Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfd3ae1c-150b-3007-94f8-1841f2e0d529.roa
File: dfd3ae1c-150b-3007-94f8-1841f2e0d529.roa (raw, json)
Hash identifier: lVBVvzvF/F68zR9CH1a6qCy0oixyfauT2MxvnonSp60=
Subject key identifier: 8E:AC:54:6D:33:8B:E1:AE:D0:BD:ED:14:9A:57:62:9F:FC:0F:4E:01
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403E7B731D05F0A4A5CC209400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfd3ae1c-150b-3007-94f8-1841f2e0d529.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.121.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:7b:73:1d:05:f0:a4:a5:cc:20:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=5a2315ad-cff6-4082-a5ea-f646684697ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:e3:8d:63:74:a6:a2:c2:c1:fb:5b:a6:a3:
78:17:5d:f4:d3:7d:bc:a2:78:4a:ad:aa:2f:d0:ac:
43:f9:88:43:81:1a:ec:43:a5:76:25:33:22:1a:b8:
39:25:45:1a:f3:0c:2b:52:f4:bf:6e:a4:84:1e:e9:
33:bb:b0:d4:92:a8:59:95:86:de:43:a7:36:53:50:
2a:41:b8:43:1e:3f:ba:34:10:6d:5f:5d:bd:d7:a6:
0f:06:c4:74:a9:44:3c:f1:f0:6f:b8:4c:8d:ae:e2:
93:e6:bf:35:0a:df:3e:15:77:06:72:93:96:23:37:
d2:de:61:25:27:cc:60:e3:7a:8a:c1:c1:73:51:8b:
17:64:f8:5e:46:3a:3b:c8:ce:43:14:73:e4:e8:03:
1d:8f:4f:1c:51:14:a2:e4:a1:23:26:74:2e:32:65:
fd:b0:7b:2a:55:09:9d:2e:36:9a:57:fe:0d:1b:9e:
ff:7c:2d:e5:70:93:f9:c5:3f:75:2f:3b:f7:ca:f9:
98:99:dd:7c:30:c4:59:b1:43:b4:47:6f:b9:da:29:
b1:09:14:f9:cd:63:4d:b0:89:a6:66:cc:e9:4b:8c:
4d:71:8e:94:b8:16:25:07:6b:13:de:cf:c3:ea:55:
60:b8:87:43:4d:68:48:58:08:95:2d:9c:ed:c2:9f:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AC:54:6D:33:8B:E1:AE:D0:BD:ED:14:9A:57:62:9F:FC:0F:4E:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dfd3ae1c-150b-3007-94f8-1841f2e0d529.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.121.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:87:13:d5:7d:b1:d7:d6:8c:ff:b2:f7:05:a0:83:69:37:09:
aa:00:2b:af:91:31:a3:21:bf:95:21:d1:6d:60:81:c6:b8:01:
53:b2:57:90:07:ba:d0:5b:a5:d2:f4:13:b7:6e:46:ad:f8:5e:
3a:c1:62:24:60:e4:5c:55:5c:e3:fe:de:2a:ca:0d:bc:24:d1:
93:3c:fb:a3:49:c1:b2:b5:62:22:06:58:21:8d:f4:0e:74:7c:
ce:78:c7:5e:1b:29:9e:a4:2e:24:28:02:f1:01:70:2c:af:9b:
2c:8b:a4:9c:0d:d0:70:4b:9c:a8:37:65:e4:31:91:99:20:f8:
15:e5:69:52:4f:b5:d3:da:81:c6:9d:13:a4:85:2f:55:58:d1:
1c:4b:b8:8c:61:97:3a:68:bc:e3:09:15:4f:bb:9d:81:e1:d2:
73:c0:ac:78:5f:31:43:b8:13:c3:65:4f:94:c4:58:21:15:51:
dc:ba:cb:a6:76:79:b2:a5:91:d0:8a:f0:f6:b6:3b:30:2c:0d:
46:83:5c:e9:47:7a:92:89:eb:08:60:a1:f1:cc:a7:2c:83:91:
53:10:fe:ed:8c:c1:94:57:e5:93:aa:9e:d0:2d:9a:35:f7:34:
c3:b3:dd:0d:bd:0b:b1:2e:d6:a7:f1:fc:94:0d:6b:ac:5b:0d:
b5:e4:44:c7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA+e3MdBfCkpcwglAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
NWEyMzE1YWQtY2ZmNi00MDgyLWE1ZWEtZjY0NjY4NDY5N2FkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OfjjWN0pqLCwftbpqN4F1300328onhKraov
0KxD+YhDgRrsQ6V2JTMiGrg5JUUa8wwrUvS/bqSEHukzu7DUkqhZlYbeQ6c2U1Aq
QbhDHj+6NBBtX12916YPBsR0qUQ88fBvuEyNruKT5r81Ct8+FXcGcpOWIzfS3mEl
J8xg43qKwcFzUYsXZPheRjo7yM5DFHPk6AMdj08cURSi5KEjJnQuMmX9sHsqVQmd
LjaaV/4NG57/fC3lcJP5xT91Lzv3yvmYmd18MMRZsUO0R2+52imxCRT5zWNNsImm
ZszpS4xNcY6UuBYlB2sT3s/D6lVguIdDTWhIWAiVLZztwp9ROwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFI6sVG0zi+Gu0L3tFJpXYp/8D04BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGZkM2FlMWMtMTUwYi0z
MDA3LTk0ZjgtMTg0MWYyZTBkNTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEHkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAP4cT1X2x19aM/7L3BaCDaTcJqgArr5ExoyG/lSHRbWCBxrgBU7JXkAe6
0Ful0vQTt25GrfheOsFiJGDkXFVc4/7eKsoNvCTRkzz7o0nBsrViIgZYIY30DnR8
znjHXhspnqQuJCgC8QFwLK+bLIuknA3QcEucqDdl5DGRmSD4FeVpUk+109qBxp0T
pIUvVVjRHEu4jGGXOmi84wkVT7udgeHSc8CseF8xQ7gTw2VPlMRYIRVR3LrLpnZ5
sqWR0Irw9rY7MCwNRoNc6Ud6konrCGCh8cynLIORUxD+7YzBlFflk6qe0C2aNfc0
w7PdDb0LsS7Wp/H8lA1rrFsNteRExw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:41 2025 by rpki-client