Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9aa0464-0928-39f8-a32d-d970ab83e70c.roa
File: d9aa0464-0928-39f8-a32d-d970ab83e70c.roa (raw, json)
Hash identifier: tDHaVSiKkcL9g5HQ1u90JuYBo4o7RePQGJqv0QKDdGM=
Subject key identifier: 3A:9D:8A:5E:9D:59:A2:C5:E1:14:BD:23:36:94:BE:BD:9B:C0:F9:D6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F2EA2E9F7CB1CAF0E45D63880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9aa0464-0928-39f8-a32d-d970ab83e70c.roa
Signing time: Thu 08 Sep 2022 12:00:00 +0000
ROA not before: Thu 08 Sep 2022 12:00:00 +0000
ROA not after: Fri 14 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.128.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:2e:a2:e9:f7:cb:1c:af:0e:45:d6:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 8 12:00:00 2022 GMT
Not After : Oct 14 04:00:00 2022 GMT
Subject: CN=6a49e4c6-5ad1-4160-abe9-f3b8c6823244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b6:15:f1:b6:27:5b:c2:86:b4:30:8c:e9:05:
1b:51:8a:c0:66:2d:71:10:8e:0c:fd:81:1f:73:e2:
7b:d0:dd:36:1b:80:fd:78:d4:54:1f:67:10:43:e8:
64:90:66:17:63:57:4f:03:8d:2b:c6:9f:43:d9:04:
ec:41:94:7f:0b:4f:d1:cd:23:7f:4d:72:cd:48:c0:
c0:9e:98:a2:fa:b3:a8:eb:0c:cf:e9:e7:89:71:de:
8e:32:2c:f7:70:6d:4c:54:a7:97:ee:58:38:87:07:
78:3c:1d:c7:a0:d3:1b:8a:a9:72:b2:52:c9:81:de:
35:54:c0:46:b9:62:76:9a:84:7b:46:4a:dc:ea:6d:
8f:cd:68:6a:3f:80:fd:18:b2:fa:00:af:e9:61:f9:
0d:66:d1:90:fc:50:7d:16:d8:7c:13:ce:2d:d3:b5:
32:7b:37:2b:c5:44:45:4b:78:63:65:7b:83:17:aa:
d1:83:7a:8d:c2:2d:83:c5:71:5a:4f:8e:32:1b:40:
29:42:e2:93:bd:60:81:18:67:97:cb:df:98:cb:7f:
81:5b:e4:81:19:c1:81:19:67:ac:cc:20:0f:e4:63:
29:c8:e3:16:ac:1d:45:aa:cb:57:85:18:db:0a:8e:
68:02:a8:c8:a6:25:16:b6:12:38:c0:25:70:0b:07:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9D:8A:5E:9D:59:A2:C5:E1:14:BD:23:36:94:BE:BD:9B:C0:F9:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d9aa0464-0928-39f8-a32d-d970ab83e70c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.128.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:a7:ad:69:c6:29:90:ec:37:e2:17:46:f7:4e:8a:29:bd:8f:
d9:39:b9:98:9d:25:c1:7f:72:57:2d:ec:0a:91:34:e6:a8:fa:
d8:01:87:a2:04:5e:a4:aa:6f:1c:9f:63:01:b0:1f:ed:c3:ff:
e0:1b:e1:b3:10:10:cf:82:75:f1:c0:d6:45:49:f4:42:b0:7f:
f8:d2:ad:c4:e4:44:dc:ab:16:6f:69:18:ed:8d:5e:0c:3d:37:
11:f3:2e:07:01:0c:dd:83:d8:52:1c:3b:74:87:d8:2d:d3:bd:
10:95:3b:c1:48:77:b9:04:f3:2b:27:ba:9b:0d:2a:e6:73:ef:
67:04:af:5f:2f:35:84:73:42:67:de:34:59:5f:e5:c5:f7:37:
91:a0:fc:f0:b9:d7:a7:35:a5:3f:aa:56:5b:a1:41:e6:df:32:
64:6a:ee:3f:1e:b3:63:39:67:1b:55:a0:6f:a5:68:6d:5f:f0:
1a:04:f2:67:64:88:15:7d:f9:f3:10:39:4a:42:17:09:02:85:
50:fe:52:14:9f:ab:25:08:59:45:a0:4f:63:5b:d3:5a:1d:1f:
d9:e0:ba:7f:ec:96:c2:2e:07:1a:9c:22:5d:bb:24:8b:3d:7d:
bb:b2:39:a6:ef:e6:f8:51:31:f1:64:74:cc:69:74:d0:51:22:
ae:c4:a0:94
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8uoun3yxyvDkXWOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDkwODEyMDAwMFoXDTIyMTAxNDA0MDAwMFowLzEtMCsGA1UEAxMk
NmE0OWU0YzYtNWFkMS00MTYwLWFiZTktZjNiOGM2ODIzMjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrYV8bYnW8KGtDCM6QUbUYrAZi1xEI4M/YEf
c+J70N02G4D9eNRUH2cQQ+hkkGYXY1dPA40rxp9D2QTsQZR/C0/RzSN/TXLNSMDA
npii+rOo6wzP6eeJcd6OMiz3cG1MVKeX7lg4hwd4PB3HoNMbiqlyslLJgd41VMBG
uWJ2moR7Rkrc6m2PzWhqP4D9GLL6AK/pYfkNZtGQ/FB9Fth8E84t07UyezcrxURF
S3hjZXuDF6rRg3qNwi2DxXFaT44yG0ApQuKTvWCBGGeXy9+Yy3+BW+SBGcGBGWes
zCAP5GMpyOMWrB1FqstXhRjbCo5oAqjIpiUWthI4wCVwCwdz+wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDqdil6dWaLF4RS9IzaUvr2bwPnWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZDlhYTA0NjQtMDkyOC0z
OWY4LWEzMmQtZDk3MGFiODNlNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAE6etacYpkOw34hdG906KKb2P2Tm5mJ0lwX9yVy3sCpE05qj62AGHogRe
pKpvHJ9jAbAf7cP/4BvhsxAQz4J18cDWRUn0QrB/+NKtxORE3KsWb2kY7Y1eDD03
EfMuBwEM3YPYUhw7dIfYLdO9EJU7wUh3uQTzKye6mw0q5nPvZwSvXy81hHNCZ940
WV/lxfc3kaD88LnXpzWlP6pWW6FB5t8yZGruPx6zYzlnG1Wgb6VobV/wGgTyZ2SI
FX358xA5SkIXCQKFUP5SFJ+rJQhZRaBPY1vTWh0f2eC6f+yWwi4HGpwiXbskiz19
u7I5pu/m+FEx8WR0zGl00FEirsSglA==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:47 2025 by rpki-client