Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b35e83f3-b0e8-301f-b6ba-f356ac2da828.roa
File: b35e83f3-b0e8-301f-b6ba-f356ac2da828.roa (raw, json)
Hash identifier: oWtTGajvJIcRgdR7lWXeZmLCuOefh48wZMGZChBfR5g=
Subject key identifier: 47:B8:EE:35:8C:7C:20:BB:E4:A9:C9:4A:9B:6C:93:D2:84:A3:85:3A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CEF2974A0694746ACCC964D00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b35e83f3-b0e8-301f-b6ba-f356ac2da828.roa
Signing time: Tue 15 Feb 2022 05:00:00 +0000
ROA not before: Tue 15 Feb 2022 05:00:00 +0000
ROA not after: Tue 22 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.86.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ef:29:74:a0:69:47:46:ac:cc:96:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 15 05:00:00 2022 GMT
Not After : Mar 22 04:00:00 2022 GMT
Subject: CN=ac7bce0f-ee95-4827-aa3b-11d0dc24b802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:75:75:be:a0:57:67:65:35:5c:d5:24:88:
9e:51:61:a7:84:4d:da:d4:df:0a:c8:4f:a3:6d:19:
25:e1:4a:85:1a:50:66:cc:fb:92:8b:46:a8:4a:6d:
63:47:30:de:b5:05:77:ff:f5:c6:6c:54:17:53:ad:
0f:fa:d5:ff:2e:14:5c:cd:41:ab:76:95:e1:75:ab:
19:d3:eb:93:d0:08:50:8e:4c:c1:e5:bc:17:ab:4c:
10:ab:e2:14:60:4f:eb:bf:8f:65:2e:01:48:80:5b:
6d:ce:fe:c1:75:a9:6e:d0:72:37:21:5b:2d:bd:7b:
00:90:f0:96:24:52:86:13:55:a4:0d:68:67:7b:bb:
26:e9:5f:78:fb:02:7f:32:74:27:c3:9f:10:d8:d9:
2c:6e:2f:9b:ad:4f:8f:e8:19:8c:74:48:71:a1:bf:
f5:8b:6c:e8:25:a4:3f:0f:cd:12:7c:90:b7:bc:d1:
2f:06:0f:8f:47:de:78:7d:36:64:18:a6:11:8f:86:
c4:69:d5:c7:09:29:bf:62:d3:e3:3c:d9:0d:67:de:
55:96:dc:8f:61:be:df:b9:60:a6:07:c3:3e:e5:43:
4e:09:5d:77:02:d3:cb:fe:96:8b:ff:ff:08:da:c1:
a6:e7:8d:b7:ca:92:54:ad:26:96:1c:df:ac:7b:2e:
d0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B8:EE:35:8C:7C:20:BB:E4:A9:C9:4A:9B:6C:93:D2:84:A3:85:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b35e83f3-b0e8-301f-b6ba-f356ac2da828.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.86.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:1b:69:61:a6:c4:19:ed:57:9a:f7:c2:a9:c1:5f:e4:25:b2:
4d:41:3a:ad:2b:60:8c:d2:ad:f3:5b:aa:be:23:1a:ba:cf:46:
46:35:54:70:88:b4:bb:fc:82:04:31:fd:ac:3e:42:ca:c7:f2:
fb:b8:ae:fd:26:66:76:3f:0f:a8:23:a7:1d:7b:06:4a:e0:94:
93:86:c3:3b:17:af:6f:80:95:22:25:b3:7f:81:be:1c:ba:59:
0e:e6:82:e6:38:05:8a:6f:d1:03:eb:e5:87:ed:97:89:fb:99:
a5:7a:d6:d9:2a:72:3a:7c:8a:e8:6f:9e:66:6a:36:e1:86:87:
7c:65:d7:db:7b:48:65:a7:34:3d:d6:c5:a4:52:6f:d7:1d:a2:
74:a5:fb:d8:bf:ad:a3:9c:99:5e:4e:7c:7b:1d:40:57:2d:46:
5b:ed:e6:dd:e6:f2:70:c0:45:4b:3e:42:32:3e:34:27:c4:88:
37:e2:2b:bf:c4:6e:c6:6c:e1:30:1b:d7:a6:73:60:0f:41:5d:
76:b5:18:33:e2:22:00:4f:f8:6b:47:9e:27:d9:43:d4:87:0a:
b9:38:33:a4:c4:b2:d9:ec:1f:f2:f0:b7:fd:12:22:21:ec:5d:
a2:f9:56:16:84:a0:94:d9:d8:07:07:4f:de:22:be:44:e9:3f:
bb:02:33:c9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzvKXSgaUdGrMyWTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIxNTA1MDAwMFoXDTIyMDMyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YWM3YmNlMGYtZWU5NS00ODI3LWFhM2ItMTFkMGRjMjRiODAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGV1db6gV2dlNVzVJIieUWGnhE3a1N8KyE+j
bRkl4UqFGlBmzPuSi0aoSm1jRzDetQV3//XGbFQXU60P+tX/LhRczUGrdpXhdasZ
0+uT0AhQjkzB5bwXq0wQq+IUYE/rv49lLgFIgFttzv7Bdalu0HI3IVstvXsAkPCW
JFKGE1WkDWhne7sm6V94+wJ/MnQnw58Q2Nksbi+brU+P6BmMdEhxob/1i2zoJaQ/
D80SfJC3vNEvBg+PR954fTZkGKYRj4bEadXHCSm/YtPjPNkNZ95VltyPYb7fuWCm
B8M+5UNOCV13AtPL/paL//8I2sGm5423ypJUrSaWHN+sey7QEwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEe47jWMfCC75KnJSptsk9KEo4U6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjM1ZTgzZjMtYjBlOC0z
MDFmLWI2YmEtZjM1NmFjMmRhODI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEFYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGBtpYabEGe1XmvfCqcFf5CWyTUE6rStgjNKt81uqviMaus9GRjVUcIi0
u/yCBDH9rD5Cysfy+7iu/SZmdj8PqCOnHXsGSuCUk4bDOxevb4CVIiWzf4G+HLpZ
DuaC5jgFim/RA+vlh+2XifuZpXrW2SpyOnyK6G+eZmo24YaHfGXX23tIZac0PdbF
pFJv1x2idKX72L+to5yZXk58ex1AVy1GW+3m3ebycMBFSz5CMj40J8SIN+Irv8Ru
xmzhMBvXpnNgD0FddrUYM+IiAE/4a0eeJ9lD1IcKuTgzpMSy2ewf8vC3/RIiIexd
ovlWFoSglNnYBwdP3iK+ROk/uwIzyQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:48 2025 by rpki-client