Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de2920f0-3f04-35a0-a72e-82e4200c5076.roa
File: de2920f0-3f04-35a0-a72e-82e4200c5076.roa (raw, json)
Hash identifier: bMocSeV2ckN/Tl8wGd0OxE8FNB8d73z55AFYhkAn5IA=
Subject key identifier: 42:4B:1B:1C:87:64:3D:27:2D:B4:C9:74:6F:C0:42:5A:5C:76:F8:2B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F8E5E7DBF50342580028D9780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de2920f0-3f04-35a0-a72e-82e4200c5076.roa
Signing time: Wed 12 Oct 2022 12:00:00 +0000
ROA not before: Wed 12 Oct 2022 12:00:00 +0000
ROA not after: Thu 17 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.146.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8e:5e:7d:bf:50:34:25:80:02:8d:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 12 12:00:00 2022 GMT
Not After : Nov 17 05:00:00 2022 GMT
Subject: CN=7b13274f-38db-43b2-8c6f-5ed7f225ac92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:8f:cc:b7:db:48:05:16:cc:1f:25:4e:d9:
eb:75:5d:5f:89:75:55:72:79:2f:96:a2:7f:32:0b:
c5:6f:8e:97:7c:82:8f:a4:00:b6:76:0b:57:7e:19:
fe:e4:ae:0f:52:66:4c:53:1e:16:af:e6:0c:e0:db:
69:01:1d:d8:3e:e6:1e:cb:d6:6d:75:83:77:2e:11:
da:dd:66:66:b2:45:dd:c7:2d:be:b4:53:cd:5c:88:
95:d5:93:1d:fd:9a:0f:3c:30:93:5f:03:31:cb:c5:
59:e6:94:ce:f0:26:58:c4:4f:47:0a:15:f8:e0:d6:
32:16:f8:be:5e:7b:87:a3:3e:cc:48:8b:ad:c7:63:
f5:40:ca:89:84:f3:f4:ef:2c:d9:c2:22:0a:ec:ce:
48:d0:b6:6d:72:34:3d:c0:6f:2a:ef:5e:b9:51:62:
49:e7:84:58:7a:82:64:1c:ab:8c:14:f9:01:0d:9e:
2f:0b:10:4d:30:19:58:fa:9f:02:41:29:d5:a2:a3:
ef:9b:69:d5:0f:c7:aa:d4:ed:ef:57:69:21:2e:6a:
ff:be:fa:04:92:a7:bf:5e:a4:3f:93:ac:01:30:54:
ac:d9:fe:99:a6:f3:72:32:12:17:ce:9c:0c:e2:60:
a6:8b:69:f5:e9:09:de:c8:5e:2c:d6:ce:1f:02:5c:
c3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:1B:1C:87:64:3D:27:2D:B4:C9:74:6F:C0:42:5A:5C:76:F8:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/de2920f0-3f04-35a0-a72e-82e4200c5076.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.146.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:14:8f:bf:d8:82:3d:11:7c:6d:fa:5e:88:b8:9e:71:2c:53:
da:b6:f4:18:00:61:5c:fe:2e:fd:c5:7f:70:6d:48:94:1b:da:
6f:74:2a:05:53:a0:7d:49:76:f0:93:8b:3c:e4:a8:08:bc:62:
75:b5:25:8e:1c:b6:05:28:af:b4:03:69:6a:b0:a3:9c:c2:92:
7f:49:4c:a2:73:fc:c2:9b:fc:54:1a:e6:ad:28:44:7c:7c:56:
c0:d3:c3:79:76:35:0d:44:d3:e8:7d:4c:93:95:01:cf:5d:53:
82:40:3a:b7:2c:0f:6b:18:ff:a1:ae:46:e9:1f:8b:19:dd:e5:
3a:fc:a0:2d:8a:63:f0:3f:c5:c7:31:f3:bd:55:4c:94:73:fb:
6a:79:4b:ca:9a:a6:74:00:e9:50:29:ed:c8:74:6c:33:d4:c9:
6b:e9:ed:84:9b:37:1f:36:4f:7d:f6:78:9c:d1:a7:66:fb:ee:
83:30:44:52:d7:f8:9a:e3:ee:a0:5b:a4:34:9f:3f:8a:51:be:
2d:92:63:a3:15:e0:fa:c6:51:d4:4c:be:d7:4b:3f:00:df:b9:
77:35:0c:dc:ec:c1:ee:4e:f9:c2:55:c5:1f:86:45:61:61:95:
24:5e:de:21:3c:ce:54:c4:ed:a0:a2:b6:ad:45:74:b1:05:45:
70:9e:0d:39
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+OXn2/UDQlgAKNl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAxMjEyMDAwMFoXDTIyMTExNzA1MDAwMFowLzEtMCsGA1UEAxMk
N2IxMzI3NGYtMzhkYi00M2IyLThjNmYtNWVkN2YyMjVhYzkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwniPzLfbSAUWzB8lTtnrdV1fiXVVcnkvlqJ/
MgvFb46XfIKPpAC2dgtXfhn+5K4PUmZMUx4Wr+YM4NtpAR3YPuYey9ZtdYN3LhHa
3WZmskXdxy2+tFPNXIiV1ZMd/ZoPPDCTXwMxy8VZ5pTO8CZYxE9HChX44NYyFvi+
XnuHoz7MSIutx2P1QMqJhPP07yzZwiIK7M5I0LZtcjQ9wG8q7165UWJJ54RYeoJk
HKuMFPkBDZ4vCxBNMBlY+p8CQSnVoqPvm2nVD8eq1O3vV2khLmr/vvoEkqe/XqQ/
k6wBMFSs2f6ZpvNyMhIXzpwM4mCmi2n16QneyF4s1s4fAlzDZwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEJLGxyHZD0nLbTJdG/AQlpcdvgrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGUyOTIwZjAtM2YwNC0z
NWEwLWE3MmUtODJlNDIwMGM1MDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEARRSPv9iCPRF8bfpeiLiecSxT2rb0GABhXP4u/cV/cG1IlBvab3QqBVOg
fUl28JOLPOSoCLxidbUljhy2BSivtANparCjnMKSf0lMonP8wpv8VBrmrShEfHxW
wNPDeXY1DUTT6H1Mk5UBz11TgkA6tywPaxj/oa5G6R+LGd3lOvygLYpj8D/FxzHz
vVVMlHP7anlLypqmdADpUCntyHRsM9TJa+nthJs3HzZPffZ4nNGnZvvugzBEUtf4
muPuoFukNJ8/ilG+LZJjoxXg+sZR1Ey+10s/AN+5dzUM3OzB7k75wlXFH4ZFYWGV
JF7eITzOVMTtoKK2rUV0sQVFcJ4NOQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:14 2025 by rpki-client