Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be3a746d-45a5-37ca-a1c6-267fd45c4821.roa
File: be3a746d-45a5-37ca-a1c6-267fd45c4821.roa (raw, json)
Hash identifier: YhgM74cI8ZAh/uQcdl4Ep8L89AYJ/r0bHtXz0HCZ6a8=
Subject key identifier: 63:BD:B7:2A:98:B8:B1:B4:78:2B:10:A4:87:C4:56:DB:A1:2F:BB:30
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DD45880F57383A755AD0557C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be3a746d-45a5-37ca-a1c6-267fd45c4821.roa
Signing time: Sat 07 May 2022 12:00:00 +0000
ROA not before: Sat 07 May 2022 12:00:00 +0000
ROA not after: Sun 12 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.206.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d4:58:80:f5:73:83:a7:55:ad:05:57:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 7 12:00:00 2022 GMT
Not After : Jun 12 04:00:00 2022 GMT
Subject: CN=86e9e550-77c1-406b-a0f4-13dd7243e4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:00:6d:60:68:24:6b:40:79:c9:1c:55:47:
ca:27:a7:a2:ac:76:79:17:7c:67:8d:a5:5a:bb:27:
85:70:59:fa:1d:92:c7:58:4c:e7:62:ba:70:a9:48:
9e:28:75:4d:30:88:ca:2f:1b:b7:0c:2b:7c:71:0e:
4f:81:3d:be:71:2e:2b:d5:ad:6a:09:b7:a0:0c:a1:
a0:b2:9a:aa:8c:9f:71:e3:22:84:30:f4:cc:21:9a:
74:a8:0e:79:60:38:f9:70:b8:4d:8a:09:2e:61:a8:
10:8d:98:eb:91:88:50:91:33:65:5f:21:8b:1b:87:
82:ff:ba:8d:6a:f3:27:27:5c:b5:03:11:02:18:76:
fa:9b:d0:12:ff:96:23:98:c1:cc:a3:ec:8e:a9:a6:
d0:16:e0:be:d2:ae:63:70:42:e2:04:4f:26:0d:b3:
fa:2d:05:dc:17:57:7a:6a:2e:2b:63:b7:4c:28:23:
f0:a7:44:61:a0:56:b5:eb:ba:43:51:92:91:70:29:
bf:f5:0c:af:06:4f:36:4d:d1:88:81:e0:c8:8f:03:
d7:89:54:13:bc:0e:43:9a:7e:47:86:e2:0a:b6:0a:
40:20:38:cc:a0:bb:4f:a4:38:46:4d:0c:5a:53:92:
74:d9:10:78:2b:7a:9c:e8:e6:d3:3c:9f:8a:ac:02:
7e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BD:B7:2A:98:B8:B1:B4:78:2B:10:A4:87:C4:56:DB:A1:2F:BB:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/be3a746d-45a5-37ca-a1c6-267fd45c4821.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.206.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:0d:1f:22:90:f1:b7:ae:5e:a5:b4:98:db:91:d7:d9:66:b8:
bd:4e:66:34:df:70:5f:9f:08:1f:45:af:d4:f8:8f:6e:12:13:
b5:4f:67:47:0b:75:01:fe:30:0e:56:ce:ba:6f:f9:4d:44:47:
2b:7e:1c:75:62:ba:36:b4:c7:7a:01:6c:5e:0a:ff:fe:57:9d:
a5:9e:be:b5:88:88:8f:db:08:71:91:30:8c:84:ce:1b:dd:20:
b6:9d:31:a7:e8:ab:e6:68:af:a0:02:2d:33:8c:cb:a4:83:03:
9c:e8:cf:dd:ad:cc:5a:65:31:c3:dd:61:ee:d2:fa:9e:98:91:
31:e6:e2:a4:0c:97:c5:8c:be:03:d5:03:34:22:15:8f:0a:31:
16:3b:32:51:f2:bf:58:89:82:c6:01:cc:07:88:95:06:90:58:
bc:d5:d7:b1:3d:10:f8:47:f7:4f:87:e9:ff:ae:f2:a0:94:0f:
86:5b:2a:ac:d4:c8:49:2a:40:fe:ec:f1:72:85:67:21:de:9b:
85:2a:8d:32:73:58:8f:01:73:da:e3:7f:62:89:18:a6:84:03:
96:46:8f:9c:c4:c3:f5:bf:1c:fa:22:80:56:a3:4d:2d:6b:fb:
1c:e8:09:88:3c:30:6d:41:64:e9:9f:e2:38:87:17:3c:96:5f:
db:a1:7f:77
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3UWID1c4OnVa0FV8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDUwNzEyMDAwMFoXDTIyMDYxMjA0MDAwMFowLzEtMCsGA1UEAxMk
ODZlOWU1NTAtNzdjMS00MDZiLWEwZjQtMTNkZDcyNDNlNGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou8AbWBoJGtAeckcVUfKJ6eirHZ5F3xnjaVa
uyeFcFn6HZLHWEznYrpwqUieKHVNMIjKLxu3DCt8cQ5PgT2+cS4r1a1qCbegDKGg
spqqjJ9x4yKEMPTMIZp0qA55YDj5cLhNigkuYagQjZjrkYhQkTNlXyGLG4eC/7qN
avMnJ1y1AxECGHb6m9AS/5YjmMHMo+yOqabQFuC+0q5jcELiBE8mDbP6LQXcF1d6
ai4rY7dMKCPwp0RhoFa167pDUZKRcCm/9QyvBk82TdGIgeDIjwPXiVQTvA5Dmn5H
huIKtgpAIDjMoLtPpDhGTQxaU5J02RB4K3qc6ObTPJ+KrAJ+lwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGO9tyqYuLG0eCsQpIfEVtuhL7swMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmUzYTc0NmQtNDVhNS0z
N2NhLWExYzYtMjY3ZmQ0NWM0ODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEM4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKQ0fIpDxt65epbSY25HX2Wa4vU5mNN9wX58IH0Wv1PiPbhITtU9nRwt1
Af4wDlbOum/5TURHK34cdWK6NrTHegFsXgr//ledpZ6+tYiIj9sIcZEwjITOG90g
tp0xp+ir5mivoAItM4zLpIMDnOjP3a3MWmUxw91h7tL6npiRMebipAyXxYy+A9UD
NCIVjwoxFjsyUfK/WImCxgHMB4iVBpBYvNXXsT0Q+Ef3T4fp/67yoJQPhlsqrNTI
SSpA/uzxcoVnId6bhSqNMnNYjwFz2uN/YokYpoQDlkaPnMTD9b8c+iKAVqNNLWv7
HOgJiDwwbUFk6Z/iOIcXPJZf26F/dw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:05 2025 by rpki-client