Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0039a500-fc6a-3bae-bf8e-11f0e97bbab4.roa
File: 0039a500-fc6a-3bae-bf8e-11f0e97bbab4.roa (raw, json)
Hash identifier: mTwzOVPvuaZRylwY0Emm3e2s/inrgM/rpoGSXDdOdW4=
Subject key identifier: A8:B2:EC:B0:4C:32:F3:CE:9B:FC:40:DC:5E:80:B3:6C:D4:6E:36:E6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584083330B68C195AC819B2D6C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0039a500-fc6a-3bae-bf8e-11f0e97bbab4.roa
Signing time: Sun 08 Jan 2023 12:00:00 +0000
ROA not before: Sun 08 Jan 2023 12:00:00 +0000
ROA not after: Mon 13 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.176.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:83:33:0b:68:c1:95:ac:81:9b:2d:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 8 12:00:00 2023 GMT
Not After : Feb 13 05:00:00 2023 GMT
Subject: CN=4c437318-6eb6-4fb9-907d-a561401d1033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7d:c9:fd:17:88:29:a5:a1:0d:3e:d1:a1:78:
26:37:9d:14:71:7e:e4:27:e6:99:4d:6b:30:c1:d7:
c0:5f:d0:c4:e2:6c:66:9c:ec:26:ed:6c:19:52:b3:
49:a3:ba:5b:98:25:1e:c2:75:f3:68:89:49:5b:a9:
af:37:e7:04:d0:e5:31:38:69:65:67:b5:d5:e8:c5:
76:5c:02:55:34:9f:90:87:d7:bc:aa:ea:5b:06:5f:
02:ef:1a:5c:aa:e7:7f:b9:1a:72:44:19:d4:14:ac:
84:0d:13:43:f2:38:12:1a:16:e2:43:a6:c3:60:a7:
2a:f3:0d:85:4b:dd:e0:0a:ef:e9:4d:6b:66:a6:34:
cf:f3:5b:5e:8c:a7:ba:b0:21:1c:40:bd:30:d2:df:
23:69:c3:c7:86:7a:50:1a:4c:91:94:10:64:fa:a7:
77:ae:4b:4a:3a:34:d6:2b:0b:be:01:69:f1:ee:c6:
4c:bb:ba:6e:7a:54:ac:75:f4:d9:b6:2c:3c:52:1c:
33:85:ad:cc:4e:75:05:02:17:ca:d0:bb:4e:51:7b:
20:d9:19:8c:d0:8d:ca:ab:6b:bf:e6:e4:80:11:57:
1c:ee:3c:42:86:31:73:c0:02:ea:5c:01:77:07:d4:
f9:2e:07:6d:4f:1c:ed:af:f2:1a:aa:58:a2:8a:96:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:EC:B0:4C:32:F3:CE:9B:FC:40:DC:5E:80:B3:6C:D4:6E:36:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0039a500-fc6a-3bae-bf8e-11f0e97bbab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.176.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:ba:83:1f:cd:5e:41:0e:c8:aa:4e:d9:73:22:79:05:ed:d6:
ac:4a:87:c5:ae:08:1b:5a:81:40:2f:1b:16:1d:e6:e1:b8:ff:
8f:e5:78:29:48:6b:e6:e4:3d:be:cd:00:0a:82:0a:c6:a0:b4:
36:27:87:b9:18:98:0b:75:4a:66:b0:6a:98:33:15:56:14:1d:
a1:fb:0c:3c:1c:3d:cd:30:62:45:e7:5a:44:6c:47:18:39:e2:
ce:2c:b5:7e:ea:4b:9b:6b:73:a0:48:8b:d4:e6:5c:1b:dc:d1:
b4:94:8b:42:2f:80:71:f6:c1:e4:91:cd:5b:6b:51:74:87:c1:
d0:26:ed:b7:71:1e:35:ec:48:98:98:1c:dc:64:06:61:2b:c5:
c7:02:15:17:bf:45:5a:a4:8c:e1:8c:5c:bf:c7:44:b8:85:a7:
42:8f:62:ab:1d:e2:8c:01:09:c1:f7:9c:89:a1:81:9c:8f:86:
20:db:55:87:04:8f:90:04:2d:91:2e:43:78:71:35:c3:1a:c9:
1e:2f:e8:e5:7f:ff:1e:ba:d7:5f:e8:26:2c:78:a0:2f:a3:a0:
7a:61:be:f1:20:4c:86:16:01:75:01:a1:be:fa:1e:65:01:dd:
ec:81:61:5c:f9:d3:84:54:6f:6d:20:f5:00:16:1b:89:ac:e0:
f1:ad:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:04:14 2025 by rpki-client