Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd57e462-5a68-3c61-8f73-b44058501ceb.roa
File: dd57e462-5a68-3c61-8f73-b44058501ceb.roa (raw, json)
Hash identifier: 7HabsqIr/JxBeaC43kacNE76Z9wlOcgBm1xE1T5CbrA=
Subject key identifier: 1A:BB:E1:2B:E7:D2:54:1F:D3:16:08:B7:5D:FF:8D:15:7A:94:9A:16
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2ECA6951D2F88CC25D596180
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd57e462-5a68-3c61-8f73-b44058501ceb.roa
Signing time: Wed 09 Mar 2022 05:00:00 +0000
ROA not before: Wed 09 Mar 2022 05:00:00 +0000
ROA not after: Wed 13 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.151.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2e:ca:69:51:d2:f8:8c:c2:5d:59:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 9 05:00:00 2022 GMT
Not After : Apr 13 04:00:00 2022 GMT
Subject: CN=f50bb361-3919-4f3f-9f86-a6d2a26f6525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2a:0f:0a:b4:3e:e2:1f:3e:e7:8e:59:76:66:
bc:84:b4:56:9c:ef:76:de:f9:a4:3a:2f:4c:8f:07:
68:c7:dd:73:c2:f2:05:55:0d:04:16:79:ba:01:22:
a8:21:49:bf:d1:e7:89:be:15:fa:c7:a1:a3:f4:53:
c5:ea:5d:7c:46:80:86:af:0d:82:27:f9:71:da:a1:
31:40:aa:fc:cf:23:08:e6:4c:0a:45:4f:4a:38:2b:
38:99:73:79:a8:af:d7:8c:6f:64:1c:76:8b:0c:5e:
45:0d:18:27:1a:ec:5d:ad:6a:1b:1e:e1:e7:0d:cc:
66:35:8b:cb:22:84:e7:6b:20:f7:a3:5f:24:ae:04:
23:ca:78:e3:d1:63:9f:05:40:0a:69:bd:bf:20:70:
46:f9:43:da:74:bf:47:06:9a:47:6c:9b:2d:5a:86:
ea:c9:0a:6c:fa:49:f5:39:f7:e7:24:8e:94:8f:d2:
8f:05:64:3b:56:e1:ab:7f:9f:b8:77:b9:2b:2f:08:
b7:99:90:7f:b6:b6:22:7c:0b:cd:85:17:39:46:89:
79:c3:cd:28:3a:7f:25:77:9f:37:e8:a4:7c:6c:ce:
39:63:df:03:36:e6:3c:ab:79:cc:e8:7b:ba:99:58:
c3:bb:05:8a:7f:a5:c2:85:a4:02:5d:d8:33:bd:8c:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BB:E1:2B:E7:D2:54:1F:D3:16:08:B7:5D:FF:8D:15:7A:94:9A:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dd57e462-5a68-3c61-8f73-b44058501ceb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.151.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:65:5b:56:7b:46:51:7a:2d:a9:97:3f:a1:e7:f6:0c:02:6a:
ce:c4:05:05:79:8f:e0:f5:4d:3f:62:05:6c:82:c5:0f:88:1f:
0c:9a:19:6d:1b:05:c1:f8:d9:bf:a2:ec:f0:3c:b7:de:b1:dd:
82:70:4a:7a:ea:66:df:d1:7b:15:29:4d:b9:62:0a:19:17:e9:
43:e5:74:e7:19:cf:2f:ec:f2:1c:98:7f:92:4d:0b:8a:a1:7b:
d2:cf:53:39:f4:92:fa:10:0b:4c:68:7d:ae:54:9d:da:08:b9:
30:59:a9:88:cb:c8:40:bf:cf:41:16:b9:cd:69:4a:c8:61:a6:
62:64:55:06:f8:3c:07:01:e2:58:47:37:38:75:19:8c:30:9e:
71:d7:af:64:44:56:31:08:3b:28:43:7a:d3:c3:04:3c:05:15:
9c:df:fa:3c:1a:d2:f4:86:be:1f:fb:47:7a:e1:ff:b8:3f:ce:
98:4e:7a:b2:8d:39:a0:41:de:7e:5f:7c:ff:52:3a:85:eb:1d:
36:a3:9d:c8:dc:ed:de:d6:92:09:cd:6c:30:bf:2e:35:8f:9e:
91:2e:16:7b:00:eb:b6:27:9a:8a:60:97:73:f5:c0:9b:10:67:
dd:dc:f8:88:13:87:c2:79:8b:56:9c:d1:ac:21:9f:a9:e0:45:
2b:47:0a:fe
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0uymlR0viMwl1ZYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMwOTA1MDAwMFoXDTIyMDQxMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZjUwYmIzNjEtMzkxOS00ZjNmLTlmODYtYTZkMmEyNmY2NTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryoPCrQ+4h8+545Zdma8hLRWnO923vmkOi9M
jwdox91zwvIFVQ0EFnm6ASKoIUm/0eeJvhX6x6Gj9FPF6l18RoCGrw2CJ/lx2qEx
QKr8zyMI5kwKRU9KOCs4mXN5qK/XjG9kHHaLDF5FDRgnGuxdrWobHuHnDcxmNYvL
IoTnayD3o18krgQjynjj0WOfBUAKab2/IHBG+UPadL9HBppHbJstWobqyQps+kn1
OffnJI6Uj9KPBWQ7VuGrf5+4d7krLwi3mZB/trYifAvNhRc5Rol5w80oOn8ld583
6KR8bM45Y98DNuY8q3nM6Hu6mVjDuwWKf6XChaQCXdgzvYzINQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBq74Svn0lQf0xYIt13/jRV6lJoWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGQ1N2U0NjItNWE2OC0z
YzYxLThmNzMtYjQ0MDU4NTAxY2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAo2VbVntGUXotqZc/oef2DAJqzsQFBXmP4PVNP2IFbILFD4gfDJoZbRsF
wfjZv6Ls8Dy33rHdgnBKeupm39F7FSlNuWIKGRfpQ+V05xnPL+zyHJh/kk0LiqF7
0s9TOfSS+hALTGh9rlSd2gi5MFmpiMvIQL/PQRa5zWlKyGGmYmRVBvg8BwHiWEc3
OHUZjDCecdevZERWMQg7KEN608MEPAUVnN/6PBrS9Ia+H/tHeuH/uD/OmE56so05
oEHefl98/1I6hesdNqOdyNzt3taSCc1sML8uNY+ekS4WewDrtieaimCXc/XAmxBn
3dz4iBOHwnmLVpzRrCGfqeBFK0cK/g==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:07 2025 by rpki-client