Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/faf99f0e-6c0a-3c8b-b3ad-a9c8ecea1088.roa
File: faf99f0e-6c0a-3c8b-b3ad-a9c8ecea1088.roa (raw, json)
Hash identifier: a+LWJBnXSrlhefpryFQmgcNCyXKc8mny0cgy2A+5qgE=
Subject key identifier: B8:8A:1F:E1:8D:BC:64:09:96:11:A4:DF:E0:B5:C5:74:9D:9B:52:FD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D594E5D1EB65E5C340281A5C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/faf99f0e-6c0a-3c8b-b3ad-a9c8ecea1088.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.162.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:4e:5d:1e:b6:5e:5c:34:02:81:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=dd4e1b42-84b2-488f-bf90-3640577e1185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:56:74:e2:37:1c:93:ec:16:be:42:59:57:8c:
02:b7:b8:db:50:87:49:2a:21:13:d9:30:56:5d:a4:
40:fe:97:34:c8:e1:f6:c8:40:3c:97:41:e1:fc:0e:
58:5b:e8:fd:1f:40:20:d0:30:4c:38:e3:24:b6:49:
0c:1e:dc:9f:87:90:2e:e3:e7:9a:00:9c:e6:0e:da:
42:72:73:4f:b8:8f:2e:f4:bd:43:0e:b5:b5:94:30:
99:f8:08:2c:d5:f4:41:17:98:c4:40:59:01:b9:f1:
c9:07:9e:1d:c8:f4:bf:1e:27:c2:4e:58:48:fd:00:
8d:83:e4:33:0e:2a:8f:42:f0:bd:23:45:4b:86:cb:
5d:18:00:ec:58:ed:61:61:ce:76:6e:1c:e6:b4:34:
53:a5:bc:66:a4:c3:48:3c:82:e2:49:6a:58:21:36:
70:03:77:12:30:5c:f4:da:28:3e:75:be:2d:6f:00:
f6:e1:8c:1d:7a:9b:5e:fd:01:9b:a3:4e:14:3c:be:
11:2b:4b:ad:02:78:85:54:8a:0d:dd:d5:1a:0f:a4:
ec:1e:9b:9a:89:fc:76:83:22:c6:6f:44:08:7b:15:
f1:b2:af:5a:5f:a4:5a:e7:21:7b:8b:e0:22:73:c8:
26:fd:21:a3:f7:74:20:81:40:9c:df:ff:ae:94:af:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8A:1F:E1:8D:BC:64:09:96:11:A4:DF:E0:B5:C5:74:9D:9B:52:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/faf99f0e-6c0a-3c8b-b3ad-a9c8ecea1088.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.162.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:6a:ce:1f:71:a1:51:ef:e0:e9:4b:ad:91:27:fe:72:b3:76:
22:2b:42:52:7c:c0:8b:90:e5:d3:44:06:ab:b8:49:1f:e5:2c:
91:c5:b8:73:06:ee:b5:63:78:6f:c9:1e:f7:e8:ad:61:5d:b3:
b4:c4:54:06:9f:3a:5c:2b:61:07:8a:4a:8e:62:68:49:ad:87:
d8:90:0e:41:1e:fd:2a:cd:bc:c4:80:6f:d6:6c:39:96:55:4f:
73:bb:67:f3:3f:3e:b7:0a:f4:91:ca:d6:45:18:cf:7c:ff:4f:
a3:03:1d:e7:27:2f:b4:88:06:e5:7c:26:99:44:b1:02:d0:94:
d2:ef:4e:2c:1b:15:d9:62:9f:c7:9a:9b:f8:99:52:2e:5b:19:
c4:e8:b5:4d:4e:0a:df:61:25:cd:fb:aa:37:20:e3:b6:6b:0b:
03:0d:0a:39:d2:f1:03:f5:10:66:d3:e2:cb:47:8c:7f:36:c4:
4f:1a:0b:ff:87:c5:7b:e5:7e:f3:39:70:7d:24:f8:26:31:a2:
47:c7:3f:de:24:95:2b:35:40:75:3a:5b:02:b0:4b:58:74:b7:
9e:78:1b:4f:3d:20:5e:03:40:44:33:56:37:02:80:78:51:69:
7a:72:c5:de:b8:1b:cf:74:0f:59:0b:8c:4f:0c:77:85:1a:78:
6d:6f:21:b9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD1ZTl0etl5cNAKBpcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMyNTA0MDAwMFoXDTIyMDQyOTA0MDAwMFowLzEtMCsGA1UEAxMk
ZGQ0ZTFiNDItODRiMi00ODhmLWJmOTAtMzY0MDU3N2UxMTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllZ04jcck+wWvkJZV4wCt7jbUIdJKiET2TBW
XaRA/pc0yOH2yEA8l0Hh/A5YW+j9H0Ag0DBMOOMktkkMHtyfh5Au4+eaAJzmDtpC
cnNPuI8u9L1DDrW1lDCZ+Ags1fRBF5jEQFkBufHJB54dyPS/HifCTlhI/QCNg+Qz
DiqPQvC9I0VLhstdGADsWO1hYc52bhzmtDRTpbxmpMNIPILiSWpYITZwA3cSMFz0
2ig+db4tbwD24Ywdepte/QGbo04UPL4RK0utAniFVIoN3dUaD6TsHpuaifx2gyLG
b0QIexXxsq9aX6Ra5yF7i+Aic8gm/SGj93QggUCc3/+ulK+5QQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLiKH+GNvGQJlhGk3+C1xXSdm1L9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmFmOTlmMGUtNmMwYS0z
YzhiLWIzYWQtYTljOGVjZWExMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEKIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdmrOH3GhUe/g6UutkSf+crN2IitCUnzAi5Dl00QGq7hJH+UskcW4cwbu
tWN4b8ke9+itYV2ztMRUBp86XCthB4pKjmJoSa2H2JAOQR79Ks28xIBv1mw5llVP
c7tn8z8+twr0kcrWRRjPfP9PowMd5ycvtIgG5XwmmUSxAtCU0u9OLBsV2WKfx5qb
+JlSLlsZxOi1TU4K32ElzfuqNyDjtmsLAw0KOdLxA/UQZtPiy0eMfzbETxoL/4fF
e+V+8zlwfST4JjGiR8c/3iSVKzVAdTpbArBLWHS3nngbTz0gXgNARDNWNwKAeFFp
enLF3rgbz3QPWQuMTwx3hRp4bW8huQ==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:11 2025 by rpki-client