Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e6324add-d07f-3abc-bd3a-be76c1935e08.roa
File: e6324add-d07f-3abc-bd3a-be76c1935e08.roa (raw, json)
Hash identifier: UuFXD1AqkJGL60aH5qrfRd2acmLh9Dp9Rqh6dDuBeMs=
Subject key identifier: 12:A2:D5:85:70:F6:01:38:4D:34:0A:2B:A5:86:30:56:A8:0E:B2:59
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583EEBDDF8DEC4D3457FC8D9DC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e6324add-d07f-3abc-bd3a-be76c1935e08.roa
Signing time: Mon 15 Aug 2022 12:00:00 +0000
ROA not before: Mon 15 Aug 2022 12:00:00 +0000
ROA not after: Tue 20 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.188.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:eb:dd:f8:de:c4:d3:45:7f:c8:d9:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Aug 15 12:00:00 2022 GMT
Not After : Sep 20 04:00:00 2022 GMT
Subject: CN=38199abd-2679-41ee-ad68-f0af6a70c0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:f5:41:01:d4:25:6b:ca:61:c3:9b:bf:a2:
01:11:7e:1a:91:38:d5:8f:46:32:26:f2:3a:8f:a1:
20:86:b2:a0:5b:be:f3:c8:8c:57:77:d7:d9:db:4c:
d5:d6:65:58:93:2b:4a:7d:c5:02:19:36:8b:d3:57:
10:ec:82:5f:a0:cd:39:8b:66:92:de:88:f1:d5:0b:
e5:1f:7f:45:01:44:1c:8e:39:a7:81:b1:50:4d:3d:
64:a6:a1:51:73:b9:ad:57:6c:b3:cd:04:e3:be:8d:
83:d5:68:8c:65:ff:d7:a6:d1:18:39:d8:9b:c4:f8:
07:cc:d3:53:4a:da:84:b9:5a:31:fe:30:ef:35:e1:
60:5f:51:53:ae:05:63:dc:b3:5b:a8:f3:c1:24:81:
1a:98:0e:82:cd:17:f4:2d:e6:a0:cb:04:fb:91:b5:
5f:61:11:39:78:76:a6:0e:3c:90:4c:35:73:81:a3:
b5:87:e9:41:f6:4d:76:6d:53:0b:f8:46:f8:b9:67:
fe:f3:7f:46:76:1f:4d:fc:f9:6b:5e:f1:56:41:15:
28:ff:82:84:13:6d:fb:9a:ba:01:e8:49:bc:a1:94:
ef:79:04:9c:ce:96:2b:88:b5:9b:6c:46:27:3b:2d:
c4:df:67:f0:cf:fe:c0:09:3b:82:a1:5d:fe:55:05:
dd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A2:D5:85:70:F6:01:38:4D:34:0A:2B:A5:86:30:56:A8:0E:B2:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e6324add-d07f-3abc-bd3a-be76c1935e08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.188.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:b7:49:6f:57:6e:77:9d:39:1a:8e:e8:83:72:f8:36:9d:b8:
a5:df:47:f0:a2:73:ec:a3:91:92:d8:75:e6:b7:bb:58:34:5a:
c5:1e:61:81:3e:69:7e:02:d0:3e:44:27:4c:a8:88:84:db:78:
c1:27:9e:7f:6a:0c:d5:08:6d:eb:57:39:cc:17:dc:e9:64:d4:
c2:d4:05:5f:9f:a5:49:eb:5b:23:ff:93:b9:f0:7e:a5:e5:58:
6e:de:80:13:98:f2:d6:c4:26:7d:dc:e1:9e:fb:09:cf:e0:e6:
0e:86:19:d6:6a:94:56:9c:7d:66:22:77:af:c6:a4:1c:1b:27:
23:42:e3:a8:0f:e3:52:70:08:f2:f8:5e:a0:6f:2d:48:fb:67:
82:e4:b2:b9:31:a1:42:46:f0:d3:ce:c5:c3:9e:b2:2f:92:1d:
4b:dd:f8:0c:b2:2f:c6:58:11:15:f2:b7:f1:78:c8:4d:fb:a7:
e4:35:c7:9d:5f:82:1e:bd:87:d7:04:14:d8:0a:54:15:1a:77:
99:ce:32:f7:59:79:6c:d5:33:00:cb:4d:c0:df:2d:91:b9:24:
06:76:e7:73:59:15:10:b5:cb:26:d3:0f:23:43:58:47:81:fc:
5a:5f:0a:f7:fb:d7:aa:55:17:da:37:3c:2d:10:cd:2e:a0:22:
44:07:b2:55
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7r3fjexNNFf8jZ3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDgxNTEyMDAwMFoXDTIyMDkyMDA0MDAwMFowLzEtMCsGA1UEAxMk
MzgxOTlhYmQtMjY3OS00MWVlLWFkNjgtZjBhZjZhNzBjMGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiD1QQHUJWvKYcObv6IBEX4akTjVj0YyJvI6
j6EghrKgW77zyIxXd9fZ20zV1mVYkytKfcUCGTaL01cQ7IJfoM05i2aS3ojx1Qvl
H39FAUQcjjmngbFQTT1kpqFRc7mtV2yzzQTjvo2D1WiMZf/XptEYOdibxPgHzNNT
StqEuVox/jDvNeFgX1FTrgVj3LNbqPPBJIEamA6CzRf0LeagywT7kbVfYRE5eHam
DjyQTDVzgaO1h+lB9k12bVML+Eb4uWf+839Gdh9N/PlrXvFWQRUo/4KEE237mroB
6Em8oZTveQSczpYriLWbbEYnOy3E32fwz/7ACTuCoV3+VQXdWwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBKi1YVw9gE4TTQKK6WGMFaoDrJZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZTYzMjRhZGQtZDA3Zi0z
YWJjLWJkM2EtYmU3NmMxOTM1ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAELwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWLdJb1dud505Go7og3L4Np24pd9H8KJz7KORkth15re7WDRaxR5hgT5p
fgLQPkQnTKiIhNt4wSeef2oM1Qht61c5zBfc6WTUwtQFX5+lSetbI/+TufB+peVY
bt6AE5jy1sQmfdzhnvsJz+DmDoYZ1mqUVpx9ZiJ3r8akHBsnI0LjqA/jUnAI8vhe
oG8tSPtnguSyuTGhQkbw087Fw56yL5IdS934DLIvxlgRFfK38XjITfun5DXHnV+C
Hr2H1wQU2ApUFRp3mc4y91l5bNUzAMtNwN8tkbkkBnbnc1kVELXLJtMPI0NYR4H8
Wl8K9/vXqlUX2jc8LRDNLqAiRAeyVQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:43 2025 by rpki-client