Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbe5bf6e-5e91-310a-932f-14df7932fac3.roa
File: fbe5bf6e-5e91-310a-932f-14df7932fac3.roa (raw, json)
Hash identifier: PIqXJ09k7674bD8TwptQfgzD+LImPn6+3Gk2xEzrY5s=
Subject key identifier: 71:2A:C9:0E:EF:9D:EC:2D:C3:5B:E6:D0:74:1D:D2:DA:DC:F2:D7:D6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD0E7D7B744E7424C0FE39580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbe5bf6e-5e91-310a-932f-14df7932fac3.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.138.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:e7:d7:b7:44:e7:42:4c:0f:e3:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=9c1b0227-c15b-44c4-9416-8866e019e833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:69:c1:32:11:30:50:72:7a:db:71:c4:fa:
d2:06:0b:54:c8:7f:1e:69:96:bc:ae:80:5c:86:50:
a7:b2:a3:94:5f:bc:a0:8a:a6:85:42:3a:54:01:59:
e7:09:d1:59:85:33:df:1f:f8:1e:c8:80:c2:8f:8a:
cf:d7:61:99:c5:fe:bb:c0:0e:e8:18:aa:7d:b7:3d:
76:0f:b1:c8:35:ca:89:63:71:25:87:70:34:73:a9:
e8:c5:92:a8:09:75:71:c8:a1:01:cb:9c:4e:5d:07:
71:3c:35:a6:f7:59:d0:3f:85:d0:4a:1a:7e:e9:d4:
d2:2d:ed:54:67:8e:7a:1a:dd:2a:47:56:8a:d4:70:
77:ee:23:fc:49:ea:ab:69:a2:16:b7:60:cc:63:79:
48:d7:e7:92:f7:fd:b3:8e:6a:4c:5a:f9:58:ad:9b:
86:a3:a4:cb:95:6c:9b:9d:fe:ed:b3:d2:7f:48:42:
b4:3f:7b:00:c7:56:b9:46:9f:21:9f:46:f2:05:d7:
cb:d8:74:a3:8e:a6:5f:45:0c:48:8c:51:f3:d7:52:
e6:90:f6:fe:b2:fb:de:08:be:8f:ff:28:06:11:ad:
06:31:74:ec:c0:5e:8a:e8:cf:13:c8:ea:77:cd:19:
73:07:63:17:b0:9e:8b:81:d5:35:13:bc:f5:cc:92:
b7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2A:C9:0E:EF:9D:EC:2D:C3:5B:E6:D0:74:1D:D2:DA:DC:F2:D7:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/fbe5bf6e-5e91-310a-932f-14df7932fac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.138.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:d7:ff:42:4d:08:ee:f1:47:31:ee:26:39:db:c4:6f:0c:ef:
55:1c:f7:f0:96:70:49:ff:3a:31:3e:33:1e:9a:86:a5:20:86:
91:ba:68:27:64:cf:89:00:68:e6:d6:d5:dd:96:88:81:08:31:
fd:1b:44:d5:3f:35:ab:5d:b5:f8:64:fd:8c:43:4e:82:e2:fa:
0a:c7:0a:85:01:53:ed:f1:bb:59:f6:2c:72:79:c7:8c:69:c7:
d3:bb:17:da:95:c5:c9:a9:da:04:b5:b4:17:1d:69:43:58:c0:
f8:ef:c5:69:35:d4:d7:89:eb:0f:8a:56:db:03:88:1b:b5:43:
c5:d4:e1:3d:58:e9:eb:41:b7:06:7b:ae:8f:9e:23:f0:c5:0f:
bf:71:62:c1:a9:67:ae:15:c1:97:af:92:f4:cc:a0:96:0c:bb:
dd:e0:38:25:79:60:bb:1f:d8:db:37:1d:e3:79:b0:71:50:99:
a0:b8:fb:5e:d3:b7:85:f1:1a:12:af:8e:73:db:10:58:c7:16:
75:50:8e:38:b1:e9:1c:46:12:77:a1:cc:49:87:24:b1:23:64:
0e:28:c5:5d:39:b5:e6:6a:9d:f1:7b:7d:4a:58:70:8f:1a:c7:
ee:c3:b6:b8:43:7d:f3:16:d1:a9:06:2f:a9:aa:cd:c5:2b:60:
0f:dd:9d:37
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/Q59e3ROdCTA/jlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTEwNTEyMDAwMFoXDTIyMTIxMTA1MDAwMFowLzEtMCsGA1UEAxMk
OWMxYjAyMjctYzE1Yi00NGM0LTk0MTYtODg2NmUwMTllODMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPlpwTIRMFByettxxPrSBgtUyH8eaZa8roBc
hlCnsqOUX7ygiqaFQjpUAVnnCdFZhTPfH/geyIDCj4rP12GZxf67wA7oGKp9tz12
D7HINcqJY3Elh3A0c6noxZKoCXVxyKEBy5xOXQdxPDWm91nQP4XQShp+6dTSLe1U
Z456Gt0qR1aK1HB37iP8SeqraaIWt2DMY3lI1+eS9/2zjmpMWvlYrZuGo6TLlWyb
nf7ts9J/SEK0P3sAx1a5Rp8hn0byBdfL2HSjjqZfRQxIjFHz11LmkPb+svveCL6P
/ygGEa0GMXTswF6K6M8TyOp3zRlzB2MXsJ6LgdU1E7z1zJK3nQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHEqyQ7vnewtw1vm0HQd0trc8tfWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmJlNWJmNmUtNWU5MS0z
MTBhLTkzMmYtMTRkZjc5MzJmYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEIowVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqtf/Qk0I7vFHMe4mOdvEbwzvVRz38JZwSf86MT4zHpqGpSCGkbpoJ2TP
iQBo5tbV3ZaIgQgx/RtE1T81q121+GT9jENOguL6CscKhQFT7fG7WfYscnnHjGnH
07sX2pXFyanaBLW0Fx1pQ1jA+O/FaTXU14nrD4pW2wOIG7VDxdThPVjp60G3Bnuu
j54j8MUPv3FiwalnrhXBl6+S9Myglgy73eA4JXlgux/Y2zcd43mwcVCZoLj7XtO3
hfEaEq+Oc9sQWMcWdVCOOLHpHEYSd6HMSYcksSNkDijFXTm15mqd8Xt9SlhwjxrH
7sO2uEN98xbRqQYvqarNxStgD92dNw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:10 2025 by rpki-client