Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee7ed9a6-949c-31e2-882d-b25b3f6cde93.roa
File: ee7ed9a6-949c-31e2-882d-b25b3f6cde93.roa (raw, json)
Hash identifier: VCtQUH8yU0BYrDim0EvGDQrMA2CnZVZnBha5t9fGgkQ=
Subject key identifier: BD:91:15:5C:42:1E:42:C5:8A:71:B3:6D:D3:99:44:FD:C9:9A:65:7D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403EAF89F481AA70D6325CE040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee7ed9a6-949c-31e2-882d-b25b3f6cde93.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.29.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:af:89:f4:81:aa:70:d6:32:5c:e0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=f2d8944d-481f-42b0-ab2c-29f915ddd2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:a6:94:b5:76:e8:17:2c:1e:4f:e5:ad:4e:
d0:36:c4:f1:8a:46:2d:97:bb:1b:50:ac:d4:6b:45:
9a:59:12:8f:03:f6:ba:7a:ae:b3:69:89:c2:f0:8e:
8b:75:6b:77:b1:10:5a:01:22:59:30:3e:af:3d:a1:
93:bc:47:a2:84:23:1f:6e:1b:ae:e7:a8:8a:73:cb:
61:d6:8a:48:93:19:c0:cb:3a:1b:97:1b:34:a9:64:
e4:cf:1a:c6:09:16:1d:02:49:08:13:b7:e8:49:79:
96:3a:89:79:9a:62:11:b7:2c:32:66:06:0b:1d:d7:
df:e0:bf:ba:d1:7f:ab:cc:e3:71:ae:82:1b:5f:54:
32:7d:3f:39:9f:07:27:c1:cf:89:84:16:b0:cc:16:
a5:2a:60:8d:44:a2:f0:61:e3:51:14:32:8a:87:53:
06:ef:85:71:27:70:d7:8d:dc:68:3e:18:f1:61:dd:
16:a2:da:23:14:0f:62:df:cc:24:b2:04:59:14:01:
c1:53:d6:da:be:4b:91:5e:45:08:2b:f1:92:b5:90:
7a:35:4c:19:78:6b:8b:26:54:aa:45:11:ee:0c:cb:
0d:f2:7c:fb:a1:ce:b6:73:4a:59:1b:16:bf:e5:2d:
9b:ee:5b:e0:24:84:a8:58:1c:25:be:b1:36:15:76:
fe:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:91:15:5C:42:1E:42:C5:8A:71:B3:6D:D3:99:44:FD:C9:9A:65:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ee7ed9a6-949c-31e2-882d-b25b3f6cde93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.29.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:c3:93:40:8f:e0:f5:51:84:ce:f0:a9:4e:e2:b8:16:c0:a4:
7a:0c:13:ad:19:cb:62:06:4e:ca:ee:5f:40:cd:25:30:0e:53:
8c:65:7a:3f:e5:84:c6:23:9b:aa:7d:2a:69:59:04:62:05:fe:
fd:d1:92:05:43:82:38:a8:d0:83:85:f3:1b:98:38:9d:85:04:
a3:7e:07:3c:3e:c7:fc:64:a7:84:6a:64:bd:3f:3d:e2:af:f6:
09:f0:a7:ee:45:d3:0e:2d:53:56:b3:68:09:c1:a3:e4:4f:f9:
7e:85:3a:fb:a8:d1:36:41:0a:05:56:a5:79:33:ae:64:46:05:
d2:a8:90:3a:fd:0f:50:6d:a3:a9:23:b0:8b:72:16:c0:9b:bd:
02:0f:b3:83:e1:77:71:5b:6e:a9:b2:6c:e1:3d:4a:4a:54:9e:
d2:b6:30:23:2a:4f:b3:80:d9:c3:2b:cc:13:da:78:8f:a2:6c:
f5:05:48:8d:c5:e8:b0:9f:6f:91:a2:8b:93:06:cf:8a:0e:f0:
10:a1:59:6f:b5:6c:53:0c:34:66:2a:c5:e5:3a:bd:23:dd:5e:
05:66:29:c4:8e:b4:f4:ea:bd:02:cd:8d:2e:18:55:0a:a4:d0:
0f:f0:2c:ad:83:39:97:e3:83:39:91:d4:9c:fd:bc:bb:3c:95:
6b:64:30:13
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA+r4n0gapw1jJc4EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZjJkODk0NGQtNDgxZi00MmIwLWFiMmMtMjlmOTE1ZGRkMmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDqmlLV26BcsHk/lrU7QNsTxikYtl7sbUKzU
a0WaWRKPA/a6eq6zaYnC8I6LdWt3sRBaASJZMD6vPaGTvEeihCMfbhuu56iKc8th
1opIkxnAyzoblxs0qWTkzxrGCRYdAkkIE7foSXmWOol5mmIRtywyZgYLHdff4L+6
0X+rzONxroIbX1QyfT85nwcnwc+JhBawzBalKmCNRKLwYeNRFDKKh1MG74VxJ3DX
jdxoPhjxYd0WotojFA9i38wksgRZFAHBU9bavkuRXkUIK/GStZB6NUwZeGuLJlSq
RRHuDMsN8nz7oc62c0pZGxa/5S2b7lvgJISoWBwlvrE2FXb+swIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL2RFVxCHkLFinGzbdOZRP3JmmV9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWU3ZWQ5YTYtOTQ5Yy0z
MWUyLTg4MmQtYjI1YjNmNmNkZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEB0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKsOTQI/g9VGEzvCpTuK4FsCkegwTrRnLYgZOyu5fQM0lMA5TjGV6P+WE
xiObqn0qaVkEYgX+/dGSBUOCOKjQg4XzG5g4nYUEo34HPD7H/GSnhGpkvT894q/2
CfCn7kXTDi1TVrNoCcGj5E/5foU6+6jRNkEKBValeTOuZEYF0qiQOv0PUG2jqSOw
i3IWwJu9Ag+zg+F3cVtuqbJs4T1KSlSe0rYwIypPs4DZwyvME9p4j6Js9QVIjcXo
sJ9vkaKLkwbPig7wEKFZb7VsUww0ZirF5Tq9I91eBWYpxI609Oq9As2NLhhVCqTQ
D/AsrYM5l+ODOZHUnP28uzyVa2QwEw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:35 2025 by rpki-client