Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1bacc8e-8a55-3381-84a8-e23ddd4a34ba.roa
File: b1bacc8e-8a55-3381-84a8-e23ddd4a34ba.roa (raw, json)
Hash identifier: 1A5AraTxhLn1nvUzr4BTJoMuCLy27bvQEmFysFaQrOM=
Subject key identifier: 13:49:F0:F4:B3:29:D2:47:97:81:F2:FB:9A:03:2F:85:E8:54:6E:13
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409980FDF18CEAC88C02C44440
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1bacc8e-8a55-3381-84a8-e23ddd4a34ba.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.166.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:99:80:fd:f1:8c:ea:c8:8c:02:c4:44:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=adfd5792-84c3-4e68-96b0-67dd163dc5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:3d:99:d9:ea:ec:02:e5:fb:79:c6:71:6c:
75:ac:e4:bb:3b:95:54:d7:b5:08:85:6c:40:74:26:
a9:fb:23:24:e9:38:44:ec:48:4d:1a:ff:58:da:72:
cf:f8:a2:9c:72:47:15:33:58:b7:d0:59:fc:13:b6:
fb:49:9a:1f:fb:af:08:49:51:bb:e5:60:2c:7d:58:
e8:bb:36:07:77:a5:98:1c:00:b6:c6:bf:5f:90:c6:
ee:85:3a:62:f5:c3:40:0f:f5:e1:5d:ca:00:e6:09:
f1:85:4c:33:c2:e9:78:bb:5b:df:19:e3:e0:ff:8d:
6f:3a:ae:dd:c6:c2:88:a8:82:0b:ce:93:30:f7:6d:
17:7c:e2:68:66:e3:c3:35:59:6d:16:5e:44:83:5b:
29:ab:58:0b:94:a5:42:05:7d:16:d9:0e:c0:c5:b9:
1e:64:02:65:da:88:c7:e0:12:7d:7c:b5:dc:10:33:
6f:57:55:ec:9c:35:16:77:3e:09:53:35:bb:6a:b9:
00:b0:81:b6:d1:09:b2:da:3f:fd:0b:2e:f8:0d:e0:
89:81:1f:09:c5:c4:4f:7e:2b:a3:8f:a5:a6:08:f5:
a5:be:57:72:d1:ed:4a:00:ae:ff:01:4c:be:f0:aa:
d5:08:95:68:02:74:60:29:5a:e6:f1:24:6a:7c:76:
97:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:49:F0:F4:B3:29:D2:47:97:81:F2:FB:9A:03:2F:85:E8:54:6E:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b1bacc8e-8a55-3381-84a8-e23ddd4a34ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.166.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:8e:11:a8:61:5f:2d:47:15:98:97:00:9a:12:cd:46:ec:b9:
9a:2e:dd:89:5e:08:53:34:d4:fb:bf:d5:21:ce:bd:0a:2b:cf:
26:49:b9:9b:77:f4:e3:0f:12:b0:f9:b1:01:c1:61:48:3b:e1:
17:5a:5d:c8:db:ae:68:c2:cd:f8:6d:e1:7c:15:e9:3f:2e:66:
47:10:72:32:d5:3b:aa:38:75:86:c1:07:55:94:70:72:c0:21:
c9:87:d1:5b:50:d2:c0:c8:20:46:c3:19:91:35:77:e5:6a:d6:
8b:74:c2:2f:e7:e3:8b:2b:31:97:e1:a9:90:a7:37:75:cc:23:
e4:1f:31:36:bd:bf:21:7b:82:43:c9:ee:af:2f:95:50:cb:04:
e2:1e:20:37:a6:31:df:3b:d1:e3:7b:32:02:29:9b:52:ee:61:
dc:a8:a6:2b:e7:c7:b0:0c:f5:5f:c6:33:08:8c:21:51:6c:09:
88:9f:2f:2b:09:b8:67:ee:bc:a4:92:08:84:4b:1a:c2:7d:1d:
c8:13:35:19:6d:ba:a7:f5:3f:ce:4a:85:dd:9b:af:84:5d:86:
eb:d7:ea:24:55:a4:b4:fc:1a:8c:74:cf:51:9a:ef:6e:b8:41:
d2:db:fe:ec:d1:00:f2:cb:2a:0d:83:8b:b0:b4:b7:f1:d6:3b:
95:67:fe:fd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECZgP3xjOrIjALEREAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExNjEyMDAwMFoXDTIzMDIyMTA1MDAwMFowLzEtMCsGA1UEAxMk
YWRmZDU3OTItODRjMy00ZTY4LTk2YjAtNjdkZDE2M2RjNWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifU9mdnq7ALl+3nGcWx1rOS7O5VU17UIhWxA
dCap+yMk6ThE7EhNGv9Y2nLP+KKcckcVM1i30Fn8E7b7SZof+68ISVG75WAsfVjo
uzYHd6WYHAC2xr9fkMbuhTpi9cNAD/XhXcoA5gnxhUwzwul4u1vfGePg/41vOq7d
xsKIqIILzpMw920XfOJoZuPDNVltFl5Eg1spq1gLlKVCBX0W2Q7AxbkeZAJl2ojH
4BJ9fLXcEDNvV1XsnDUWdz4JUzW7arkAsIG20Qmy2j/9Cy74DeCJgR8JxcRPfiuj
j6WmCPWlvldy0e1KAK7/AUy+8KrVCJVoAnRgKVrm8SRqfHaXywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBNJ8PSzKdJHl4Hy+5oDL4XoVG4TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjFiYWNjOGUtOGE1NS0z
MzgxLTg0YTgtZTIzZGRkNGEzNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEKYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfY4RqGFfLUcVmJcAmhLNRuy5mi7diV4IUzTU+7/VIc69CivPJkm5m3f0
4w8SsPmxAcFhSDvhF1pdyNuuaMLN+G3hfBXpPy5mRxByMtU7qjh1hsEHVZRwcsAh
yYfRW1DSwMggRsMZkTV35WrWi3TCL+fjiysxl+GpkKc3dcwj5B8xNr2/IXuCQ8nu
ry+VUMsE4h4gN6Yx3zvR43syAimbUu5h3KimK+fHsAz1X8YzCIwhUWwJiJ8vKwm4
Z+68pJIIhEsawn0dyBM1GW26p/U/zkqF3ZuvhF2G69fqJFWktPwajHTPUZrvbrhB
0tv+7NEA8ssqDYOLsLS38dY7lWf+/Q==
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:48 2025 by rpki-client