Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9c2edc6-20db-3f26-96cf-9d71f086a3dc.roa
File: b9c2edc6-20db-3f26-96cf-9d71f086a3dc.roa (raw, json)
Hash identifier: NpI+SXpQTsHpt+p4EAXQV8osb2/aN08/Ev0T0KCfeBo=
Subject key identifier: 45:EC:84:DD:5A:E5:9D:23:21:9A:7A:6B:A2:20:AC:9E:81:90:C8:12
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DB2EEBB2F1B4D3287C98667E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9c2edc6-20db-3f26-96cf-9d71f086a3dc.roa
Signing time: Mon 25 Apr 2022 12:00:00 +0000
ROA not before: Mon 25 Apr 2022 12:00:00 +0000
ROA not after: Tue 31 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b2:ee:bb:2f:1b:4d:32:87:c9:86:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 25 12:00:00 2022 GMT
Not After : May 31 04:00:00 2022 GMT
Subject: CN=a34ee167-7a05-4895-b24b-9e017f8e1f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:bc:47:b2:07:52:94:5b:8c:56:96:b7:db:
4f:1e:05:41:c2:7a:2e:83:af:b3:24:13:2a:83:51:
66:cf:c8:32:fe:66:67:de:44:b4:66:e2:a2:68:67:
45:d6:44:17:5d:5b:d4:b6:01:55:c4:fe:65:45:d3:
f8:12:fc:e1:29:c6:51:32:9b:f9:fc:d2:aa:da:47:
75:d9:ed:78:5d:f1:7d:d4:c4:4d:b4:64:0b:cb:82:
16:47:d1:81:58:ee:37:a4:6f:f6:52:b4:f6:61:75:
60:8a:33:6a:51:31:66:0f:1d:d2:8e:2a:72:2e:48:
d7:0f:71:0b:a0:2a:32:e6:e2:4b:da:b3:34:9d:fd:
28:aa:6a:1c:14:cb:72:af:3d:48:bf:d0:5e:1f:3e:
d7:b1:18:5c:99:c6:40:c9:1c:cb:d9:a9:8e:74:ff:
d2:34:09:8c:98:22:02:e4:bf:de:02:64:41:5a:da:
7c:a5:5a:08:fa:f6:ae:de:c6:58:12:62:fc:4b:e4:
24:49:23:1f:d6:d9:ee:96:39:1f:96:e0:01:54:c2:
14:11:01:83:99:48:83:18:c9:c7:cb:da:a4:05:35:
6b:86:df:52:50:88:3f:58:a4:de:2c:56:1e:6d:54:
4d:c9:a8:01:40:4b:4e:44:c8:90:5c:cb:55:35:da:
d2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:84:DD:5A:E5:9D:23:21:9A:7A:6B:A2:20:AC:9E:81:90:C8:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b9c2edc6-20db-3f26-96cf-9d71f086a3dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:31:35:5c:55:e1:a2:bf:86:89:f2:17:1f:a5:c2:89:a0:ba:
2e:c7:e2:f4:2a:6f:e4:71:03:69:9a:f2:43:b0:fb:6d:ab:55:
b9:cf:11:00:4a:6f:8a:10:49:55:8f:94:9c:3d:e7:85:39:0d:
83:bb:80:33:5a:f7:91:17:06:9e:a6:42:99:b9:58:4d:7e:ab:
00:53:44:02:77:aa:8e:43:a2:43:f0:fd:c2:6d:a0:2e:e2:f8:
9a:e5:d8:4c:3b:88:f5:12:29:46:21:9f:91:25:84:4a:e8:a5:
01:9a:58:19:d8:c6:47:dd:e2:46:05:ee:fd:2b:50:7e:88:58:
46:04:a6:99:4f:bd:35:eb:f2:f0:bf:7a:3a:06:d2:90:3a:ff:
7e:cd:b7:bf:bf:4a:53:ef:c3:f3:a6:bc:a5:ca:19:10:5e:07:
f0:e3:4f:56:da:a4:1e:e0:0e:6c:41:03:27:a8:2a:ad:66:27:
26:4d:f9:f7:ad:04:4d:34:4c:d3:3f:73:78:3a:0b:93:92:33:
d5:a2:f7:41:98:d2:7e:79:69:6c:8f:a0:fa:87:a5:09:2f:83:
9d:44:e1:b9:5d:7d:b0:97:23:f3:9a:26:a9:6f:41:e1:73:25:
b4:ab:65:fd:9e:69:1f:a1:de:0a:7d:ee:46:bc:b1:d3:34:0c:
c7:a3:b2:0b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD2y7rsvG00yh8mGZ+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDQyNTEyMDAwMFoXDTIyMDUzMTA0MDAwMFowLzEtMCsGA1UEAxMk
YTM0ZWUxNjctN2EwNS00ODk1LWIyNGItOWUwMTdmOGUxZjFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC68R7IHUpRbjFaWt9tPHgVBwnoug6+zJBMq
g1Fmz8gy/mZn3kS0ZuKiaGdF1kQXXVvUtgFVxP5lRdP4EvzhKcZRMpv5/NKq2kd1
2e14XfF91MRNtGQLy4IWR9GBWO43pG/2UrT2YXVgijNqUTFmDx3SjipyLkjXD3EL
oCoy5uJL2rM0nf0oqmocFMtyrz1Iv9BeHz7XsRhcmcZAyRzL2amOdP/SNAmMmCIC
5L/eAmRBWtp8pVoI+vau3sZYEmL8S+QkSSMf1tnuljkfluABVMIUEQGDmUiDGMnH
y9qkBTVrht9SUIg/WKTeLFYebVRNyagBQEtORMiQXMtVNdrS8QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEXshN1a5Z0jIZp6a6IgrJ6BkMgSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYjljMmVkYzYtMjBkYi0z
ZjI2LTk2Y2YtOWQ3MWYwODZhM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAELkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAozE1XFXhor+GifIXH6XCiaC6Lsfi9Cpv5HEDaZryQ7D7batVuc8RAEpv
ihBJVY+UnD3nhTkNg7uAM1r3kRcGnqZCmblYTX6rAFNEAneqjkOiQ/D9wm2gLuL4
muXYTDuI9RIpRiGfkSWESuilAZpYGdjGR93iRgXu/StQfohYRgSmmU+9Nevy8L96
OgbSkDr/fs23v79KU+/D86a8pcoZEF4H8ONPVtqkHuAObEEDJ6gqrWYnJk35960E
TTRM0z9zeDoLk5Iz1aL3QZjSfnlpbI+g+oelCS+DnUThuV19sJcj85omqW9B4XMl
tKtl/Z5pH6HeCn3uRryx0zQMx6OyCw==
-----END CERTIFICATE-----
Generated at Tue Apr 15 17:01:15 2025 by rpki-client