Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf366eff-9884-327a-bccd-9a5a5407d29a.roa
File: cf366eff-9884-327a-bccd-9a5a5407d29a.roa (raw, json)
Hash identifier: UEA9gvsDScaH2pj5yDr5GEog2Jqiq0/wCyLWuxy8sAs=
Subject key identifier: 6A:7C:E8:A7:F4:61:04:D8:9A:B6:06:AD:93:47:59:01:15:EA:EA:57
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584065DB5F2A5951DC0BD1CF9F80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf366eff-9884-327a-bccd-9a5a5407d29a.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.24.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:db:5f:2a:59:51:dc:0b:d1:cf:9f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=5be2cf92-d9ec-4e3e-b9a1-caa2b14f39d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:55:9e:c7:91:c0:53:36:52:d5:16:d0:7d:
44:80:d0:98:55:de:61:bd:76:17:af:59:5b:d7:0a:
af:dd:0c:ac:b0:9e:06:b0:e3:41:46:3f:26:3e:4a:
f2:ed:47:5a:c7:e4:55:31:aa:a6:0f:df:8a:25:70:
56:e2:38:e4:1c:e1:73:0d:db:b7:69:9f:a0:be:16:
45:c8:3d:af:13:fb:ec:34:a3:7a:13:02:59:7f:fa:
59:d5:f4:ba:86:2c:71:0d:8e:9c:10:76:4b:52:50:
53:4c:54:98:3d:32:27:7f:dc:da:29:a2:31:34:81:
b9:1f:80:67:4b:40:ee:b2:7b:45:59:a2:be:24:3f:
3d:18:e4:7b:be:bd:f6:ab:ff:b0:c5:40:d3:f1:23:
94:5a:61:34:72:e7:76:8b:6c:57:79:3a:2f:14:23:
b0:f6:f4:01:d7:75:6e:b4:9f:02:8b:8c:de:ff:43:
1f:c7:ab:0a:55:4a:9b:2c:30:af:10:33:dc:34:39:
34:e0:b2:60:26:02:30:26:c9:0b:f9:31:1c:37:89:
48:f0:1e:59:42:11:44:a8:41:60:30:96:e9:3e:ea:
7e:ce:4e:1b:6c:91:94:34:eb:bf:0a:c4:ba:89:2a:
7e:a4:c4:4e:25:61:15:c7:03:d7:74:c3:9a:be:bd:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7C:E8:A7:F4:61:04:D8:9A:B6:06:AD:93:47:59:01:15:EA:EA:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf366eff-9884-327a-bccd-9a5a5407d29a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.24.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:03:ee:36:b1:5b:d7:6f:3e:d2:db:e3:bb:65:47:70:44:dc:
4c:aa:3e:3a:77:90:2f:30:d5:2b:0d:80:c1:5a:88:ff:52:f1:
0b:df:13:ce:bd:e1:43:9a:6a:6f:69:7f:99:9f:57:e8:26:d3:
8c:dc:5f:7e:b6:12:86:6d:3e:ae:22:e8:be:0a:92:47:d3:62:
90:33:31:b6:a5:2b:3f:88:94:c8:cf:29:b0:2d:ea:47:6e:49:
59:93:e8:73:3a:be:9d:76:3c:f9:15:60:57:9c:d7:74:c1:3b:
ff:4c:5a:d1:ed:ad:e5:e2:11:96:26:c2:6f:4a:76:01:9e:f8:
51:e0:61:bd:58:2c:94:0f:1f:6a:28:8b:7f:e5:e5:0e:ff:c5:
89:65:27:1b:3e:a7:05:f1:1a:ba:89:5e:1f:f5:ee:4a:cf:5b:
84:19:d0:19:70:d9:0f:db:94:ac:96:47:67:45:dd:65:9a:f1:
b4:ed:f5:0b:58:7b:de:28:41:42:a7:21:e2:82:2f:b0:8a:52:
6b:25:a2:20:65:89:70:34:ad:eb:6f:cc:6a:c8:a1:2c:be:c2:
40:9a:4f:03:a9:55:a6:54:f5:10:86:5b:a8:34:27:30:33:bf:
6a:42:57:b1:bb:54:7e:a0:ee:84:b8:10:0d:d1:58:7d:28:e8:
9c:b7:26:58
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBl218qWVHcC9HPn4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIyODEyMDAwMFoXDTIzMDIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
NWJlMmNmOTItZDllYy00ZTNlLWI5YTEtY2FhMmIxNGYzOWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHRVnseRwFM2UtUW0H1EgNCYVd5hvXYXr1lb
1wqv3QyssJ4GsONBRj8mPkry7Udax+RVMaqmD9+KJXBW4jjkHOFzDdu3aZ+gvhZF
yD2vE/vsNKN6EwJZf/pZ1fS6hixxDY6cEHZLUlBTTFSYPTInf9zaKaIxNIG5H4Bn
S0DusntFWaK+JD89GOR7vr32q/+wxUDT8SOUWmE0cud2i2xXeTovFCOw9vQB13Vu
tJ8Ci4ze/0Mfx6sKVUqbLDCvEDPcNDk04LJgJgIwJskL+TEcN4lI8B5ZQhFEqEFg
MJbpPup+zk4bbJGUNOu/CsS6iSp+pMROJWEVxwPXdMOavr3TFQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGp86Kf0YQTYmrYGrZNHWQEV6upXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvY2YzNjZlZmYtOTg4NC0z
MjdhLWJjY2QtOWE1YTU0MDdkMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEBgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKAPuNrFb128+0tvju2VHcETcTKo+OneQLzDVKw2AwVqI/1LxC98Tzr3h
Q5pqb2l/mZ9X6CbTjNxffrYShm0+riLovgqSR9NikDMxtqUrP4iUyM8psC3qR25J
WZPoczq+nXY8+RVgV5zXdME7/0xa0e2t5eIRlibCb0p2AZ74UeBhvVgslA8faiiL
f+XlDv/FiWUnGz6nBfEauoleH/XuSs9bhBnQGXDZD9uUrJZHZ0XdZZrxtO31C1h7
3ihBQqch4oIvsIpSayWiIGWJcDSt62/MasihLL7CQJpPA6lVplT1EIZbqDQnMDO/
akJXsbtUfqDuhLgQDdFYfSjonLcmWA==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:23:53 2025 by rpki-client