Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bef24b30-c11b-3a63-bdef-9ebc06989926.roa
File: bef24b30-c11b-3a63-bdef-9ebc06989926.roa (raw, json)
Hash identifier: zf3zJFkbF+HBJicHBnT5bWDSNEZ3JAPjwA1TgqEQBx4=
Subject key identifier: C5:8E:2C:54:06:C5:56:FF:C0:3A:97:AA:D9:EC:1B:93:50:EE:5E:74
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400DD49294D1B1C415C8916C40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bef24b30-c11b-3a63-bdef-9ebc06989926.roa
Signing time: Sun 27 Nov 2022 12:00:00 +0000
ROA not before: Sun 27 Nov 2022 12:00:00 +0000
ROA not after: Mon 02 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.26.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0d:d4:92:94:d1:b1:c4:15:c8:91:6c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 27 12:00:00 2022 GMT
Not After : Jan 2 05:00:00 2023 GMT
Subject: CN=99495f72-cc28-41ef-9bc6-8a773063314e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:0e:fe:e1:4f:72:0b:cd:8a:dd:0f:fc:f9:
89:a0:08:8a:81:45:14:a6:d5:3b:5d:6c:31:a9:32:
d0:60:0d:da:be:1a:13:7d:a3:17:64:62:1b:10:ff:
e0:c4:60:1f:86:7e:20:06:bb:fc:f6:32:0a:f4:39:
b4:49:f1:20:78:a7:bb:af:ce:f6:78:72:c5:d1:66:
45:cb:f7:08:3a:c3:a1:37:0b:cd:93:f6:8c:d3:d9:
d2:20:30:27:7a:53:b9:de:e3:0b:7d:b8:12:0e:11:
47:86:0a:bc:9c:46:77:7e:39:7c:24:ba:92:2f:e2:
00:63:fb:1a:b5:4b:89:46:c9:4c:c1:24:d1:3a:aa:
31:2e:ea:fc:1f:0f:6d:e9:3f:69:cf:28:0d:54:db:
0a:79:94:cc:ff:e8:16:98:6a:f2:ac:0f:d5:08:8d:
04:79:af:06:4c:2c:e4:ae:b0:fd:4b:b2:1b:83:0a:
61:e6:88:20:db:6e:71:24:18:2f:33:de:c4:55:80:
6f:96:10:fd:96:37:c6:b1:01:99:9b:b0:b7:4e:e7:
10:b7:8a:97:4e:39:c0:f3:02:4d:58:ae:01:be:e5:
de:e0:cf:7d:48:23:38:ed:62:27:8f:87:5d:af:c3:
59:a1:10:8d:dc:2c:20:04:55:ea:a5:a7:c2:db:d3:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:8E:2C:54:06:C5:56:FF:C0:3A:97:AA:D9:EC:1B:93:50:EE:5E:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bef24b30-c11b-3a63-bdef-9ebc06989926.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.26.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:0c:88:22:df:bb:0e:01:0e:8c:a3:de:a2:81:c6:e8:e8:b5:
9a:fd:b1:0e:c7:df:43:47:6d:dd:68:76:2a:d4:94:d2:e9:7e:
54:59:0d:66:fe:47:49:a7:48:3c:3f:a9:8d:6f:fa:2e:9b:f7:
18:cc:21:b7:5a:1e:09:a5:0a:c2:ce:37:04:b1:cf:25:4a:db:
a4:c8:7f:26:db:09:0b:f2:a8:88:fb:28:16:09:29:37:57:8b:
e8:ca:f2:f9:77:fa:8f:a5:ff:e3:ee:a9:3f:01:ff:95:a4:5f:
f5:f8:d1:e3:61:79:03:e1:97:48:97:bd:17:74:52:8e:18:5d:
7a:ca:95:a0:d7:e2:45:9f:94:17:42:77:70:3e:3d:c0:3f:02:
8c:9f:13:93:13:e9:4c:64:4e:68:42:32:eb:ca:95:d1:5e:cf:
b1:4a:51:a9:e2:b8:c5:f7:89:0d:25:b7:cc:fe:92:e8:0d:7e:
19:94:5a:9c:45:82:6b:3d:d6:d3:93:b3:72:73:aa:9e:41:1e:
a5:d8:4b:ae:78:b1:8d:e4:58:6a:a5:70:69:f0:dc:a6:af:ed:
3b:3c:0a:58:d2:42:4d:63:e4:b7:9a:84:cb:52:77:52:54:67:
34:73:3c:63:54:6d:c7:ee:15:fd:42:66:d1:a7:3b:ef:96:16:
d6:62:b5:19
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAN1JKU0bHEFciRbEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEyNzEyMDAwMFoXDTIzMDEwMjA1MDAwMFowLzEtMCsGA1UEAxMk
OTk0OTVmNzItY2MyOC00MWVmLTliYzYtOGE3NzMwNjMzMTRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsoO/uFPcgvNit0P/PmJoAiKgUUUptU7XWwx
qTLQYA3avhoTfaMXZGIbEP/gxGAfhn4gBrv89jIK9Dm0SfEgeKe7r872eHLF0WZF
y/cIOsOhNwvNk/aM09nSIDAnelO53uMLfbgSDhFHhgq8nEZ3fjl8JLqSL+IAY/sa
tUuJRslMwSTROqoxLur8Hw9t6T9pzygNVNsKeZTM/+gWmGryrA/VCI0Eea8GTCzk
rrD9S7Ibgwph5ogg225xJBgvM97EVYBvlhD9ljfGsQGZm7C3TucQt4qXTjnA8wJN
WK4BvuXe4M99SCM47WInj4ddr8NZoRCN3CwgBFXqpafC29O1yQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMWOLFQGxVb/wDqXqtnsG5NQ7l50MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmVmMjRiMzAtYzExYi0z
YTYzLWJkZWYtOWViYzA2OTg5OTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEBowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhgyIIt+7DgEOjKPeooHG6Oi1mv2xDsffQ0dt3Wh2KtSU0ul+VFkNZv5H
SadIPD+pjW/6Lpv3GMwht1oeCaUKws43BLHPJUrbpMh/JtsJC/KoiPsoFgkpN1eL
6Mry+Xf6j6X/4+6pPwH/laRf9fjR42F5A+GXSJe9F3RSjhhdesqVoNfiRZ+UF0J3
cD49wD8CjJ8TkxPpTGROaEIy68qV0V7PsUpRqeK4xfeJDSW3zP6S6A1+GZRanEWC
az3W05OzcnOqnkEepdhLrnixjeRYaqVwafDcpq/tOzwKWNJCTWPkt5qEy1J3UlRn
NHM8Y1Rtx+4V/UJm0ac775YW1mK1GQ==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:40 2025 by rpki-client