Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfa3cb5b-4dc9-3717-8c52-2ff9e118c3ab.roa
File: bfa3cb5b-4dc9-3717-8c52-2ff9e118c3ab.roa (raw, json)
Hash identifier: QtuhbTI7UBSuRzarA2pmV5hzRK71Ua7N+Q3EKhXJWx8=
Subject key identifier: 04:B4:A3:D6:C2:25:58:9B:23:0C:DF:FC:CB:91:D3:99:46:C4:6B:4A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E922EC540AA52865752E91280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfa3cb5b-4dc9-3717-8c52-2ff9e118c3ab.roa
Signing time: Thu 14 Jul 2022 21:12:08 +0000
ROA not before: Thu 14 Jul 2022 21:12:08 +0000
ROA not after: Fri 19 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.135.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:92:2e:c5:40:aa:52:86:57:52:e9:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 14 21:12:08 2022 GMT
Not After : Aug 19 04:00:00 2022 GMT
Subject: CN=27af95d6-9686-4717-98c8-dbb1c0b49d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dc:3d:58:6d:39:da:4c:01:68:d5:47:fa:95:
3f:bd:40:6c:45:c9:72:15:9d:b8:7d:af:31:7d:ef:
16:72:dd:ab:d6:e0:1d:19:78:64:07:c5:11:c4:79:
0d:7c:7a:55:c4:f0:41:4b:05:93:fd:0c:17:ad:01:
fc:0f:44:6b:92:1a:f5:81:ba:25:2e:e6:42:6d:c8:
9f:65:b3:86:7a:68:38:72:2d:9b:7b:65:2f:c5:32:
55:0b:9d:f3:66:62:3d:77:48:c1:96:9f:41:f3:b3:
a6:53:1b:23:8b:ee:7d:35:2d:6f:9c:8b:e9:a9:6a:
0a:67:20:74:82:07:87:92:7e:ae:fc:35:75:2d:03:
98:8e:80:9d:30:54:ea:26:97:cb:c9:c2:11:12:8e:
f3:0a:43:8c:a5:89:ee:bd:c4:7a:cd:15:c1:fb:27:
68:01:7c:66:d0:88:dc:cb:e5:ee:2d:39:b6:f2:fc:
91:2e:75:e7:ba:4f:8d:4a:46:50:4a:d6:50:41:39:
a8:5b:ae:ae:ac:14:41:66:25:e0:8e:e9:5d:10:d2:
d0:86:6b:5c:3e:ee:bf:6a:90:0b:a0:5c:57:fc:d5:
ce:b2:9e:9c:02:55:ff:95:38:02:dc:ea:cd:ec:b3:
bc:c1:f7:2c:98:89:8d:34:6f:6b:05:75:4a:de:87:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:A3:D6:C2:25:58:9B:23:0C:DF:FC:CB:91:D3:99:46:C4:6B:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bfa3cb5b-4dc9-3717-8c52-2ff9e118c3ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.135.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:05:a5:15:9f:10:0e:bb:63:21:51:bc:f5:6d:14:3c:38:4c:
f7:f8:95:99:0c:7f:f3:24:f9:89:fe:1b:f8:4a:08:c7:b0:0c:
7b:cb:62:c0:48:9b:bd:32:e8:0e:e7:c8:0d:37:2b:2e:bd:4c:
ad:21:e4:bc:b9:28:3c:d1:01:d0:80:0c:5a:df:0f:f2:a9:49:
68:b4:1f:fb:2f:90:97:42:1e:e1:ef:1f:aa:fc:48:48:96:3d:
e4:21:eb:85:89:43:73:1c:c8:a4:d3:f1:82:67:cc:0b:2b:d6:
bd:ed:1c:3c:de:59:e8:86:97:d6:ce:cb:cb:af:47:ed:ab:5e:
e6:4d:90:cf:57:1c:0f:13:6c:78:ba:2f:5b:4a:1c:ce:d9:8e:
cd:6e:32:d9:99:b5:f3:90:48:79:92:08:36:8d:4a:d1:33:9d:
ac:da:81:78:f4:d9:4b:9d:c5:ac:0c:2e:d8:3f:fd:b5:c9:44:
6a:db:ac:1b:48:7b:76:d7:a8:fa:b9:af:7c:2d:76:a5:b3:2a:
74:a4:78:91:14:5a:45:05:e8:94:78:2c:1a:4f:41:35:c9:ab:
1d:d6:f6:9f:e6:99:78:b3:1d:ca:12:6d:73:3e:67:bf:d0:31:
43:dd:64:74:78:d4:46:e5:59:51:ee:74:77:d2:8d:b7:b5:29:
0a:21:44:ff
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6SLsVAqlKGV1LpEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxNDIxMTIwOFoXDTIyMDgxOTA0MDAwMFowLzEtMCsGA1UEAxMk
MjdhZjk1ZDYtOTY4Ni00NzE3LTk4YzgtZGJiMWMwYjQ5ZDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdw9WG052kwBaNVH+pU/vUBsRclyFZ24fa8x
fe8Wct2r1uAdGXhkB8URxHkNfHpVxPBBSwWT/QwXrQH8D0Rrkhr1gbolLuZCbcif
ZbOGemg4ci2be2UvxTJVC53zZmI9d0jBlp9B87OmUxsji+59NS1vnIvpqWoKZyB0
ggeHkn6u/DV1LQOYjoCdMFTqJpfLycIREo7zCkOMpYnuvcR6zRXB+ydoAXxm0Ijc
y+XuLTm28vyRLnXnuk+NSkZQStZQQTmoW66urBRBZiXgjuldENLQhmtcPu6/apAL
oFxX/NXOsp6cAlX/lTgC3OrN7LO8wfcsmImNNG9rBXVK3ocnBQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAS0o9bCJVibIwzf/MuR05lGxGtKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYmZhM2NiNWItNGRjOS0z
NzE3LThjNTItMmZmOWUxMThjM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfAWlFZ8QDrtjIVG89W0UPDhM9/iVmQx/8yT5if4b+EoIx7AMe8tiwEib
vTLoDufIDTcrLr1MrSHkvLkoPNEB0IAMWt8P8qlJaLQf+y+Ql0Ie4e8fqvxISJY9
5CHrhYlDcxzIpNPxgmfMCyvWve0cPN5Z6IaX1s7Ly69H7ate5k2Qz1ccDxNseLov
W0ocztmOzW4y2Zm185BIeZIINo1K0TOdrNqBePTZS53FrAwu2D/9tclEatusG0h7
dteo+rmvfC12pbMqdKR4kRRaRQXolHgsGk9BNcmrHdb2n+aZeLMdyhJtcz5nv9Ax
Q91kdHjURuVZUe50d9KNt7UpCiFE/w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:14 2025 by rpki-client