Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa624a33-1fed-351e-8fef-fdbd36bb1b7c.roa
File: aa624a33-1fed-351e-8fef-fdbd36bb1b7c.roa (raw, json)
Hash identifier: YWqfrm8Dy6nOITECWm3eCpNnOQSjLJ7ycTQj8HOZrOA=
Subject key identifier: 16:5E:AC:1E:66:AA:D4:CC:39:47:8B:A3:32:B5:31:34:CD:E5:0B:40
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2F6DBFAA9B84DC6B0C23C100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa624a33-1fed-351e-8fef-fdbd36bb1b7c.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.99.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:6d:bf:aa:9b:84:dc:6b:0c:23:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=c489f5a8-8dfd-4f1e-979d-3c1a69bf7d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:bd:ad:ac:03:31:20:d0:48:23:27:14:49:
05:21:a2:70:38:cc:11:aa:22:99:17:c0:13:ff:7c:
4b:0a:fa:7d:89:4a:bf:24:d5:bd:17:4e:68:c3:d9:
51:8d:93:cb:f2:b7:c0:63:c0:cd:da:a3:41:4f:91:
c3:61:82:7f:f6:ee:f7:a9:49:ab:87:e9:d1:ee:ce:
a2:5e:4d:08:d5:92:4e:ed:27:8a:ad:a8:e3:8e:8d:
dd:79:21:9c:30:cd:21:f5:84:93:60:ec:bf:ca:88:
f6:58:66:14:2e:1a:b9:9e:a6:75:4f:a8:60:89:ad:
90:92:03:7d:5d:0c:12:15:4d:61:fd:c6:5d:4b:78:
15:00:b0:91:a7:82:f2:df:0c:69:40:08:b7:d3:2f:
23:c3:ef:dd:01:29:b8:55:17:79:ca:37:ac:16:f1:
18:3f:9a:35:6f:8c:10:13:0c:da:df:ef:b4:d7:64:
f0:e9:f5:34:f1:dd:1b:48:60:1f:84:ff:54:87:d9:
3c:30:d3:fc:7d:ca:3e:26:15:4c:59:ad:c8:4f:b2:
31:b5:fd:fc:56:6d:b3:c2:67:60:00:82:6d:93:44:
00:53:d6:30:26:be:94:07:4d:8e:11:27:d0:56:d3:
53:f9:1e:37:d5:f5:fe:66:fd:d3:58:e3:89:fe:71:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5E:AC:1E:66:AA:D4:CC:39:47:8B:A3:32:B5:31:34:CD:E5:0B:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aa624a33-1fed-351e-8fef-fdbd36bb1b7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.99.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:ed:b3:d4:7b:ed:c2:f7:cd:ec:3f:67:09:3a:51:41:41:51:
fc:c2:b3:28:5c:15:e8:0e:36:17:f8:79:82:d5:10:55:67:3a:
f6:c7:1b:7a:4a:6c:66:b5:0f:1b:9c:ed:04:52:df:f9:da:20:
aa:d3:84:3a:65:9a:71:0b:1d:58:08:1b:af:10:8e:cf:df:a1:
96:e1:9c:c8:4c:c9:d3:ea:51:50:28:ff:83:56:24:26:c1:9d:
bc:63:c7:c4:da:b6:7e:c5:c5:7b:75:f1:49:c9:2b:21:1c:53:
44:7f:bc:88:1d:24:99:0a:07:3a:4a:bf:06:06:7b:55:ca:6b:
dc:73:73:c7:da:3d:33:dd:1f:2f:e0:28:e8:3d:92:3b:bf:02:
5c:e3:52:68:d2:03:02:50:80:07:ef:4a:24:ce:8c:54:f5:f4:
9e:08:59:e7:de:9a:7e:bc:53:56:e2:6a:38:29:f0:20:1b:9c:
f4:15:11:b8:3a:2c:27:4d:fe:ef:33:b8:72:9a:c5:82:be:7c:
8c:55:ec:b5:4d:5a:c5:83:c7:71:12:77:8f:91:c4:27:6f:d9:
7b:66:aa:40:1c:1a:66:8a:eb:76:bb:f2:07:33:64:39:50:63:
4e:b7:88:60:fc:17:b9:89:90:34:ec:b5:aa:cd:a4:3c:23:59:
a8:37:05:ce
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0vbb+qm4TcawwjwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMDA1MDAwMFoXDTIyMDQxNDA0MDAwMFowLzEtMCsGA1UEAxMk
YzQ4OWY1YTgtOGRmZC00ZjFlLTk3OWQtM2MxYTY5YmY3ZDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ae9rawDMSDQSCMnFEkFIaJwOMwRqiKZF8AT
/3xLCvp9iUq/JNW9F05ow9lRjZPL8rfAY8DN2qNBT5HDYYJ/9u73qUmrh+nR7s6i
Xk0I1ZJO7SeKrajjjo3deSGcMM0h9YSTYOy/yoj2WGYULhq5nqZ1T6hgia2QkgN9
XQwSFU1h/cZdS3gVALCRp4Ly3wxpQAi30y8jw+/dASm4VRd5yjesFvEYP5o1b4wQ
Ewza3++012Tw6fU08d0bSGAfhP9Uh9k8MNP8fco+JhVMWa3IT7Ixtf38Vm2zwmdg
AIJtk0QAU9YwJr6UB02OESfQVtNT+R431fX+Zv3TWOOJ/nFcjwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBZerB5mqtTMOUeLozK1MTTN5QtAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWE2MjRhMzMtMWZlZC0z
NTFlLThmZWYtZmRiZDM2YmIxYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEGMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJe2z1HvtwvfN7D9nCTpRQUFR/MKzKFwV6A42F/h5gtUQVWc69scbekps
ZrUPG5ztBFLf+dogqtOEOmWacQsdWAgbrxCOz9+hluGcyEzJ0+pRUCj/g1YkJsGd
vGPHxNq2fsXFe3XxSckrIRxTRH+8iB0kmQoHOkq/BgZ7Vcpr3HNzx9o9M90fL+Ao
6D2SO78CXONSaNIDAlCAB+9KJM6MVPX0nghZ596afrxTVuJqOCnwIBuc9BURuDos
J03+7zO4cprFgr58jFXstU1axYPHcRJ3j5HEJ2/Ze2aqQBwaZorrdrvyBzNkOVBj
TreIYPwXuYmQNOy1qs2kPCNZqDcFzg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:16 2025 by rpki-client