Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f22f1f9d-5e2b-387f-bb29-cd4cee2746d2.roa
File: f22f1f9d-5e2b-387f-bb29-cd4cee2746d2.roa (raw, json)
Hash identifier: yjWv+CrGdcdH0il4AiRoOAbNISzHErrlw5SdyRXDzpQ=
Subject key identifier: 35:57:89:06:A9:01:00:4E:33:8F:2A:05:89:3D:29:EB:9A:99:A4:9B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C18C1BB125DE89CC27C257A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f22f1f9d-5e2b-387f-bb29-cd4cee2746d2.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.126.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:8c:1b:b1:25:de:89:cc:27:c2:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=779f2fc3-b04a-47c5-a202-0d208dc6db65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:73:10:07:47:49:b6:d0:32:ec:3f:46:45:
c0:35:01:37:d0:84:17:48:83:bf:c2:2b:7d:db:86:
59:a1:77:1e:d5:3e:2c:54:a0:44:9e:75:cc:2a:bb:
c4:bd:02:80:8a:0f:2a:f8:0b:71:59:6f:fc:4e:df:
b6:9b:a5:99:ab:1b:2e:00:dc:55:a0:50:8e:9b:01:
c7:e3:39:af:50:3b:b1:79:b7:38:29:29:b2:f8:60:
fe:1b:39:34:5f:5c:5a:25:22:f2:f6:26:ca:c0:52:
08:59:80:50:16:6e:93:44:33:c0:f9:54:2a:db:69:
c7:3a:c1:ca:ab:b1:60:ab:4f:b6:d2:24:ca:42:35:
22:e0:b9:6b:ba:55:3f:9a:86:0e:ae:8a:5a:73:5e:
45:0c:34:e5:70:46:0d:d5:b8:41:08:24:b6:20:f2:
22:ed:a8:60:8a:9d:e9:d9:30:bf:46:14:53:2a:16:
8f:a1:8a:de:03:c2:f6:56:93:97:7b:10:58:f0:16:
ee:a0:5a:f3:cb:af:80:5f:ec:1d:8d:70:c9:e8:68:
e9:4d:b9:eb:d0:40:98:ba:8a:65:4f:ea:d3:28:77:
1f:3f:01:79:ad:32:d1:5e:26:1d:c7:0b:42:e3:89:
ee:a5:e3:1b:9d:27:73:2b:02:73:6d:ab:17:39:d8:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:57:89:06:A9:01:00:4E:33:8F:2A:05:89:3D:29:EB:9A:99:A4:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/f22f1f9d-5e2b-387f-bb29-cd4cee2746d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.126.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:d7:82:22:56:0c:d2:c7:ec:e5:30:39:01:62:e5:13:40:ce:
2e:9c:0d:0d:73:55:53:64:8f:8c:55:34:76:92:5b:10:f1:e2:
1b:72:2d:9a:0a:f4:a0:21:55:31:bd:4c:14:c4:4e:6f:b8:95:
bc:6e:61:45:6b:ac:5d:69:9e:41:38:3e:66:17:f4:84:1e:ac:
ab:f5:cf:75:72:d7:75:0a:7f:a7:24:fc:dc:4d:12:2c:f6:1c:
de:d6:1e:1f:1b:8c:b8:d5:6e:4d:98:21:6c:48:e1:39:f1:bc:
83:94:a0:03:3a:d2:ae:a3:0c:f5:83:28:71:77:0a:bc:1d:2c:
ed:c6:c6:cc:f6:5b:b1:2f:14:8e:70:a4:d9:23:45:2e:0d:6e:
20:75:5f:55:ca:bb:03:20:22:66:61:a9:ce:fa:15:84:28:4b:
d6:29:d6:8d:90:07:50:f2:5c:4f:00:11:0d:35:a3:a7:6b:68:
ff:e9:23:bc:4f:2f:f4:34:23:00:4a:57:8b:44:0a:86:29:f8:
d8:9a:f6:af:ef:e0:2b:11:20:7d:b5:84:bc:01:ac:4c:a8:2d:
61:f2:19:f7:26:ad:48:c2:db:92:85:45:ac:90:ac:be:56:c5:
e8:49:a2:50:b0:78:d0:8d:c8:c1:1b:2c:83:f4:7d:0a:6e:b7:
ac:aa:08:f7
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDBjBuxJd6JzCfCV6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIzMDEzMDIyNDIwN1oXDTIzMDMwNzA1MDAwMFowLzEtMCsGA1UEAxMk
Nzc5ZjJmYzMtYjA0YS00N2M1LWEyMDItMGQyMDhkYzZkYjY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDhzEAdHSbbQMuw/RkXANQE30IQXSIO/wit9
24ZZoXce1T4sVKBEnnXMKrvEvQKAig8q+AtxWW/8Tt+2m6WZqxsuANxVoFCOmwHH
4zmvUDuxebc4KSmy+GD+Gzk0X1xaJSLy9ibKwFIIWYBQFm6TRDPA+VQq22nHOsHK
q7Fgq0+20iTKQjUi4LlrulU/moYOropac15FDDTlcEYN1bhBCCS2IPIi7ahgip3p
2TC/RhRTKhaPoYreA8L2VpOXexBY8BbuoFrzy6+AX+wdjXDJ6GjpTbnr0ECYuopl
T+rTKHcfPwF5rTLRXiYdxwtC44nupeMbnSdzKwJzbasXOdgK8QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDVXiQapAQBOM48qBYk9KeuamaSbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZjIyZjFmOWQtNWUyYi0z
ODdmLWJiMjktY2Q0Y2VlMjc0NmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEH4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANNeCIlYM0sfs5TA5AWLlE0DOLpwNDXNVU2SPjFU0dpJbEPHiG3Itmgr0
oCFVMb1MFMROb7iVvG5hRWusXWmeQTg+Zhf0hB6sq/XPdXLXdQp/pyT83E0SLPYc
3tYeHxuMuNVuTZghbEjhOfG8g5SgAzrSrqMM9YMocXcKvB0s7cbGzPZbsS8UjnCk
2SNFLg1uIHVfVcq7AyAiZmGpzvoVhChL1inWjZAHUPJcTwARDTWjp2to/+kjvE8v
9DQjAEpXi0QKhin42Jr2r+/gKxEgfbWEvAGsTKgtYfIZ9yatSMLbkoVFrJCsvlbF
6EmiULB40I3IwRssg/R9Cm63rKoI9w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:14 2025 by rpki-client