Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab92c280-9ee0-30ed-8e9a-bb6ec039bc00.roa
File: ab92c280-9ee0-30ed-8e9a-bb6ec039bc00.roa (raw, json)
Hash identifier: I8MtykE2m1jUe/Wek1AWWS8RQWU6zroIXRFSvDTwZyg=
Subject key identifier: 8A:62:07:54:FA:7B:69:E7:EA:21:A8:09:99:CD:87:5F:D7:6F:9C:D2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F2BD0D0FDC5C6B14EC31DD940
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab92c280-9ee0-30ed-8e9a-bb6ec039bc00.roa
Signing time: Wed 07 Sep 2022 12:00:00 +0000
ROA not before: Wed 07 Sep 2022 12:00:00 +0000
ROA not after: Thu 13 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.21.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2b:d0:d0:fd:c5:c6:b1:4e:c3:1d:d9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 7 12:00:00 2022 GMT
Not After : Oct 13 04:00:00 2022 GMT
Subject: CN=de8f01c4-9f3c-42bf-aee8-1277c11309ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:58:da:85:b0:8f:75:eb:67:3e:b0:48:69:
84:05:93:4f:2d:1e:88:3c:cb:49:2b:0a:8f:42:59:
b4:33:30:32:4d:a3:17:47:2e:9d:93:2e:04:b5:4f:
26:78:91:33:9a:9d:9f:de:8d:4a:e4:b6:4a:4c:5a:
29:c1:2e:7e:03:a0:a2:cd:d0:3b:25:02:e6:0e:3d:
25:a3:17:0f:bb:ae:88:56:5c:e7:d4:d2:cb:e4:33:
d0:d7:6c:5e:82:22:de:03:14:b0:eb:a2:cc:8a:40:
91:4d:48:da:ef:fe:16:99:d9:d5:87:d9:47:0c:83:
23:d3:e1:0e:a6:24:46:a9:7c:40:6d:f6:3f:3f:65:
e1:07:f4:3a:be:f0:3d:0c:c1:34:32:d3:17:52:6c:
d2:93:3b:54:9e:3e:0e:88:ea:64:f7:2d:09:cb:b7:
84:82:e7:79:4b:1a:d3:13:5b:ea:d6:e4:1e:32:eb:
69:9f:32:1d:47:12:a7:b8:4b:35:75:27:3e:35:ef:
4d:be:fe:d4:61:16:d1:db:d5:74:a0:48:91:69:88:
d6:48:2f:bc:39:3b:b7:71:b0:9e:d6:17:cf:50:8a:
db:88:b7:e0:03:79:62:e2:09:da:9e:1f:c3:4a:93:
83:96:78:c2:b8:a9:4a:fb:2d:9d:c6:f7:bf:ab:f8:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:62:07:54:FA:7B:69:E7:EA:21:A8:09:99:CD:87:5F:D7:6F:9C:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ab92c280-9ee0-30ed-8e9a-bb6ec039bc00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.21.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:b3:0f:9b:5c:be:e7:c3:db:a4:0e:db:00:82:5b:f2:7c:3a:
d0:06:2e:68:1f:78:e7:6b:71:97:d2:f6:9a:04:37:06:99:51:
99:fb:21:20:1f:36:56:68:78:35:e8:9f:b3:df:4d:12:de:a6:
2e:fd:29:b9:33:d7:ea:85:b0:35:5d:04:be:98:83:d5:bf:ed:
23:a7:13:57:1f:fa:e7:87:c3:89:07:75:0b:07:d7:cc:d8:f6:
8a:99:a5:f2:99:98:fc:2f:84:1f:44:c0:67:85:cf:19:08:d9:
03:56:c3:a8:33:cc:39:0b:8b:8a:ff:27:af:68:39:af:66:18:
ee:36:52:89:c1:fe:41:cc:c8:e0:43:6e:87:80:bc:48:7a:5f:
44:2f:71:26:00:48:b4:17:19:5a:f9:a0:e5:25:26:cf:38:de:
35:0b:3c:5d:c3:5c:97:05:c6:54:38:31:5c:f9:45:90:ec:2f:
8b:1b:70:97:42:04:44:c3:de:a0:b9:ec:d1:0a:bb:ce:9c:22:
41:01:ed:8b:e3:49:8c:9f:41:9b:18:b1:aa:77:36:f1:12:f9:
12:de:31:73:a9:be:c5:db:a4:7d:f4:54:77:a7:b7:28:0e:a4:
ef:fd:3d:15:4e:7b:01:eb:56:31:ef:18:e0:49:3b:fd:aa:ce:
2f:72:6d:44
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8r0ND9xcaxTsMd2UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkwNzEyMDAwMFoXDTIyMTAxMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZGU4ZjAxYzQtOWYzYy00MmJmLWFlZTgtMTI3N2MxMTMwOWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpZY2oWwj3XrZz6wSGmEBZNPLR6IPMtJKwqP
Qlm0MzAyTaMXRy6dky4EtU8meJEzmp2f3o1K5LZKTFopwS5+A6CizdA7JQLmDj0l
oxcPu66IVlzn1NLL5DPQ12xegiLeAxSw66LMikCRTUja7/4WmdnVh9lHDIMj0+EO
piRGqXxAbfY/P2XhB/Q6vvA9DME0MtMXUmzSkztUnj4OiOpk9y0Jy7eEgud5SxrT
E1vq1uQeMutpnzIdRxKnuEs1dSc+Ne9Nvv7UYRbR29V0oEiRaYjWSC+8OTu3cbCe
1hfPUIrbiLfgA3li4gnanh/DSpODlnjCuKlK+y2dxve/q/hdaQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIpiB1T6e2nn6iGoCZnNh1/Xb5zSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWI5MmMyODAtOWVlMC0z
MGVkLThlOWEtYmI2ZWMwMzliYzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBUwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAY7MPm1y+58PbpA7bAIJb8nw60AYuaB9452txl9L2mgQ3BplRmfshIB82
Vmh4Neifs99NEt6mLv0puTPX6oWwNV0EvpiD1b/tI6cTVx/654fDiQd1CwfXzNj2
ipml8pmY/C+EH0TAZ4XPGQjZA1bDqDPMOQuLiv8nr2g5r2YY7jZSicH+QczI4ENu
h4C8SHpfRC9xJgBItBcZWvmg5SUmzzjeNQs8XcNclwXGVDgxXPlFkOwvixtwl0IE
RMPeoLns0Qq7zpwiQQHti+NJjJ9Bmxixqnc28RL5Et4xc6m+xdukffRUd6e3KA6k
7/09FU57AetWMe8Y4Ek7/arOL3JtRA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:37:46 2025 by rpki-client