Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1ae3874-9291-3162-b3df-a673b30194ae.roa
File: d1ae3874-9291-3162-b3df-a673b30194ae.roa (raw, json)
Hash identifier: hJhNZpX8PCukxr53/Tl06ElGBwdvZvE/sHvCsevHKC0=
Subject key identifier: B8:1A:DA:98:D6:5D:E8:F0:32:8E:65:70:C8:A3:35:5F:B1:26:EC:F0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EE61C24C361C5A4D996F75000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1ae3874-9291-3162-b3df-a673b30194ae.roa
Signing time: Sat 13 Aug 2022 12:00:00 +0000
ROA not before: Sat 13 Aug 2022 12:00:00 +0000
ROA not after: Sun 18 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.214.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e6:1c:24:c3:61:c5:a4:d9:96:f7:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 13 12:00:00 2022 GMT
Not After : Sep 18 04:00:00 2022 GMT
Subject: CN=cdcd5cf5-882d-403f-ae61-2008564b8787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:e6:81:ef:72:bf:9c:ba:1c:a2:c3:ce:5b:
83:49:f9:68:d6:85:ed:81:01:2b:e1:1a:43:bf:42:
d3:e7:a4:d9:41:84:57:79:3b:35:ce:c0:2b:4d:c4:
e8:02:3a:f3:9f:bf:1e:e3:7a:5a:0d:23:94:84:23:
f3:c4:d4:90:9a:53:a3:05:2a:12:fb:c6:f0:3d:18:
a1:41:d2:20:34:dc:87:40:1d:30:5a:5d:2a:a6:fa:
65:2e:d0:5d:58:8e:65:b5:49:2c:2d:10:9d:24:55:
61:20:92:c1:18:22:aa:25:b3:44:0f:f4:b2:41:7d:
cc:b1:0d:bd:8b:cd:d0:af:33:00:49:8d:e8:f8:32:
44:f9:c8:30:4a:ba:8c:03:bd:f1:ba:6d:18:df:ed:
96:20:1f:47:8d:5a:dd:34:4f:64:b6:17:3b:72:ce:
e9:58:36:1f:ba:38:41:28:51:3a:15:76:3c:85:9c:
33:79:04:36:41:af:9a:23:7e:f5:8b:25:50:4a:24:
dd:71:ec:93:1f:75:f6:9b:66:20:67:ed:34:24:cd:
7a:b0:d2:af:c9:26:eb:ad:11:0a:02:85:be:00:f5:
5a:2f:ea:5a:cf:9d:3b:4b:4c:a6:cb:fc:da:de:1e:
02:a5:3e:69:19:72:d0:25:a8:6f:19:a1:20:4f:77:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1A:DA:98:D6:5D:E8:F0:32:8E:65:70:C8:A3:35:5F:B1:26:EC:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d1ae3874-9291-3162-b3df-a673b30194ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.214.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:a3:75:de:e0:08:28:d9:c6:e2:3b:0b:6f:bc:6c:7e:df:65:
f5:24:7a:43:86:4a:14:c4:e0:74:0e:e2:01:65:15:39:ec:cc:
82:c9:a6:a2:85:2b:b2:b1:76:c4:63:02:65:34:81:49:5c:d8:
e7:b6:8d:de:8e:14:b1:60:af:e2:d8:42:b8:de:40:c8:eb:f7:
d0:f0:86:c8:e7:f9:ca:9a:b7:e9:8e:12:f6:d4:c7:07:d0:e2:
4a:51:26:e9:1d:18:0e:0f:43:ad:cd:3f:69:8e:cb:55:39:de:
25:7f:53:ac:2c:c9:c3:30:8a:8f:d6:3b:1f:ff:e7:34:48:58:
88:b9:f4:ed:cc:56:7e:4d:9b:59:bc:56:ee:7a:25:a9:08:6b:
5e:94:71:58:8c:78:f7:d4:7b:75:5b:b5:2c:b6:51:f8:9e:69:
2f:6b:fa:c7:71:c5:61:21:eb:6f:92:81:52:51:aa:ec:e1:ed:
ae:0a:53:73:88:ca:f5:91:f2:ba:7c:4f:cf:7b:e7:57:95:ee:
b6:19:84:90:b2:8f:7d:d9:19:0a:63:0e:ba:30:6d:e2:10:0e:
e5:59:f5:bb:c1:f6:00:f5:7e:48:5b:38:e3:61:f2:7a:6c:7e:
55:b7:4e:d3:63:d1:3b:5c:c2:e8:30:87:4e:f3:a1:45:57:a3:
79:54:a5:99
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7mHCTDYcWk2Zb3UAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxMzEyMDAwMFoXDTIyMDkxODA0MDAwMFowLzEtMCsGA1UEAxMk
Y2RjZDVjZjUtODgyZC00MDNmLWFlNjEtMjAwODU2NGI4Nzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYjmge9yv5y6HKLDzluDSflo1oXtgQEr4RpD
v0LT56TZQYRXeTs1zsArTcToAjrzn78e43paDSOUhCPzxNSQmlOjBSoS+8bwPRih
QdIgNNyHQB0wWl0qpvplLtBdWI5ltUksLRCdJFVhIJLBGCKqJbNED/SyQX3MsQ29
i83QrzMASY3o+DJE+cgwSrqMA73xum0Y3+2WIB9HjVrdNE9kthc7cs7pWDYfujhB
KFE6FXY8hZwzeQQ2Qa+aI371iyVQSiTdceyTH3X2m2YgZ+00JM16sNKvySbrrREK
AoW+APVaL+paz507S0ymy/za3h4CpT5pGXLQJahvGaEgT3doQQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLga2pjWXejwMo5lcMijNV+xJuzwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDFhZTM4NzQtOTI5MS0z
MTYyLWIzZGYtYTY3M2IzMDE5NGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAENYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADqN13uAIKNnG4jsLb7xsft9l9SR6Q4ZKFMTgdA7iAWUVOezMgsmmooUr
srF2xGMCZTSBSVzY57aN3o4UsWCv4thCuN5AyOv30PCGyOf5ypq36Y4S9tTHB9Di
SlEm6R0YDg9Drc0/aY7LVTneJX9TrCzJwzCKj9Y7H//nNEhYiLn07cxWfk2bWbxW
7nolqQhrXpRxWIx499R7dVu1LLZR+J5pL2v6x3HFYSHrb5KBUlGq7OHtrgpTc4jK
9ZHyunxPz3vnV5XuthmEkLKPfdkZCmMOujBt4hAO5Vn1u8H2APV+SFs442Hyemx+
VbdO02PRO1zC6DCHTvOhRVejeVSlmQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:35 2025 by rpki-client