Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/efc2dd80-2443-3569-ab0d-d831ad0c8a71.roa
File: efc2dd80-2443-3569-ab0d-d831ad0c8a71.roa (raw, json)
Hash identifier: /Vl2Nf6g9UGDdMPBRDTyL88kFn0lzaZZyxJrW5R1uMY=
Subject key identifier: 09:E3:23:09:51:40:36:D3:85:6A:57:AF:08:5C:A8:3E:39:A1:92:BA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E9D8641A597B14D708EDA6F50
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/efc2dd80-2443-3569-ab0d-d831ad0c8a71.roa
Signing time: Mon 18 Jul 2022 12:00:00 +0000
ROA not before: Mon 18 Jul 2022 12:00:00 +0000
ROA not after: Tue 23 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.154.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:9d:86:41:a5:97:b1:4d:70:8e:da:6f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 18 12:00:00 2022 GMT
Not After : Aug 23 04:00:00 2022 GMT
Subject: CN=4242b33c-db70-4313-869a-bffbaa69d243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:48:ea:b0:b1:3f:66:56:48:98:a8:cd:cb:
8a:de:ee:f9:39:4b:80:f5:54:57:17:4a:a7:98:54:
6f:cb:12:84:28:1a:f0:e6:bf:76:95:66:bd:41:43:
63:4b:a7:be:24:a0:33:57:22:ba:07:66:e2:b7:e2:
74:98:7d:3f:6b:7d:13:67:cc:a8:26:3f:d5:bf:39:
74:7d:96:47:92:6b:a6:8d:7e:0f:ff:76:d9:1b:c6:
29:21:3e:ff:56:1d:e7:bf:97:51:46:e9:61:21:a4:
1b:72:f0:85:43:4e:78:fb:f8:83:13:9f:eb:ed:08:
5d:01:c0:1a:69:6a:bb:24:11:c9:5b:23:a2:ef:ca:
91:c3:2e:88:ce:ae:6c:6c:45:73:96:75:50:d0:cb:
01:ac:d4:fe:db:a7:02:b8:56:57:b1:21:c1:17:56:
1d:2c:e0:30:c5:5d:a3:a7:c9:10:83:a9:6f:8a:38:
eb:f5:c6:22:6e:a4:a1:01:c4:25:3d:2f:8a:3a:37:
47:b7:da:04:c8:4f:a1:9a:4c:4b:13:c0:ff:15:74:
2c:46:8c:30:ce:ee:52:9e:f1:cf:dc:28:2e:7b:d2:
27:e4:73:6f:0d:07:90:b5:6e:f9:fb:b8:44:e5:4e:
0f:a9:2b:e0:64:64:e7:32:ef:5b:40:54:9e:25:57:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:23:09:51:40:36:D3:85:6A:57:AF:08:5C:A8:3E:39:A1:92:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/efc2dd80-2443-3569-ab0d-d831ad0c8a71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.154.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:5c:94:96:53:98:ae:f6:99:2b:75:ea:e5:72:70:21:76:9b:
c3:dd:39:0b:e7:73:30:43:2e:ae:34:19:0c:32:ff:2e:32:d0:
93:ad:7f:55:7a:1d:91:61:d0:de:3c:49:f7:af:e8:d7:29:04:
98:ec:5f:cf:66:8f:fe:55:e4:0e:23:b7:ca:53:18:28:62:80:
d5:1a:ce:dd:cd:31:ad:cb:f6:f3:56:66:19:40:c7:d8:91:5e:
fc:2f:25:4c:7e:fa:11:ea:0e:b3:74:d3:b8:a9:34:56:f5:89:
89:23:43:d9:08:5f:e0:e6:07:71:2d:5d:17:df:7c:f2:89:bb:
e5:49:cd:aa:ac:9b:04:63:e2:70:64:bd:0c:79:ff:b3:a8:cf:
d4:8e:22:b9:a3:2f:12:e9:b8:f5:62:54:29:8a:03:23:c7:cb:
1a:86:bf:de:04:0a:30:5a:a1:71:83:41:e8:c5:7a:42:04:fa:
ef:9d:14:03:ed:ff:3b:c3:46:9f:c4:f1:a5:4f:ad:86:62:75:
ab:92:f7:09:b8:34:31:e9:ef:3f:3c:c8:af:72:75:11:15:e0:
71:32:ea:16:19:26:6c:b6:b2:5b:17:18:3d:a6:e2:0b:73:c4:
4a:cc:ac:dc:2f:1f:46:d4:88:ef:cd:58:f3:0e:f8:65:b8:cf:
ca:2b:2b:35
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD6dhkGll7FNcI7ab1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDcxODEyMDAwMFoXDTIyMDgyMzA0MDAwMFowLzEtMCsGA1UEAxMk
NDI0MmIzM2MtZGI3MC00MzEzLTg2OWEtYmZmYmFhNjlkMjQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA031I6rCxP2ZWSJiozcuK3u75OUuA9VRXF0qn
mFRvyxKEKBrw5r92lWa9QUNjS6e+JKAzVyK6B2bit+J0mH0/a30TZ8yoJj/Vvzl0
fZZHkmumjX4P/3bZG8YpIT7/Vh3nv5dRRulhIaQbcvCFQ054+/iDE5/r7QhdAcAa
aWq7JBHJWyOi78qRwy6Izq5sbEVzlnVQ0MsBrNT+26cCuFZXsSHBF1YdLOAwxV2j
p8kQg6lvijjr9cYibqShAcQlPS+KOjdHt9oEyE+hmkxLE8D/FXQsRowwzu5SnvHP
3Cgue9In5HNvDQeQtW75+7hE5U4PqSvgZGTnMu9bQFSeJVcbmwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAnjIwlRQDbThWpXrwhcqD45oZK6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZWZjMmRkODAtMjQ0My0z
NTY5LWFiMGQtZDgzMWFkMGM4YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEJowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEArFyUllOYrvaZK3Xq5XJwIXabw905C+dzMEMurjQZDDL/LjLQk61/VXod
kWHQ3jxJ96/o1ykEmOxfz2aP/lXkDiO3ylMYKGKA1RrO3c0xrcv281ZmGUDH2JFe
/C8lTH76EeoOs3TTuKk0VvWJiSND2Qhf4OYHcS1dF9988om75UnNqqybBGPicGS9
DHn/s6jP1I4iuaMvEum49WJUKYoDI8fLGoa/3gQKMFqhcYNB6MV6QgT6750UA+3/
O8NGn8TxpU+thmJ1q5L3Cbg0MenvPzzIr3J1ERXgcTLqFhkmbLayWxcYPabiC3PE
Ssys3C8fRtSI781Y8w74ZbjPyisrNQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:18:58 2025 by rpki-client