Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e7b2190f-a87c-3f56-8338-11bc7ef85a3b.roa
File: e7b2190f-a87c-3f56-8338-11bc7ef85a3b.roa (raw, json)
Hash identifier: gI2XqLDY63k80WTjCocVhLRyVKDSAqputrItMGZrW3M=
Subject key identifier: AE:3E:F6:36:7F:95:8E:79:30:1E:01:2A:54:42:C2:80:8F:AC:33:F8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FAF42A60688CF7603A3F676A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e7b2190f-a87c-3f56-8338-11bc7ef85a3b.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:af:42:a6:06:88:cf:76:03:a3:f6:76:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=859f9961-54c2-4d65-804c-1843a23c01a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:71:58:7e:3c:cf:93:99:ec:74:84:21:f5:
51:fa:d0:e6:64:ee:73:51:16:27:b2:6f:a4:34:30:
1c:7c:6e:c0:d6:a1:8d:99:d6:c8:4b:5e:7d:bc:a7:
10:09:c7:47:fc:c8:a4:ab:e6:ff:e5:ab:27:ee:b5:
38:65:e9:af:c6:04:2c:54:c5:3e:7f:f7:76:91:bc:
a4:ec:2a:e3:75:68:66:dd:33:cd:9c:bf:c9:b5:08:
11:7b:70:fa:94:9b:b4:68:d9:06:04:41:12:26:56:
95:88:60:f1:06:d4:cf:d0:d2:e3:13:fc:42:a7:76:
02:45:c9:c2:65:9d:71:62:b7:7e:5a:7d:27:ea:80:
0e:e0:83:d2:14:7e:2d:39:a2:f4:57:ca:c6:c3:49:
ed:9b:cc:5d:39:b1:06:1a:69:d6:84:c1:c2:34:36:
45:4e:82:13:54:8f:4b:26:42:e3:b8:03:73:70:46:
f2:92:b1:e7:12:10:63:bb:3b:80:37:89:e5:34:f6:
26:e4:27:19:e8:e0:aa:7d:ce:21:f3:4a:8c:77:43:
72:2e:f2:4f:93:96:92:2c:1f:73:17:3b:6d:ac:28:
9a:0c:27:4f:93:32:e7:e3:df:fa:19:2e:45:5a:83:
e3:59:f5:97:b0:2a:3d:32:e6:fd:97:18:31:6d:78:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3E:F6:36:7F:95:8E:79:30:1E:01:2A:54:42:C2:80:8F:AC:33:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/e7b2190f-a87c-3f56-8338-11bc7ef85a3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:b7:97:11:c3:44:f8:5b:35:c7:9b:d3:da:fd:03:d8:1f:6a:
96:97:92:d1:27:c9:79:ea:f8:5c:6a:80:66:ce:48:56:ea:46:
00:ec:2b:49:6a:da:b9:2c:09:73:4a:5c:ac:55:17:f1:e5:a0:
91:a4:a7:12:28:42:1e:d6:e7:da:e9:72:97:59:08:52:3a:b8:
d6:91:01:9a:fb:c9:1e:5b:2f:a2:c4:0a:e4:9f:9d:60:27:e1:
a0:f2:3c:67:22:cf:ef:b8:a3:8e:bf:3a:63:2b:ad:3d:27:0c:
8c:b6:27:1e:54:c6:bc:4f:32:ce:3e:8b:dc:3c:6c:a2:40:b6:
38:99:80:bd:31:79:7c:a9:6e:4d:06:1d:43:c1:8c:b0:bf:aa:
59:48:67:0d:be:59:16:01:a2:a3:d5:31:d0:f7:98:f0:fe:ae:
20:06:8e:72:c7:b2:a7:f3:c5:51:28:78:91:01:d9:90:03:c4:
23:02:46:f3:ed:5b:ae:46:a7:dd:5e:d7:80:4a:e0:80:9e:b8:
27:85:12:7c:b9:1d:ec:58:87:d3:fd:39:5d:f5:56:26:40:83:
dd:2b:51:19:79:13:f5:8c:91:e2:f3:e3:1a:38:99:00:8a:3c:
b3:9f:5e:19:55:10:cf:d8:7e:fe:78:51:0b:ff:a2:0d:dc:64:
54:a3:19:ea
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+vQqYGiM92A6P2dqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTAyNDEyMDAwMFoXDTIyMTEyOTA1MDAwMFowLzEtMCsGA1UEAxMk
ODU5Zjk5NjEtNTRjMi00ZDY1LTgwNGMtMTg0M2EyM2MwMWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok1xWH48z5OZ7HSEIfVR+tDmZO5zURYnsm+k
NDAcfG7A1qGNmdbIS159vKcQCcdH/Mikq+b/5asn7rU4ZemvxgQsVMU+f/d2kbyk
7CrjdWhm3TPNnL/JtQgRe3D6lJu0aNkGBEESJlaViGDxBtTP0NLjE/xCp3YCRcnC
ZZ1xYrd+Wn0n6oAO4IPSFH4tOaL0V8rGw0ntm8xdObEGGmnWhMHCNDZFToITVI9L
JkLjuANzcEbykrHnEhBjuzuAN4nlNPYm5CcZ6OCqfc4h80qMd0NyLvJPk5aSLB9z
FzttrCiaDCdPkzLn49/6GS5FWoPjWfWXsCo9Mub9lxgxbXi2pwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK4+9jZ/lY55MB4BKlRCwoCPrDP4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZTdiMjE5MGYtYTg3Yy0z
ZjU2LTgzMzgtMTFiYzdlZjg1YTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEFgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAF7eXEcNE+Fs1x5vT2v0D2B9qlpeS0SfJeer4XGqAZs5IVupGAOwrSWra
uSwJc0pcrFUX8eWgkaSnEihCHtbn2ulyl1kIUjq41pEBmvvJHlsvosQK5J+dYCfh
oPI8ZyLP77ijjr86YyutPScMjLYnHlTGvE8yzj6L3DxsokC2OJmAvTF5fKluTQYd
Q8GMsL+qWUhnDb5ZFgGio9Ux0PeY8P6uIAaOcseyp/PFUSh4kQHZkAPEIwJG8+1b
rkan3V7XgErggJ64J4USfLkd7FiH0/05XfVWJkCD3StRGXkT9YyR4vPjGjiZAIo8
s59eGVUQz9h+/nhRC/+iDdxkVKMZ6g==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:44 2025 by rpki-client