Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff449509-0d33-3ebb-ad88-80635111e7f9.roa
File: ff449509-0d33-3ebb-ad88-80635111e7f9.roa (raw, json)
Hash identifier: GIOwYggTVX0ceD2/k+SBDNWCQLmLg5exY1+GdSLm/Gg=
Subject key identifier: 73:52:B1:22:4B:60:D0:2F:CB:B9:46:C9:0B:CF:0D:39:8F:D6:35:75
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FE14E951A0D6ACCDD1F306080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff449509-0d33-3ebb-ad88-80635111e7f9.roa
Signing time: Fri 11 Nov 2022 12:00:00 +0000
ROA not before: Fri 11 Nov 2022 12:00:00 +0000
ROA not after: Sat 17 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.28.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:e1:4e:95:1a:0d:6a:cc:dd:1f:30:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 11 12:00:00 2022 GMT
Not After : Dec 17 05:00:00 2022 GMT
Subject: CN=9c33383b-d1a0-4499-8172-5b54969f3dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b5:db:25:b8:ae:44:e0:e1:6b:0d:36:86:02:
26:3a:d3:df:18:ba:85:95:0d:b7:ae:4a:3a:fe:b7:
c0:47:5e:b6:96:57:8a:d9:7c:e6:a4:38:a6:7f:bb:
a9:89:77:ec:45:c7:ae:06:42:78:5e:af:b0:f8:2d:
de:4a:c5:aa:66:4c:89:24:5f:95:62:70:ec:bf:99:
89:82:65:7f:c1:5c:87:8a:40:36:6f:70:36:dd:2d:
c6:68:43:24:1f:66:8f:c0:b4:94:d4:2f:cc:b2:fa:
a7:bb:bb:47:c8:28:34:84:54:37:2a:39:1a:59:82:
6c:c5:70:6b:07:9d:c8:ef:b3:8b:22:1f:ec:9c:4e:
7a:2f:84:88:18:53:6f:0a:63:c7:ba:20:43:f6:dc:
02:4c:89:87:9b:ab:6f:b7:1b:40:01:47:8a:25:17:
c0:a1:59:25:21:04:d9:84:3c:c4:f4:88:83:c7:53:
e0:e2:a2:c8:1a:94:d0:ee:9d:fa:ee:72:01:1d:1b:
d8:ac:7e:5c:8e:d9:19:bb:aa:7d:eb:5d:6d:4e:5d:
b5:b4:86:4c:24:27:01:38:f9:76:6b:e0:90:4b:c4:
d0:b6:df:34:3a:1a:f7:17:7a:0e:24:65:45:4c:16:
76:b7:03:e7:c2:29:61:85:0a:0d:72:10:6c:89:32:
0b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:52:B1:22:4B:60:D0:2F:CB:B9:46:C9:0B:CF:0D:39:8F:D6:35:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ff449509-0d33-3ebb-ad88-80635111e7f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:b4:59:ee:4d:9b:0d:0b:a6:ed:48:98:07:9a:ff:cc:ac:12:
ae:22:2d:e5:3a:43:f6:e2:0f:9e:89:70:0b:6a:83:de:a2:c2:
01:80:e3:ba:7b:f9:76:96:47:07:d2:11:33:65:77:bc:0e:f7:
31:8a:05:8f:2c:02:a7:80:6a:48:2a:87:97:6f:df:60:0b:30:
b0:5c:72:b6:35:e2:1c:36:70:a5:d1:35:23:c3:be:f5:47:ed:
b5:00:3b:a8:d6:2c:44:2e:21:ec:22:b1:50:58:13:8f:b9:d3:
3e:04:36:1e:5d:3a:90:53:1e:f1:dc:1b:be:73:c0:72:05:31:
75:06:65:5d:85:55:87:24:f7:de:db:2a:f6:e4:87:c5:ec:f3:
ca:22:f1:1c:30:81:f2:cb:85:ed:f8:f9:a8:1b:ee:d3:66:91:
d9:0d:b8:1b:35:28:eb:65:1e:24:b8:30:59:7f:a8:aa:84:d3:
46:e6:9c:db:c6:a0:18:10:28:6b:47:e0:6b:8b:aa:d8:db:9c:
ba:0b:7b:e0:a5:53:02:76:69:b6:0d:16:cc:1c:19:b1:8e:5a:
fb:33:db:a3:b5:26:fe:d0:05:74:27:c6:f4:91:61:c7:f6:d8:
5b:de:c8:b8:5a:3c:5c:3f:04:af:08:75:73:6a:24:06:bd:4d:
ac:00:6f:32
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/hTpUaDWrM3R8wYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMTExMTEyMDAwMFoXDTIyMTIxNzA1MDAwMFowLzEtMCsGA1UEAxMk
OWMzMzM4M2ItZDFhMC00NDk5LTgxNzItNWI1NDk2OWYzZGZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLXbJbiuRODhaw02hgImOtPfGLqFlQ23rko6
/rfAR162lleK2XzmpDimf7upiXfsRceuBkJ4Xq+w+C3eSsWqZkyJJF+VYnDsv5mJ
gmV/wVyHikA2b3A23S3GaEMkH2aPwLSU1C/Msvqnu7tHyCg0hFQ3KjkaWYJsxXBr
B53I77OLIh/snE56L4SIGFNvCmPHuiBD9twCTImHm6tvtxtAAUeKJRfAoVklIQTZ
hDzE9IiDx1Pg4qLIGpTQ7p367nIBHRvYrH5cjtkZu6p9611tTl21tIZMJCcBOPl2
a+CQS8TQtt80Ohr3F3oOJGVFTBZ2twPnwilhhQoNchBsiTILowIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHNSsSJLYNAvy7lGyQvPDTmP1jV1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZmY0NDk1MDktMGQzMy0z
ZWJiLWFkODgtODA2MzUxMTFlN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAEBwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaLRZ7k2bDQum7UiYB5r/zKwSriIt5TpD9uIPnolwC2qD3qLCAYDjunv5
dpZHB9IRM2V3vA73MYoFjywCp4BqSCqHl2/fYAswsFxytjXiHDZwpdE1I8O+9Uft
tQA7qNYsRC4h7CKxUFgTj7nTPgQ2Hl06kFMe8dwbvnPAcgUxdQZlXYVVhyT33tsq
9uSHxezzyiLxHDCB8suF7fj5qBvu02aR2Q24GzUo62UeJLgwWX+oqoTTRuac28ag
GBAoa0fga4uq2Nucugt74KVTAnZptg0WzBwZsY5a+zPbo7Um/tAFdCfG9JFhx/bY
W97IuFo8XD8Erwh1c2okBr1NrABvMg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:38 2025 by rpki-client