Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de05b5a4-b3f6-3cdf-8efb-e5d7e2be388a.roa
File: de05b5a4-b3f6-3cdf-8efb-e5d7e2be388a.roa (raw, json)
Hash identifier: hhyEYOEtCGXAKOJHz3H+q3kCVmZK2N7fjaQ/pjqRCH4=
Subject key identifier: 7A:97:A1:B6:F6:B2:9D:47:15:A2:55:91:36:63:CD:B8:9E:8D:AC:5E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FBA390A37029C2BF75051E980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de05b5a4-b3f6-3cdf-8efb-e5d7e2be388a.roa
Signing time: Fri 28 Oct 2022 12:00:00 +0000
ROA not before: Fri 28 Oct 2022 12:00:00 +0000
ROA not after: Sat 03 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.28.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ba:39:0a:37:02:9c:2b:f7:50:51:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 28 12:00:00 2022 GMT
Not After : Dec 3 05:00:00 2022 GMT
Subject: CN=fd1d7474-bcf4-48a8-a3aa-916527d0de66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:c2:b1:be:0d:4f:89:c0:71:59:5f:65:0c:
79:3a:d2:43:d7:60:2a:dc:bf:ad:af:50:50:be:9d:
e3:89:cd:20:1e:36:86:41:46:80:c0:fa:e6:86:6f:
f5:94:75:fc:be:86:a0:f1:d2:62:cb:d8:ff:72:15:
43:17:d2:17:c7:af:81:74:ce:af:ce:0c:3b:af:20:
fb:2a:a5:ca:af:72:76:f2:37:44:7a:40:da:7e:cf:
b9:1c:1b:47:37:37:4a:2d:f4:ba:19:aa:91:bf:41:
ce:bf:b7:c0:b4:a6:89:70:7e:59:00:d9:d4:ec:0b:
a9:e8:a0:ec:f4:34:d4:e8:5c:8b:d4:0f:06:bf:df:
fc:d0:bd:0f:58:61:39:5e:8c:8c:38:ce:99:e4:9e:
d1:1f:67:07:3f:05:01:b4:d6:a2:46:86:82:f6:9c:
8e:04:75:19:8c:46:45:56:06:d2:ca:73:ab:4e:24:
ad:6a:c7:d1:57:04:60:b5:37:cf:00:94:f6:87:9d:
6b:19:fc:15:8f:88:86:98:b9:f6:ea:6d:d9:f7:23:
41:90:09:29:8c:94:52:cb:d7:7f:89:65:5e:76:04:
d6:9e:03:96:fb:35:12:71:f8:a6:a1:b6:00:ad:c0:
27:16:16:67:ac:31:58:28:6d:a8:1f:0f:99:be:7b:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:97:A1:B6:F6:B2:9D:47:15:A2:55:91:36:63:CD:B8:9E:8D:AC:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de05b5a4-b3f6-3cdf-8efb-e5d7e2be388a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:8c:f9:e0:47:8a:53:f9:e2:e1:af:5e:0c:0e:02:81:97:3e:
86:1d:53:2e:1c:40:c6:25:93:2b:65:3b:40:5b:23:46:3f:4a:
c9:1e:f7:a1:5b:25:94:97:bc:da:55:e8:90:bb:2f:30:6d:77:
28:6f:57:8b:fb:86:fb:6a:0c:2f:75:4d:e0:f7:22:d2:df:f2:
06:3d:18:59:cc:cc:b5:82:b8:92:e2:30:4e:d8:3d:1b:d6:e4:
e0:13:51:85:3b:92:ee:7f:f3:8a:98:f4:9b:1b:d1:d1:ba:17:
b0:5a:c9:51:5e:12:a9:17:1a:ba:84:02:4f:81:8b:17:7c:0e:
47:a4:fc:c2:dd:57:93:75:0a:4a:5a:51:74:f5:e1:fc:04:3b:
d6:4d:24:c0:70:1c:2d:6d:65:2b:56:69:2e:ba:f7:b1:c7:62:
d2:a3:3c:84:59:b3:46:d1:05:6e:74:06:c0:87:07:7e:02:ab:
02:8d:10:25:8e:a3:74:af:a6:a1:bb:3b:75:ae:41:12:e1:e4:
bf:06:34:a6:ab:5a:e0:b6:64:1c:f0:b9:fc:9d:2c:08:df:96:
11:b1:93:1c:8e:b0:d2:3a:4b:5d:ae:3f:45:af:11:b9:e2:0d:
ce:16:f0:71:61:3f:48:75:5d:52:91:ef:cb:1e:6d:e0:6f:ee:
f3:62:a6:dd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+6OQo3Apwr91BR6YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyODEyMDAwMFoXDTIyMTIwMzA1MDAwMFowLzEtMCsGA1UEAxMk
ZmQxZDc0NzQtYmNmNC00OGE4LWEzYWEtOTE2NTI3ZDBkZTY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTnCsb4NT4nAcVlfZQx5OtJD12Aq3L+tr1BQ
vp3jic0gHjaGQUaAwPrmhm/1lHX8voag8dJiy9j/chVDF9IXx6+BdM6vzgw7ryD7
KqXKr3J28jdEekDafs+5HBtHNzdKLfS6GaqRv0HOv7fAtKaJcH5ZANnU7Aup6KDs
9DTU6FyL1A8Gv9/80L0PWGE5XoyMOM6Z5J7RH2cHPwUBtNaiRoaC9pyOBHUZjEZF
VgbSynOrTiStasfRVwRgtTfPAJT2h51rGfwVj4iGmLn26m3Z9yNBkAkpjJRSy9d/
iWVedgTWngOW+zUScfimobYArcAnFhZnrDFYKG2oHw+ZvnvqrwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHqXobb2sp1HFaJVkTZjzbiejaxeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGUwNWI1YTQtYjNmNi0z
Y2RmLThlZmItZTVkN2UyYmUzODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAVoz54EeKU/ni4a9eDA4CgZc+hh1TLhxAxiWTK2U7QFsjRj9KyR73oVsl
lJe82lXokLsvMG13KG9Xi/uG+2oML3VN4Pci0t/yBj0YWczMtYK4kuIwTtg9G9bk
4BNRhTuS7n/zipj0mxvR0boXsFrJUV4SqRcauoQCT4GLF3wOR6T8wt1Xk3UKSlpR
dPXh/AQ71k0kwHAcLW1lK1ZpLrr3scdi0qM8hFmzRtEFbnQGwIcHfgKrAo0QJY6j
dK+mobs7da5BEuHkvwY0pqta4LZkHPC5/J0sCN+WEbGTHI6w0jpLXa4/Ra8RueIN
zhbwcWE/SHVdUpHvyx5t4G/u82Km3Q==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:53:26 2025 by rpki-client