Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bb690501-67de-3290-a390-7fa737fabdc7.roa
File: bb690501-67de-3290-a390-7fa737fabdc7.roa (raw, json)
Hash identifier: xTRdgNlwG4DT8T89CFHqM/+cH+y7VTyb9uGkJqlIUgo=
Subject key identifier: 65:44:68:30:25:02:E0:F4:84:17:48:E8:31:6D:A2:6F:85:AA:61:32
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE0D320A62E0C72D297A9A200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bb690501-67de-3290-a390-7fa737fabdc7.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e0:d3:20:a6:2e:0c:72:d2:97:a9:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=3f9925a7-044a-4f11-9a47-ebce40ee5b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a5:f8:de:28:a7:b7:39:8e:1a:8b:82:66:46:
a7:32:d7:ab:ab:55:de:2b:ca:2c:57:73:f6:df:b1:
16:1b:b1:4a:6b:88:f9:34:7c:8c:05:f7:50:a4:bb:
e7:6e:3c:a0:b1:6c:81:67:9c:17:94:51:a7:2b:be:
db:bf:76:0b:18:ea:dd:6c:d5:c9:04:a2:42:f4:21:
d2:23:67:33:79:5a:a0:24:e1:fa:52:ce:e2:69:5f:
a1:e9:64:78:65:66:43:83:37:86:94:1b:8c:7b:ba:
68:5e:24:af:b1:7d:35:51:fe:87:fc:39:cc:66:b3:
50:02:ab:1a:f9:7b:6a:33:68:13:92:d1:b7:59:18:
8e:19:1d:2a:a5:74:de:1c:7f:a3:54:a1:f1:3c:b2:
a9:d7:ac:9a:de:d0:8d:c2:30:28:7b:64:8f:e6:ac:
eb:ff:20:8d:2b:af:d3:34:e9:16:75:8b:b4:2f:22:
69:a7:fe:f7:aa:81:68:06:29:57:06:bd:67:d9:1b:
48:e1:0a:21:df:f8:7e:b1:bc:ec:1b:3f:c5:db:5a:
a6:f1:ba:90:e1:b9:58:e2:92:f4:82:6b:89:6e:4b:
ea:9d:93:9b:7b:db:8e:a6:fa:ea:30:fc:9a:52:02:
03:4a:23:1c:98:98:ff:2e:8b:4c:b0:29:db:21:f2:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:68:30:25:02:E0:F4:84:17:48:E8:31:6D:A2:6F:85:AA:61:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bb690501-67de-3290-a390-7fa737fabdc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:cc:f4:a7:8c:62:56:76:23:c7:91:bd:15:17:d3:a2:71:50:
27:99:ce:68:60:ae:43:67:35:9a:7b:47:f2:21:b8:cb:e0:cf:
ab:86:72:12:60:bb:56:1b:1d:5a:6c:2a:cd:09:a6:af:c9:ff:
5a:bd:cd:5a:62:48:30:df:a3:87:34:b6:0e:a4:4f:7d:ec:6c:
c0:2b:d6:7f:1c:f4:88:e6:77:75:4b:fa:e4:e6:5e:27:24:8b:
c4:2d:8e:31:6f:c9:7e:b3:22:7d:b6:12:0e:87:3c:29:bc:9d:
ff:5a:07:ca:23:0d:19:b1:81:78:5d:82:42:0a:a8:00:7c:cb:
df:a3:e5:3a:ce:13:d9:a3:92:f0:c4:a9:34:26:11:9f:bf:48:
58:6a:64:49:b2:5a:0c:a8:37:df:dd:93:1d:da:64:66:17:4d:
b7:e2:76:08:8f:a8:7d:b8:51:9e:d6:61:f2:bf:1f:42:31:d9:
49:a5:29:7b:9c:4a:e2:01:7e:da:d5:41:39:7c:b0:08:43:98:
e2:f2:21:13:66:1c:7a:4d:4d:72:79:0b:65:de:7e:02:f7:b5:
54:e4:bd:fb:0c:84:b4:42:2b:39:c2:09:c2:58:18:3e:a2:8d:
96:6e:ac:36:ee:f5:c0:cd:ce:ad:cb:ca:bc:bf:17:9b:6d:9f:
2d:b0:8f:71
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzg0yCmLgxy0pepogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDIwOTA1MDAwMFoXDTIyMDMxNjA0MDAwMFowLzEtMCsGA1UEAxMk
M2Y5OTI1YTctMDQ0YS00ZjExLTlhNDctZWJjZTQwZWU1YjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqX43iintzmOGouCZkanMterq1XeK8osV3P2
37EWG7FKa4j5NHyMBfdQpLvnbjygsWyBZ5wXlFGnK77bv3YLGOrdbNXJBKJC9CHS
I2czeVqgJOH6Us7iaV+h6WR4ZWZDgzeGlBuMe7poXiSvsX01Uf6H/DnMZrNQAqsa
+XtqM2gTktG3WRiOGR0qpXTeHH+jVKHxPLKp16ya3tCNwjAoe2SP5qzr/yCNK6/T
NOkWdYu0LyJpp/73qoFoBilXBr1n2RtI4Qoh3/h+sbzsGz/F21qm8bqQ4blY4pL0
gmuJbkvqnZObe9uOpvrqMPyaUgIDSiMcmJj/LotMsCnbIfKOPQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGVEaDAlAuD0hBdI6DFtom+FqmEyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmI2OTA1MDEtNjdkZS0z
MjkwLWEzOTAtN2ZhNzM3ZmFiZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYMz0p4xiVnYjx5G9FRfTonFQJ5nOaGCuQ2c1mntH8iG4y+DPq4ZyEmC7
VhsdWmwqzQmmr8n/Wr3NWmJIMN+jhzS2DqRPfexswCvWfxz0iOZ3dUv65OZeJySL
xC2OMW/JfrMifbYSDoc8Kbyd/1oHyiMNGbGBeF2CQgqoAHzL36PlOs4T2aOS8MSp
NCYRn79IWGpkSbJaDKg3392THdpkZhdNt+J2CI+ofbhRntZh8r8fQjHZSaUpe5xK
4gF+2tVBOXywCEOY4vIhE2Ycek1NcnkLZd5+Ave1VOS9+wyEtEIrOcIJwlgYPqKN
lm6sNu71wM3OrcvKvL8Xm22fLbCPcQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:46 2025 by rpki-client