Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/adc5f455-1f18-33fd-8c9d-a43d1ad58365.roa
File: adc5f455-1f18-33fd-8c9d-a43d1ad58365.roa (raw, json)
Hash identifier: d8Ed0B9Jzz+2Tlv6cHQfTjDJIn8hNdQua82U0/ZaqNw=
Subject key identifier: A9:73:18:26:30:BB:06:F7:F1:A3:4F:E5:9A:3C:6D:D5:49:B6:36:70
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584065B63779741C31DF276EE8C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/adc5f455-1f18-33fd-8c9d-a43d1ad58365.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:b6:37:79:74:1c:31:df:27:6e:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=0b7ca61f-1421-4d27-af5f-721e0f12c544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:06:67:24:63:91:c1:28:f2:f2:8e:fd:e9:b0:
49:b1:82:63:54:ea:5b:4a:52:1b:37:0d:7b:0c:6f:
c7:79:87:57:1e:a7:9a:8d:ae:e8:78:54:bf:4c:0e:
25:bb:e1:49:fb:52:d5:35:9a:a4:79:de:0f:bd:be:
83:73:1b:ef:33:7d:e2:60:38:ee:b0:7f:7a:f7:3b:
fc:ad:36:11:c9:5f:98:e1:2d:0e:31:a6:80:4e:64:
f3:84:da:22:c2:b7:b1:c9:8f:01:63:93:23:78:7e:
f3:9c:99:bf:55:d4:5d:03:d8:ca:40:3d:b6:e0:94:
39:6a:54:2b:c4:03:e6:86:1a:6b:08:b0:f9:0b:50:
5a:aa:f7:c7:c7:4f:b2:a3:12:af:15:1f:82:37:41:
7d:65:10:03:a9:d3:93:35:84:48:49:13:79:84:72:
9a:ae:c2:a0:eb:5c:13:6d:30:c5:a8:0a:ed:b1:ea:
4d:33:a6:0d:dd:dc:e8:96:bc:80:7d:63:2a:34:a0:
df:64:5d:cb:3d:54:92:15:f2:91:db:ea:57:97:4f:
79:de:5b:49:08:e3:8f:ef:09:6d:39:b8:06:95:9b:
28:3d:f9:40:71:d7:46:d2:7e:ac:9d:30:e9:1f:c8:
c3:9c:da:23:42:6a:f9:4c:48:39:68:b4:88:45:cf:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:73:18:26:30:BB:06:F7:F1:A3:4F:E5:9A:3C:6D:D5:49:B6:36:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/adc5f455-1f18-33fd-8c9d-a43d1ad58365.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:71:d2:95:79:a5:7c:84:b6:54:63:fa:13:a5:54:19:63:f6:
3f:3c:ec:d5:89:6a:f2:b6:30:20:d7:20:3f:d3:61:b5:15:66:
df:ab:eb:87:59:11:72:27:52:e9:90:bc:d2:d6:39:da:98:95:
ce:11:40:e7:c7:55:f9:7b:45:ae:7d:38:00:ab:21:e3:c9:85:
5d:e7:fb:b0:c1:39:6a:1c:e1:9b:c3:b7:b5:68:6d:d3:e2:b0:
fb:59:84:ef:eb:69:b6:d9:31:77:85:10:5b:27:b0:f7:88:07:
a6:6d:f7:de:1e:40:e5:65:2e:4c:16:5f:c1:01:58:82:80:45:
b4:29:41:dc:d5:25:24:88:54:40:c0:23:b2:9d:d8:33:24:61:
ae:3b:8c:0a:4b:0f:aa:54:40:06:25:73:f2:e6:63:4e:72:2a:
9f:9f:62:a0:35:45:22:b7:3b:e6:98:32:b9:ba:56:c6:6b:e9:
f2:1f:5b:fe:e3:48:a8:e0:9c:cb:03:1e:53:e8:4d:82:cb:50:
ec:ea:ac:fd:ec:1b:21:4b:82:b2:d3:c7:82:d8:af:69:b6:72:
08:5e:7a:59:bd:9d:9c:4a:ae:2a:71:dd:ea:13:c3:40:58:de:
3f:ff:2d:f8:7a:f1:ae:e9:4a:65:88:60:a6:f8:07:90:5e:04:
cf:60:81:b2
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBltjd5dBwx3ydu6MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyODEyMDAwMFoXDTIzMDIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
MGI3Y2E2MWYtMTQyMS00ZDI3LWFmNWYtNzIxZTBmMTJjNTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwZnJGORwSjy8o796bBJsYJjVOpbSlIbNw17
DG/HeYdXHqeaja7oeFS/TA4lu+FJ+1LVNZqked4Pvb6DcxvvM33iYDjusH969zv8
rTYRyV+Y4S0OMaaATmTzhNoiwrexyY8BY5MjeH7znJm/VdRdA9jKQD224JQ5alQr
xAPmhhprCLD5C1BaqvfHx0+yoxKvFR+CN0F9ZRADqdOTNYRISRN5hHKarsKg61wT
bTDFqArtsepNM6YN3dzolryAfWMqNKDfZF3LPVSSFfKR2+pXl0953ltJCOOP7wlt
ObgGlZsoPflAcddG0n6snTDpH8jDnNojQmr5TEg5aLSIRc+BpQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKlzGCYwuwb38aNP5Zo8bdVJtjZwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYWRjNWY0NTUtMWYxOC0z
M2ZkLThjOWQtYTQzZDFhZDU4MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATnHSlXmlfIS2VGP6E6VUGWP2Pzzs1Ylq8rYwINcgP9NhtRVm36vrh1kR
cidS6ZC80tY52piVzhFA58dV+XtFrn04AKsh48mFXef7sME5ahzhm8O3tWht0+Kw
+1mE7+tpttkxd4UQWyew94gHpm333h5A5WUuTBZfwQFYgoBFtClB3NUlJIhUQMAj
sp3YMyRhrjuMCksPqlRABiVz8uZjTnIqn59ioDVFIrc75pgyubpWxmvp8h9b/uNI
qOCcywMeU+hNgstQ7Oqs/ewbIUuCstPHgtivabZyCF56Wb2dnEquKnHd6hPDQFje
P/8t+HrxrulKZYhgpvgHkF4Ez2CBsg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:05 2025 by rpki-client