Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa107cda-6045-3e3e-876d-b45d5b097efe.roa
File: aa107cda-6045-3e3e-876d-b45d5b097efe.roa (raw, json)
Hash identifier: PQWPfCWf51xopb66Lafc6sO3Otmj3ngZ3gGyz8ucCnU=
Subject key identifier: 9F:7E:C5:DF:BD:F4:1B:B5:AA:88:B0:60:95:EF:3A:D4:BE:45:B3:59
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403EB709BADF5E167EA9744B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa107cda-6045-3e3e-876d-b45d5b097efe.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:b7:09:ba:df:5e:16:7e:a9:74:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=9afd1e7b-9446-42cd-9700-bc1dc76d3d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:53:c5:cb:2c:23:06:b1:1e:63:c3:c0:65:b5:
93:6a:26:22:6c:22:a4:05:18:c9:2a:ee:0f:05:ed:
e2:6c:dd:87:2f:6c:02:1b:c1:c7:21:51:a4:e3:74:
f4:1e:bf:55:af:83:24:db:1d:7c:75:58:b9:f8:a8:
f1:48:29:ef:51:74:2f:c7:52:18:56:07:4e:c0:8b:
72:cc:f6:58:c9:e8:e6:49:77:c9:2d:8c:ff:02:b0:
8c:ec:3f:77:48:03:31:59:31:05:ec:df:81:3d:c4:
34:48:a6:e0:7c:57:f2:ee:de:d7:db:b8:0b:3d:06:
a3:1a:02:ea:03:3e:c4:64:d6:33:ec:2f:97:cd:bc:
d1:9f:5f:8a:bb:7c:da:e1:79:95:e8:1c:14:6e:93:
2f:27:24:0f:81:ea:ae:ff:12:c1:4d:f2:d5:bd:f2:
3f:92:77:44:d6:92:49:23:c7:a3:95:65:cf:09:80:
bd:ea:23:c8:c3:b8:3b:9f:a3:ae:3e:25:2c:51:f9:
51:d5:2a:97:72:e6:ee:08:b1:02:42:f7:2e:27:95:
71:06:a1:89:99:cb:86:73:0b:7c:6b:11:27:67:3a:
e7:6a:ef:2c:ba:87:2a:8d:2d:e2:69:07:09:a8:b9:
64:ba:89:a3:46:8b:3a:e6:99:31:59:51:2d:fc:86:
62:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7E:C5:DF:BD:F4:1B:B5:AA:88:B0:60:95:EF:3A:D4:BE:45:B3:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa107cda-6045-3e3e-876d-b45d5b097efe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:cb:4b:c2:1a:64:b1:65:47:cc:f9:33:65:2c:9e:6d:5c:82:
b8:13:6b:8e:dc:ef:fd:0f:f8:b2:d1:32:c3:35:43:58:d5:18:
34:d7:df:7c:3b:d7:ee:37:f6:0e:d6:1f:84:89:2c:f0:6f:76:
a6:92:eb:56:26:87:60:e4:69:7d:33:7c:a4:70:29:d9:c7:9a:
68:88:c4:a7:94:2e:d7:2b:b5:1f:49:cc:47:88:00:7a:05:fb:
cd:15:74:94:c5:2d:6e:bb:1d:d8:b5:2e:48:91:a2:2a:13:b8:
56:87:9b:bb:44:b7:43:27:87:86:a9:09:3d:c0:5c:6b:67:c0:
d5:3b:8d:9e:d6:36:1b:23:0a:59:38:e3:2f:c9:be:57:9a:8b:
bf:b6:a8:69:01:7f:06:41:46:00:91:49:48:cf:b0:4f:2b:2a:
f3:9d:82:46:d4:9f:d0:06:31:bb:d2:db:40:c7:1c:ad:9a:f1:
dc:07:f8:e1:18:c1:f7:93:60:22:74:cc:d9:3d:ab:f9:5f:ac:
68:90:a2:01:40:a3:b2:27:c1:7b:42:8e:6e:f9:f8:75:34:af:
a1:77:27:ef:96:b5:68:25:8d:7f:a8:59:ae:5a:cf:2f:f9:e7:
93:7e:7b:fd:6e:31:6f:f2:7b:30:8d:07:23:a5:5d:16:5d:86:
dd:12:d6:be
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA+twm6314Wfql0S4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
OWFmZDFlN2ItOTQ0Ni00MmNkLTk3MDAtYmMxZGM3NmQzZDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlPFyywjBrEeY8PAZbWTaiYibCKkBRjJKu4P
Be3ibN2HL2wCG8HHIVGk43T0Hr9Vr4Mk2x18dVi5+KjxSCnvUXQvx1IYVgdOwIty
zPZYyejmSXfJLYz/ArCM7D93SAMxWTEF7N+BPcQ0SKbgfFfy7t7X27gLPQajGgLq
Az7EZNYz7C+XzbzRn1+Ku3za4XmV6BwUbpMvJyQPgequ/xLBTfLVvfI/kndE1pJJ
I8ejlWXPCYC96iPIw7g7n6OuPiUsUflR1SqXcubuCLECQvcuJ5VxBqGJmcuGcwt8
axEnZzrnau8suocqjS3iaQcJqLlkuomjRos65pkxWVEt/IZiXQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ9+xd+99Bu1qoiwYJXvOtS+RbNZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWExMDdjZGEtNjA0NS0z
ZTNlLTg3NmQtYjQ1ZDViMDk3ZWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAestLwhpksWVHzPkzZSyebVyCuBNrjtzv/Q/4stEywzVDWNUYNNfffDvX
7jf2DtYfhIks8G92ppLrViaHYORpfTN8pHAp2ceaaIjEp5Qu1yu1H0nMR4gAegX7
zRV0lMUtbrsd2LUuSJGiKhO4Voebu0S3QyeHhqkJPcBca2fA1TuNntY2GyMKWTjj
L8m+V5qLv7aoaQF/BkFGAJFJSM+wTysq852CRtSf0AYxu9LbQMccrZrx3Af44RjB
95NgInTM2T2r+V+saJCiAUCjsifBe0KObvn4dTSvoXcn75a1aCWNf6hZrlrPL/nn
k357/W4xb/J7MI0HI6VdFl2G3RLWvg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:23 2025 by rpki-client