Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d715d603-e648-3734-8be2-f146e6263aeb.roa
File: d715d603-e648-3734-8be2-f146e6263aeb.roa (raw, json)
Hash identifier: myt52o868sd0FNeLXGNBXFLAEaTmbnyaHZGYXLeJKYk=
Subject key identifier: 45:73:C7:F4:94:57:D7:C0:83:66:B5:BA:D1:85:DB:4C:9F:F1:D9:55
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408D00078709C457758193E700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d715d603-e648-3734-8be2-f146e6263aeb.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.18.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8d:00:07:87:09:c4:57:75:81:93:e7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=95321a0d-6ec2-47e4-9f39-84fddff1532b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:51:2e:e0:67:3a:19:bf:74:ba:73:2d:a9:90:
8b:5d:3c:cb:89:8b:59:01:2d:5a:97:51:74:e2:5b:
a7:c5:69:fb:7d:4b:4a:40:0d:c6:66:05:bf:cf:e3:
72:fe:2b:ef:a9:4e:20:b0:53:dd:8d:17:5e:f6:5a:
4f:dd:c4:70:40:28:99:36:4a:ff:0c:9b:0e:93:1e:
2f:6d:ca:bc:f6:40:d6:05:35:b9:0a:0d:10:c7:60:
be:25:14:67:17:b1:a5:1d:3b:35:75:2f:4e:06:f6:
da:4e:96:00:1b:05:5e:93:07:8b:ab:15:30:6a:63:
43:34:70:b1:b0:d0:e7:94:6f:86:d4:f2:33:04:24:
b8:43:36:78:3d:f0:02:24:6a:4d:36:53:ee:a8:4e:
bc:be:60:45:f3:93:10:5f:9b:f5:de:62:a6:82:a2:
c1:1e:95:09:71:60:06:f6:c0:9e:fa:38:d4:a7:ee:
f3:fd:f6:32:37:66:40:29:0c:a3:f5:58:8b:c9:03:
e2:b6:7d:91:dc:22:8c:55:c9:72:6f:07:a6:17:d9:
a5:a8:8a:92:67:44:c0:4d:89:d3:14:61:08:b8:0d:
86:29:43:3b:af:95:8a:1b:6c:9f:69:f7:53:c6:c2:
81:68:21:3f:b9:53:dd:eb:92:48:44:e6:a9:42:2f:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:73:C7:F4:94:57:D7:C0:83:66:B5:BA:D1:85:DB:4C:9F:F1:D9:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d715d603-e648-3734-8be2-f146e6263aeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.18.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:82:f9:52:bc:80:df:4f:0d:5c:03:c9:73:24:f2:19:a8:dd:
03:c5:8a:e8:d4:e9:0b:31:ac:d9:6f:ee:e1:55:88:bd:db:32:
f6:4a:7a:7d:56:e0:59:87:86:20:9c:14:bd:d4:09:0a:7f:10:
a8:0b:fc:6b:29:75:16:0d:55:34:3a:27:c3:27:99:96:d2:37:
39:6f:6a:64:2c:30:7f:34:5a:3b:df:7e:59:d2:fd:11:e7:b3:
6a:29:2f:49:57:c8:c5:57:de:f5:0f:5c:3f:09:99:eb:c4:89:
7e:40:9b:80:20:de:c3:61:fc:ab:94:ba:da:c6:a9:6e:29:bc:
5d:66:8b:cf:2c:ab:54:bd:5b:21:60:55:63:c2:e6:c4:98:b5:
66:40:00:b9:36:35:0d:91:a4:b9:61:24:64:62:10:0f:cd:14:
aa:85:51:31:4c:c8:0d:08:27:1d:2b:15:ae:7a:3b:12:74:5f:
bb:ad:66:c4:f8:ba:94:d6:a6:49:1b:5b:86:1a:a4:20:a9:9c:
8d:5c:ef:d1:04:be:6d:22:86:2c:ad:c7:a5:4b:27:ca:24:f3:
77:8c:4d:89:27:33:f9:d9:c6:3a:c8:82:4d:fe:5d:06:b5:93:
99:5d:6c:2c:4f:e0:ce:c4:4e:be:09:27:f2:32:0f:5b:8d:44:
53:f9:cb:23
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECNAAeHCcRXdYGT5wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDExMTEyMDAwMFoXDTIzMDIxNjA1MDAwMFowLzEtMCsGA1UEAxMk
OTUzMjFhMGQtNmVjMi00N2U0LTlmMzktODRmZGRmZjE1MzJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Eu4Gc6Gb90unMtqZCLXTzLiYtZAS1al1F0
4lunxWn7fUtKQA3GZgW/z+Ny/ivvqU4gsFPdjRde9lpP3cRwQCiZNkr/DJsOkx4v
bcq89kDWBTW5Cg0Qx2C+JRRnF7GlHTs1dS9OBvbaTpYAGwVekweLqxUwamNDNHCx
sNDnlG+G1PIzBCS4QzZ4PfACJGpNNlPuqE68vmBF85MQX5v13mKmgqLBHpUJcWAG
9sCe+jjUp+7z/fYyN2ZAKQyj9ViLyQPitn2R3CKMVclybwemF9mlqIqSZ0TATYnT
FGEIuA2GKUM7r5WKG2yfafdTxsKBaCE/uVPd65JIROapQi+JUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEVzx/SUV9fAg2a1utGF20yf8dlVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDcxNWQ2MDMtZTY0OC0z
NzM0LThiZTItZjE0NmU2MjYzYWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHIL5UryA308NXAPJcyTyGajdA8WK6NTpCzGs2W/u4VWIvdsy9kp6fVbg
WYeGIJwUvdQJCn8QqAv8ayl1Fg1VNDonwyeZltI3OW9qZCwwfzRaO99+WdL9Eeez
aikvSVfIxVfe9Q9cPwmZ68SJfkCbgCDew2H8q5S62sapbim8XWaLzyyrVL1bIWBV
Y8LmxJi1ZkAAuTY1DZGkuWEkZGIQD80UqoVRMUzIDQgnHSsVrno7EnRfu61mxPi6
lNamSRtbhhqkIKmcjVzv0QS+bSKGLK3HpUsnyiTzd4xNiScz+dnGOsiCTf5dBrWT
mV1sLE/gzsROvgkn8jIPW41EU/nLIw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:22 2025 by rpki-client