Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02f2ede8-a7f9-3385-ba32-e13c219d4e23.roa
File: 02f2ede8-a7f9-3385-ba32-e13c219d4e23.roa (raw, json)
Hash identifier: U+P5+zwltgIWH6JZjtuv5gSshjXUx/qdb1v+2+YaVw8=
Subject key identifier: E0:44:DB:F1:62:26:63:03:DD:31:DA:44:F9:D8:8A:AB:75:05:87:E7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403E82CB97120A1A6D2345DC80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02f2ede8-a7f9-3385-ba32-e13c219d4e23.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:82:cb:97:12:0a:1a:6d:23:45:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=91391a1f-2c34-49d7-be01-d5f6c1927656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:91:4b:3a:16:42:d3:4f:da:75:12:87:11:
cf:1b:aa:be:cd:09:ba:1f:c0:34:78:34:99:1a:0b:
bb:16:f9:4c:f5:de:c6:57:b7:41:7b:53:b0:65:73:
0e:75:46:17:90:33:ab:0f:40:22:d7:de:60:2a:90:
76:66:b1:98:33:fc:ec:04:2c:ab:6c:59:fb:91:70:
61:72:2b:e3:5f:55:71:61:40:9b:ca:35:4c:75:05:
b3:a5:57:3e:d6:87:c3:6c:96:7b:13:7f:ff:14:da:
b5:ec:77:7f:c0:d7:95:fb:cf:de:10:e4:be:10:21:
0c:f7:81:fa:a9:bc:60:f5:80:b0:d9:23:bf:c3:d6:
dd:f1:ce:2b:fd:13:9f:70:4b:be:ce:cf:3d:39:ea:
d5:30:1e:ea:1e:6a:1d:0f:c4:ca:2d:24:6e:7f:44:
54:1a:92:eb:54:8a:cb:83:1c:9e:a4:7b:8b:67:60:
36:9c:96:60:bf:e7:87:ba:1b:06:bc:04:3a:63:5f:
42:5c:19:e5:90:d5:01:6f:42:bc:b3:8f:69:2c:9a:
2a:67:1d:7e:99:38:53:b2:bd:ae:c1:86:5c:1e:01:
1c:bf:07:51:3b:8e:26:0e:00:67:d5:06:ee:67:52:
0a:01:39:6d:ae:53:d4:6e:1f:1a:a9:f7:ec:8c:73:
6c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:44:DB:F1:62:26:63:03:DD:31:DA:44:F9:D8:8A:AB:75:05:87:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/02f2ede8-a7f9-3385-ba32-e13c219d4e23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:5c:60:92:e0:c0:8f:ee:c9:2d:f2:d8:f4:92:9b:37:23:4c:
cd:b2:37:71:1c:38:8f:12:41:f1:ca:ae:a3:6b:77:f9:d1:fe:
bf:bc:4b:53:20:c3:89:96:39:5d:f3:07:38:71:73:bd:48:10:
31:c5:4c:7c:d5:65:b2:2d:89:03:e0:28:ee:12:af:fe:9f:56:
5b:36:e7:80:71:b6:c2:13:37:16:15:9d:48:c0:ca:bd:26:cd:
e8:6e:77:60:c2:5e:72:c5:50:a1:e2:44:f8:1e:ee:e8:5b:00:
ca:50:10:33:be:29:48:26:13:ea:66:cb:e2:ff:93:c8:cf:da:
67:1a:20:25:79:25:95:c0:ac:0b:b7:55:03:f9:38:c1:75:ef:
c4:86:d6:24:66:b0:67:3a:0c:fd:93:7c:21:8e:97:85:d5:60:
23:54:46:cd:ad:3a:e5:60:e4:3d:8b:7c:b9:d3:fb:55:03:b2:
ef:c8:b4:a5:ba:9f:19:0f:78:4e:1a:9a:36:62:1f:d4:e4:ff:
39:68:42:60:28:df:48:65:6f:6a:0f:e6:70:88:f3:8b:39:f2:
e9:c4:b3:f6:43:a3:92:07:0b:12:db:e3:4a:86:31:07:19:54:
bb:fd:e1:b4:d7:8f:df:50:58:02:06:48:c5:27:d2:8f:44:c6:
6e:ae:61:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:10:25 2025 by rpki-client