8:e7:b4:2c:48:d9:e6:ea:0d:63:
2d:4c:cd:a3:7c:e4:4e:c5:a0:01:bd:24:eb:f7:61:
a3:5e:12:65:a1:f7:b4:e8:7d:65:03:11:50:35:02:
4d:b1:58:20:45:6f:23:3d:2e:89:06:20:f2:f4:a2:
f0:67:bc:37:6a:20:3c:57:a1:5b:11:b5:5f:96:4d:
4a:77:5f:47:b2:14:b3:48:4b:86:65:2e:24:55:77:
f2:90:9d:67:f7:8f:19:57:52:96:92:01:aa:57:cb:
82:03:df:54:25:88:24:f9:0a:8b:ec:e7:08:ab:1b:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CC:46:24:38:BE:01:81:44:E9:42:71:86:F6:8B:FE:41:80:52:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a9a6d3fb-60b4-3ec7-8737-0025b1aa337a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:b9:66:a0:84:3d:3f:1d:55:64:49:d6:bc:92:f7:3c:e0:2b:
31:11:45:1c:de:c1:e2:9c:d5:40:5c:78:45:c7:0d:13:78:0a:
25:6c:f0:2e:bb:89:ac:87:d6:b3:c3:2d:e3:6f:8d:55:9f:d7:
9e:41:3b:1d:2b:35:30:d0:0f:cf:53:9a:23:df:64:6d:59:fc:
d7:3e:64:00:b2:3e:2c:f3:21:e5:20:3a:41:0d:e3:33:83:43:
fb:0b:98:6d:ef:64:64:69:55:6c:dc:2c:0b:36:e4:e2:34:ee:
dc:0a:f3:04:c8:85:c6:3a:7e:9d:4d:81:c9:46:ec:de:d7:52:
aa:31:7d:a3:18:27:95:13:66:31:7e:17:82:90:4c:25:35:97:
48:06:1e:4e:fd:eb:4a:4f:fc:5e:12:b9:4e:e0:c6:a7:7a:95:
82:d0:f1:df:5a:59:2c:8d:12:d6:f1:6c:f1:ed:f5:3d:5d:90:
21:07:09:1c:08:e9:a7:47:34:8a:30:ae:50:46:db:10:b0:a2:
4b:29:98:48:24:99:e0:9f:5a:7b:c1:62:f1:ab:47:cd:5f:e2:
64:68:f7:94:c9:63:f4:39:f2:6e:be:94:e4:35:e2:b5:15:9c:
cb:bc:ae:83:1b:74:1b:0d:04:61:e4:8b:79:c9:16:16:4d:f5:
91:9d:ca:0b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1kgME9Tz1aOSeHfWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyOTA0MDAwMFoXDTIyMDUwMzA0MDAwMFowLzEtMCsGA1UEAxMk
NjcxMGQ0MDctYjE3Yy00ODg0LWJlMGItNTE4NjUzYzhlMGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D5RlX2vNPteBAARLOwNmo/TjkCSJql1Wm8f
QBkdIFt4Ozl3PvMZ2wFCukkeYrHuzT+hTbPTI50S2mFgOSs4U2WMdVbSo6f1sWqG
v6YKC+hUA9chuRnb1gy0ie7MVgGJGBUgTr9XzDq3OSgT1NH5avDotk1g/KwNmdJU
pGvBeVem52FSaO77CqXE0fjntCxI2ebqDWMtTM2jfOROxaABvSTr92GjXhJlofe0
6H1lAxFQNQJNsVggRW8jPS6JBiDy9KLwZ7w3aiA8V6FbEbVflk1Kd19HshSzSEuG
ZS4kVXfykJ1n948ZV1KWkgGqV8uCA99UJYgk+QqL7OcIqxvvNwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFDMRiQ4vgGBROlCcYb2i/5BgFIGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYTlhNmQzZmItNjBiNC0z
ZWM3LTg3MzctMDAyNWIxYWEzMzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAArlmoIQ9Px1VZEnWvJL3POArMRFFHN7B4pzVQFx4RccNE3gKJWzwLruJ
rIfWs8Mt42+NVZ/XnkE7HSs1MNAPz1OaI99kbVn81z5kALI+LPMh5SA6QQ3jM4ND
+wuYbe9kZGlVbNwsCzbk4jTu3ArzBMiFxjp+nU2ByUbs3tdSqjF9oxgnlRNmMX4X
gpBMJTWXSAYeTv3rSk/8XhK5TuDGp3qVgtDx31pZLI0S1vFs8e31PV2QIQcJHAjp
p0c0ijCuUEbbELCiSymYSCSZ4J9ae8Fi8atHzV/iZGj3lMlj9Dnybr6U5DXitRWc
y7yugxt0Gw0EYeSLeckWFk31kZ3KCw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:06 2025 by rpki-client