Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df91aed0-cfea-390d-8f26-0a03169bce96.roa
File: df91aed0-cfea-390d-8f26-0a03169bce96.roa (raw, json)
Hash identifier: 0/vJa774xNJ9UUn8eToETq7BrSHgH+/XKvPcCxMB53s=
Subject key identifier: 34:EF:B4:38:D5:6E:78:1D:0C:22:86:1A:52:22:F6:6B:15:2A:4E:6B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584040A24612B31C06B7E449C040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df91aed0-cfea-390d-8f26-0a03169bce96.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:a2:46:12:b3:1c:06:b7:e4:49:c0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=15855795-c828-440e-91e4-9cd759a9cb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:da:46:bf:c9:fa:8f:c7:39:5a:e7:b0:e5:
13:ba:0e:b1:b4:ef:d5:73:eb:96:c1:fd:fa:43:83:
18:26:50:4b:05:63:af:86:cc:cc:89:64:0c:3d:6f:
df:17:72:1e:cd:1a:29:62:ab:85:b7:60:e9:1c:a4:
8b:33:12:80:5f:0d:68:5f:b9:d3:95:0c:27:70:45:
f4:90:6d:74:16:c2:3d:f8:09:6f:3c:1b:12:5a:33:
fa:1f:8b:ba:93:5f:a9:1e:f4:99:73:4b:98:58:50:
c9:cd:74:27:7d:b4:c2:4b:45:33:00:bc:84:f2:36:
3d:b3:84:95:a7:4d:34:35:3f:e8:3b:3a:dd:95:6d:
1a:c8:01:63:01:2c:36:bd:fc:09:ac:26:9c:e5:b5:
62:c0:f8:87:0c:38:05:2e:2c:f6:48:9a:ca:cc:c5:
fb:e2:ad:b8:a4:8d:7d:5b:0b:7b:66:0f:f0:49:a9:
08:59:ed:06:20:94:fa:db:9a:55:bc:ee:83:da:6a:
2b:f5:79:f4:24:10:88:5b:ae:11:7e:6f:1a:a0:0a:
ad:aa:14:14:25:19:25:d9:ce:48:fe:7a:6e:1d:b2:
4a:0d:a9:89:c7:0d:56:a2:71:20:69:5d:56:3c:34:
25:2b:b1:05:83:0b:5b:58:51:45:a7:fc:c7:59:90:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EF:B4:38:D5:6E:78:1D:0C:22:86:1A:52:22:F6:6B:15:2A:4E:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/df91aed0-cfea-390d-8f26-0a03169bce96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:1a:27:d3:05:e0:02:d8:e1:3c:4f:d2:14:55:a5:70:29:de:
ae:97:38:b1:70:d5:b9:97:eb:6b:b2:cd:62:b9:f1:56:53:88:
6c:fd:54:ee:2c:47:f3:67:8d:97:e6:0c:93:d4:b8:9f:b0:cf:
b8:46:0e:c3:17:0f:b3:a6:19:81:63:8d:e7:18:5a:46:58:6a:
5c:76:73:ff:f6:99:9d:b8:c1:c8:d7:6b:92:cc:9c:46:95:6e:
23:f7:4f:eb:3d:07:0a:fc:f8:c4:22:dd:7b:1c:4c:8b:ef:76:
4e:c8:39:b0:60:66:6f:d0:73:93:86:c6:60:1b:97:70:b3:71:
27:38:2e:8c:5f:aa:7e:36:d1:ba:5d:6b:4a:cc:13:7c:e8:67:
db:0e:ab:f1:a1:27:7b:32:27:bf:81:d0:20:08:66:13:3e:b4:
9b:54:32:d5:2f:55:37:7d:69:57:57:58:aa:06:02:00:38:e3:
a8:c9:81:27:b4:c0:f0:b7:0d:22:d2:79:26:c3:05:6f:00:8f:
40:1f:af:89:e8:da:bb:7f:02:dd:35:3c:f8:14:01:89:f8:be:
47:25:66:39:3b:32:e2:26:1e:11:4a:cf:fd:e0:1f:7b:e6:94:
0e:98:b4:fb:66:ec:af:d2:db:06:29:3e:7e:87:78:c0:1a:ea:
f1:9a:ec:ff
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBAokYSsxwGt+RJwEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNTEyMDAwMFoXDTIzMDEyMDA1MDAwMFowLzEtMCsGA1UEAxMk
MTU4NTU3OTUtYzgyOC00NDBlLTkxZTQtOWNkNzU5YTljYjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFXaRr/J+o/HOVrnsOUTug6xtO/Vc+uWwf36
Q4MYJlBLBWOvhszMiWQMPW/fF3IezRopYquFt2DpHKSLMxKAXw1oX7nTlQwncEX0
kG10FsI9+AlvPBsSWjP6H4u6k1+pHvSZc0uYWFDJzXQnfbTCS0UzALyE8jY9s4SV
p000NT/oOzrdlW0ayAFjASw2vfwJrCac5bViwPiHDDgFLiz2SJrKzMX74q24pI19
Wwt7Zg/wSakIWe0GIJT625pVvO6D2mor9Xn0JBCIW64Rfm8aoAqtqhQUJRkl2c5I
/npuHbJKDamJxw1WonEgaV1WPDQlK7EFgwtbWFFFp/zHWZB3XQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDTvtDjVbngdDCKGGlIi9msVKk5rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGY5MWFlZDAtY2ZlYS0z
OTBkLThmMjYtMGEwMzE2OWJjZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJ0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEABxon0wXgAtjhPE/SFFWlcCnerpc4sXDVuZfra7LNYrnxVlOIbP1U7ixH
82eNl+YMk9S4n7DPuEYOwxcPs6YZgWON5xhaRlhqXHZz//aZnbjByNdrksycRpVu
I/dP6z0HCvz4xCLdexxMi+92Tsg5sGBmb9Bzk4bGYBuXcLNxJzgujF+qfjbRul1r
SswTfOhn2w6r8aEnezInv4HQIAhmEz60m1Qy1S9VN31pV1dYqgYCADjjqMmBJ7TA
8LcNItJ5JsMFbwCPQB+viejau38C3TU8+BQBifi+RyVmOTsy4iYeEUrP/eAfe+aU
Dpi0+2bsr9LbBik+fod4wBrq8Zrs/w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:55 2025 by rpki-client