Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baca5edb-ff38-31af-b6d7-b96176e7cca8.roa
File: baca5edb-ff38-31af-b6d7-b96176e7cca8.roa (raw, json)
Hash identifier: n/j3fRnebO5fkRp8t+++AjVM1Q/8itXNPB/WMLcW23Q=
Subject key identifier: 97:E4:4B:C0:E4:72:8A:41:57:52:C6:4D:E9:63:5C:6E:C7:D9:6F:B1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D59558E3751D93C04CE3ACB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baca5edb-ff38-31af-b6d7-b96176e7cca8.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.189.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:55:8e:37:51:d9:3c:04:ce:3a:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=9500ab0f-f292-4589-9c9a-f145152086b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:0c:e7:0c:f3:2f:8e:2d:4e:29:b9:15:df:
c4:d2:a2:28:5d:5b:d9:80:be:cc:3a:64:8f:be:3b:
92:ba:c6:76:f1:ea:76:df:12:a8:be:4b:c3:65:49:
32:0a:eb:bb:d6:ff:b5:50:08:16:64:68:b4:54:29:
83:1a:4f:0f:53:f3:a8:1e:89:f0:09:71:57:19:73:
c3:bd:cd:a7:12:0c:2b:c5:90:28:5d:a4:97:b4:2b:
59:c4:9a:c4:38:78:a8:ee:b5:83:19:b3:8e:91:81:
72:5a:17:c5:1f:5b:40:5b:94:9b:6e:8e:dc:35:13:
c8:2a:d1:ef:65:f2:d4:96:44:25:0e:82:3e:3b:eb:
f0:22:18:88:32:8e:cf:c5:07:69:8d:de:2f:a6:2e:
06:ec:ce:52:23:91:21:c0:04:2a:ed:60:5c:2b:f9:
1f:fc:06:b2:3a:bf:91:17:7a:21:ec:7b:86:49:79:
1c:38:3e:f2:68:ea:15:77:23:fa:05:86:6c:f0:09:
5a:68:3d:62:66:74:24:66:5b:77:2d:61:9e:d9:04:
67:6b:28:d9:4a:80:0f:a5:ea:d8:61:21:40:e7:03:
46:95:5c:c9:b0:f5:31:ae:40:2c:2e:20:16:62:b2:
84:7e:88:7a:31:e9:fc:72:50:f7:29:b6:27:d7:12:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E4:4B:C0:E4:72:8A:41:57:52:C6:4D:E9:63:5C:6E:C7:D9:6F:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/baca5edb-ff38-31af-b6d7-b96176e7cca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.189.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:26:7a:82:8f:a0:47:40:77:f1:8e:c8:9b:5d:19:29:42:3c:
24:ff:d7:f4:19:c5:51:65:1f:5d:7e:88:99:e5:8d:b0:51:20:
88:76:ae:83:1c:5d:44:40:eb:4a:80:3a:06:22:5a:ae:f0:42:
30:1b:13:f8:ec:6c:c5:00:8f:2c:48:65:d6:28:56:20:47:c1:
ce:cd:57:2f:e2:9a:ec:03:5a:57:19:5d:f1:69:95:37:73:ae:
aa:53:6b:a4:70:4b:88:5f:2c:82:ff:0e:a9:8b:b2:26:77:74:
8a:ee:b4:5b:eb:a6:96:69:82:b2:97:91:f9:49:76:f2:e0:ad:
7f:3a:4c:f6:c4:b7:82:5d:b9:42:1a:44:cc:53:91:0d:5f:03:
bf:aa:68:fb:52:39:79:67:3a:83:2e:22:7a:c1:fc:e6:14:e7:
a4:4c:51:1e:69:c7:1f:cf:eb:88:98:7a:cc:42:d9:c4:ca:a6:
b9:c3:c1:ef:8f:d8:41:59:42:9a:9a:47:4c:3f:58:e5:df:d6:
83:1d:32:27:fc:2a:8a:cb:01:44:9c:0d:71:5c:04:8a:d7:9e:
c3:33:e6:a9:2a:9e:6b:ed:1d:68:12:03:9c:54:f7:ff:77:d9:
00:5c:5f:c8:4c:49:5c:df:42:e8:ed:b9:36:76:af:90:07:1b:
49:5e:92:59
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1ZVY43Udk8BM46y4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
OTUwMGFiMGYtZjI5Mi00NTg5LTljOWEtZjE0NTE1MjA4NmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEoM5wzzL44tTim5Fd/E0qIoXVvZgL7MOmSP
vjuSusZ28ep23xKovkvDZUkyCuu71v+1UAgWZGi0VCmDGk8PU/OoHonwCXFXGXPD
vc2nEgwrxZAoXaSXtCtZxJrEOHio7rWDGbOOkYFyWhfFH1tAW5Sbbo7cNRPIKtHv
ZfLUlkQlDoI+O+vwIhiIMo7PxQdpjd4vpi4G7M5SI5EhwAQq7WBcK/kf/AayOr+R
F3oh7HuGSXkcOD7yaOoVdyP6BYZs8AlaaD1iZnQkZlt3LWGe2QRnayjZSoAPperY
YSFA5wNGlVzJsPUxrkAsLiAWYrKEfoh6Men8clD3KbYn1xKK7wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJfkS8DkcopBV1LGTeljXG7H2W+xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmFjYTVlZGItZmYzOC0z
MWFmLWI2ZDctYjk2MTc2ZTdjY2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEL0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPiZ6go+gR0B38Y7Im10ZKUI8JP/X9BnFUWUfXX6ImeWNsFEgiHaugxxd
REDrSoA6BiJarvBCMBsT+OxsxQCPLEhl1ihWIEfBzs1XL+Ka7ANaVxld8WmVN3Ou
qlNrpHBLiF8sgv8OqYuyJnd0iu60W+umlmmCspeR+Ul28uCtfzpM9sS3gl25QhpE
zFORDV8Dv6po+1I5eWc6gy4iesH85hTnpExRHmnHH8/riJh6zELZxMqmucPB74/Y
QVlCmppHTD9Y5d/Wgx0yJ/wqissBRJwNcVwEiteewzPmqSqea+0daBIDnFT3/3fZ
AFxfyExJXN9C6O25NnavkAcbSV6SWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:51:56 2025 by rpki-client