Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3a87056-6174-323b-8078-99ace7b1a0b7.roa
File: c3a87056-6174-323b-8078-99ace7b1a0b7.roa (raw, json)
Hash identifier: F4lg8OBDKly9bCqJcstkXI3Z+/iebaWVy7swV5zToyE=
Subject key identifier: 20:54:9C:46:D1:13:72:10:AA:72:CE:A3:94:3E:81:9F:B1:19:7D:C2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF0327007BF335FAA0C330050
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3a87056-6174-323b-8078-99ace7b1a0b7.roa
Signing time: Wed 16 Nov 2022 12:00:00 +0000
ROA not before: Wed 16 Nov 2022 12:00:00 +0000
ROA not after: Thu 22 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f0:32:70:07:bf:33:5f:aa:0c:33:00:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 16 12:00:00 2022 GMT
Not After : Dec 22 05:00:00 2022 GMT
Subject: CN=be3bfa75-5cdb-472c-9878-c15a64e214db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:14:55:87:26:78:89:44:cd:0f:a0:41:8a:2e:
19:ec:9a:15:0d:17:84:ef:54:98:5b:9f:a0:b5:7f:
55:37:05:1b:67:71:7e:96:24:0e:66:65:cb:88:c6:
75:38:99:2d:79:ee:37:b0:95:d3:0a:c4:92:8b:95:
e9:24:ff:63:4d:ae:78:80:ce:5d:57:41:a0:58:6f:
79:3f:27:bd:0d:57:6d:fc:f0:91:b0:94:2e:6a:9c:
92:2c:d9:21:12:a1:87:5d:66:06:82:de:f2:77:19:
2e:fb:37:02:b3:c7:59:78:4d:eb:48:71:2b:eb:bc:
e4:71:37:18:65:84:29:d8:06:ee:ac:b2:bd:6d:1d:
b0:a2:1d:e2:9d:cc:03:10:82:48:4f:99:8b:25:16:
fd:77:9b:ba:bb:87:6f:e1:c0:72:be:37:d7:34:5b:
1b:b3:3a:fc:e0:1b:5f:a6:a1:2e:aa:8f:72:2a:23:
83:e2:19:84:f0:9c:06:3d:d3:b6:bb:0a:19:41:ab:
93:07:e7:6a:e7:f8:87:0e:c4:ff:21:13:3f:a5:a6:
27:25:51:d4:21:10:80:19:ba:99:9a:bc:f6:07:3c:
8a:e4:c2:b8:f6:69:c9:6b:cf:0a:6c:57:e9:b3:d4:
61:46:8c:af:bc:d5:32:21:25:fa:ef:03:29:3c:31:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:54:9C:46:D1:13:72:10:AA:72:CE:A3:94:3E:81:9F:B1:19:7D:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3a87056-6174-323b-8078-99ace7b1a0b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:2c:84:ed:3e:d9:b0:2d:17:96:29:fc:05:dc:f7:b7:34:da:
15:8b:6b:dd:c4:48:11:67:a4:0e:c2:71:15:e5:12:7e:5e:78:
02:c7:cb:f7:5c:7a:f2:f9:46:bb:ff:27:fb:69:b7:dd:a5:7b:
92:17:4d:a2:f1:01:ec:de:14:85:ff:9b:ba:38:24:cf:b7:61:
bc:5b:6a:85:aa:da:cc:84:e8:27:b1:ee:c1:c0:7a:4d:0f:56:
74:7a:c6:22:f3:32:65:f4:1f:e9:cb:49:42:6e:ad:5c:bb:c4:
5a:7b:1b:17:41:7e:a1:ee:6d:8b:c4:3b:e3:a6:db:8c:a1:e7:
60:e1:23:02:85:1a:84:5a:41:3f:d0:70:a6:3f:9d:7a:9b:92:
3a:0e:5b:40:55:8d:c7:d6:f3:45:6f:0b:f0:7d:c1:5c:a0:4a:
b8:7d:80:82:f2:ed:bd:73:68:2b:c4:dd:d2:6e:6f:82:7e:05:
15:67:65:d2:82:a4:c0:5f:3f:fb:b3:a7:5b:e7:83:f9:c8:63:
fc:ca:15:8f:e5:1c:0d:28:c1:c2:86:d5:96:23:27:45:6e:89:
22:0c:f6:1e:f7:cf:10:50:95:af:3d:55:d1:f8:78:7f:77:84:
3a:11:71:ad:8d:ab:bc:63:54:9d:fb:e8:07:d8:74:8f:4c:2c:
de:18:f0:dc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/wMnAHvzNfqgwzAFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExNjEyMDAwMFoXDTIyMTIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
YmUzYmZhNzUtNWNkYi00NzJjLTk4NzgtYzE1YTY0ZTIxNGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxRVhyZ4iUTND6BBii4Z7JoVDReE71SYW5+g
tX9VNwUbZ3F+liQOZmXLiMZ1OJktee43sJXTCsSSi5XpJP9jTa54gM5dV0GgWG95
Pye9DVdt/PCRsJQuapySLNkhEqGHXWYGgt7ydxku+zcCs8dZeE3rSHEr67zkcTcY
ZYQp2AburLK9bR2woh3incwDEIJIT5mLJRb9d5u6u4dv4cByvjfXNFsbszr84Btf
pqEuqo9yKiOD4hmE8JwGPdO2uwoZQauTB+dq5/iHDsT/IRM/paYnJVHUIRCAGbqZ
mrz2BzyK5MK49mnJa88KbFfps9RhRoyvvNUyISX67wMpPDF5HwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCBUnEbRE3IQqnLOo5Q+gZ+xGX3CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvYzNhODcwNTYtNjE3NC0z
MjNiLTgwNzgtOTlhY2U3YjFhMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATyyE7T7ZsC0Xlin8Bdz3tzTaFYtr3cRIEWekDsJxFeUSfl54AsfL91x6
8vlGu/8n+2m33aV7khdNovEB7N4Uhf+bujgkz7dhvFtqharazIToJ7HuwcB6TQ9W
dHrGIvMyZfQf6ctJQm6tXLvEWnsbF0F+oe5ti8Q746bbjKHnYOEjAoUahFpBP9Bw
pj+depuSOg5bQFWNx9bzRW8L8H3BXKBKuH2AgvLtvXNoK8Td0m5vgn4FFWdl0oKk
wF8/+7OnW+eD+chj/MoVj+UcDSjBwobVliMnRW6JIgz2HvfPEFCVrz1V0fh4f3eE
OhFxrY2rvGNUnfvoB9h0j0ws3hjw3A==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:22:50 2025 by rpki-client