Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/acc50fc7-a27a-3c41-a689-a3b6535cada1.roa
File: acc50fc7-a27a-3c41-a689-a3b6535cada1.roa (raw, json)
Hash identifier: OwwENwCoU3EMdwz40zZg4ofV9qsrHiu3tMgcWc7xy8w=
Subject key identifier: 86:C0:87:B0:97:44:C7:9F:CE:43:46:97:CA:F4:67:02:F9:46:60:D1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D323899357819C69051541600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/acc50fc7-a27a-3c41-a689-a3b6535cada1.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:38:99:35:78:19:c6:90:51:54:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=7f913bf0-e98b-4fb1-b94a-c931902bb85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:c1:a6:84:4e:59:62:f8:c4:d9:ad:94:d9:
66:b5:3e:98:3a:d0:c0:3f:cf:33:82:be:fc:95:ba:
4d:cf:8d:3e:8e:be:4e:28:6e:dd:25:3d:7a:6b:a9:
6a:ee:8f:58:9c:2c:88:e1:d6:fd:00:69:c9:29:3f:
bc:7f:67:d3:19:70:35:10:21:1b:ab:bc:73:b2:cc:
d1:23:be:06:72:36:0a:65:7a:6c:4a:96:33:13:9b:
f6:b2:22:ca:fd:71:67:de:db:cd:1c:a1:a4:1f:a2:
b0:6f:fe:f0:f3:8d:6b:76:f8:60:10:79:c2:bb:1d:
40:39:32:c0:97:ec:64:a6:67:a1:dc:66:60:f1:47:
87:db:f0:25:d8:a5:4b:60:a4:3a:bc:3d:38:aa:2b:
11:0d:16:10:75:ee:9a:99:7c:fb:7d:89:95:81:3d:
61:45:0f:ae:04:67:8c:0c:08:f8:65:37:fb:e8:c2:
6e:0b:4e:9e:fc:e1:8c:67:d8:58:a1:fc:c2:28:a3:
6d:7d:37:62:29:57:a4:0d:af:e1:2c:0a:e6:d1:45:
62:f5:da:20:13:01:8c:8f:52:53:7d:da:f8:fc:ce:
2b:cc:0d:5f:5a:8c:fb:0c:ac:e4:98:bf:6e:3b:fb:
36:e7:96:a1:46:51:90:04:83:1d:3a:f7:6d:98:49:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:87:B0:97:44:C7:9F:CE:43:46:97:CA:F4:67:02:F9:46:60:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/acc50fc7-a27a-3c41-a689-a3b6535cada1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:5a:fb:2e:8b:3f:8e:df:3b:10:1c:fe:0d:a4:5b:28:23:ca:
3a:15:a4:5d:08:62:07:6e:c1:ac:bf:ba:b8:83:c0:68:76:72:
73:1c:52:2e:f9:07:e6:9b:21:c2:3f:1d:22:dc:e5:d2:c8:86:
d3:cb:f6:ce:3c:03:89:c2:c4:5a:80:a4:23:59:ef:0e:00:5b:
d7:44:be:cf:4e:6a:d6:a7:e2:8b:ce:ad:30:1b:2f:74:d3:f4:
a8:82:80:ee:d8:3b:b1:3b:ad:f4:78:c7:54:09:bc:c2:81:14:
b0:8c:b3:89:c3:6a:6e:60:11:a2:b7:4a:04:0f:1c:65:71:9f:
34:fb:3d:99:e0:d5:a2:0a:9c:6c:9d:bb:1e:04:31:a4:99:f0:
10:af:4f:e8:8b:fe:1e:3f:0f:d9:a1:d8:cb:6a:7c:ab:1c:05:
21:e5:47:40:f2:52:84:5f:7e:ff:f7:40:68:6e:79:f9:b1:24:
5d:fe:04:91:d8:4e:15:bf:ec:27:57:ea:a0:d3:f3:07:0f:18:
5e:77:5f:46:f7:11:d7:b9:a6:5f:5a:2a:5c:37:0c:11:2f:35:
f0:87:5f:e9:7b:67:4b:09:23:6f:95:47:ae:7b:ad:bd:05:92:
4a:ee:0c:00:86:b0:14:8a:63:60:c7:5b:62:38:30:c1:19:ca:
e5:7e:59:36
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0yOJk1eBnGkFFUFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
N2Y5MTNiZjAtZTk4Yi00ZmIxLWI5NGEtYzkzMTkwMmJiODVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxbBpoROWWL4xNmtlNlmtT6YOtDAP88zgr78
lbpNz40+jr5OKG7dJT16a6lq7o9YnCyI4db9AGnJKT+8f2fTGXA1ECEbq7xzsszR
I74GcjYKZXpsSpYzE5v2siLK/XFn3tvNHKGkH6Kwb/7w841rdvhgEHnCux1AOTLA
l+xkpmeh3GZg8UeH2/Al2KVLYKQ6vD04qisRDRYQde6amXz7fYmVgT1hRQ+uBGeM
DAj4ZTf76MJuC06e/OGMZ9hYofzCKKNtfTdiKVekDa/hLArm0UVi9dogEwGMj1JT
fdr4/M4rzA1fWoz7DKzkmL9uO/s255ahRlGQBIMdOvdtmEndyQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIbAh7CXRMefzkNGl8r0ZwL5RmDRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWNjNTBmYzctYTI3YS0z
YzQxLWE2ODktYTNiNjUzNWNhZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEMwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAH1r7Los/jt87EBz+DaRbKCPKOhWkXQhiB27BrL+6uIPAaHZycxxSLvkH
5pshwj8dItzl0siG08v2zjwDicLEWoCkI1nvDgBb10S+z05q1qfii86tMBsvdNP0
qIKA7tg7sTut9HjHVAm8woEUsIyzicNqbmARordKBA8cZXGfNPs9meDVogqcbJ27
HgQxpJnwEK9P6Iv+Hj8P2aHYy2p8qxwFIeVHQPJShF9+//dAaG55+bEkXf4EkdhO
Fb/sJ1fqoNPzBw8YXndfRvcR17mmX1oqXDcMES818Idf6XtnSwkjb5VHrnutvQWS
Su4MAIawFIpjYMdbYjgwwRnK5X5ZNg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:37 2025 by rpki-client