Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/033f06d7-f8ab-3b63-a69a-2dac31e6b531.roa
File: 033f06d7-f8ab-3b63-a69a-2dac31e6b531.roa (raw, json)
Hash identifier: vZHQVvFtrPdHCNLJjQV3uAnVnqm9kdT4ABIZobMaQKc=
Subject key identifier: BB:14:F4:B2:0E:1C:F5:9E:E4:F1:98:EF:33:1F:C3:E6:2D:A4:6A:E4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584016EEC8A426CE13F3AE045C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/033f06d7-f8ab-3b63-a69a-2dac31e6b531.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:ee:c8:a4:26:ce:13:f3:ae:04:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=9fce2ffe-a64c-4024-b591-8a13a6c1af1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e0:d4:d3:22:62:80:c9:4c:89:40:42:d5:66:
1b:d0:18:32:74:d5:ba:50:b0:da:5d:c6:fe:39:a8:
e0:39:5e:c3:a7:2f:3f:43:1c:1b:6a:1b:d8:ed:54:
08:63:65:89:02:ef:cb:c7:0f:55:51:c9:4b:90:f7:
77:c8:d5:e1:89:28:51:20:09:c0:46:76:d0:47:39:
b2:53:0e:d4:0b:8d:d8:38:83:a5:37:d8:a0:4e:78:
cc:ab:db:6e:f8:cf:7f:87:01:07:99:72:b6:7d:19:
cf:8f:46:a0:a5:67:6d:fc:f1:c9:ec:36:af:c2:5c:
49:a0:d5:e2:e4:bd:43:be:d3:57:37:fe:92:32:ae:
b6:5e:6b:a9:96:8a:12:43:35:d7:bb:ba:94:05:ed:
30:98:fe:2e:6c:06:14:79:9e:29:86:04:4d:54:8d:
2a:fa:2d:fc:ee:5d:65:d4:69:68:14:28:a3:76:63:
ce:56:01:9d:78:f6:89:70:a9:f7:9c:17:46:e3:5c:
23:85:df:64:41:d2:23:30:2a:67:3f:bf:62:b4:69:
ee:66:3c:68:6a:fb:b8:33:d3:f4:fe:72:86:52:ef:
26:01:41:fe:e2:bf:69:45:e7:e4:ec:1b:18:20:7b:
db:aa:13:8b:ba:68:d2:9f:83:8a:8e:2d:0f:95:85:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:14:F4:B2:0E:1C:F5:9E:E4:F1:98:EF:33:1F:C3:E6:2D:A4:6A:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/033f06d7-f8ab-3b63-a69a-2dac31e6b531.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:af:ac:8e:1f:82:71:d3:1a:92:de:cb:3f:14:d0:07:82:65:
f0:5e:00:34:59:ee:85:34:ff:b8:1e:8b:9e:35:2b:eb:35:9a:
07:15:d9:26:c0:3d:7e:89:55:08:9f:8a:19:1a:fc:ff:f8:9b:
29:e4:33:2e:d1:e6:b1:ca:af:de:75:52:db:c9:76:b4:98:2d:
cb:86:41:17:74:c8:81:bf:39:39:75:fd:06:22:13:77:4b:8b:
bf:cf:85:df:b6:35:62:98:93:45:83:66:77:9d:eb:b5:07:18:
5b:91:90:21:62:06:2e:b8:36:60:b9:09:8e:17:8d:21:f5:05:
92:f8:a9:19:a3:99:40:ac:36:3a:8e:89:1a:e3:f5:01:89:1b:
1a:ce:e8:3d:0e:8c:0e:c0:a9:88:b5:17:5f:26:ca:9d:34:3e:
9a:19:1e:50:e0:81:57:13:9b:54:7f:d6:64:6e:22:76:e6:83:
38:e4:31:68:d6:b4:65:63:85:52:cb:48:ee:00:bc:55:35:67:
84:2f:4b:90:9e:af:3c:77:3f:e8:b3:ac:be:d6:6e:9d:64:b6:
cf:ed:9a:9b:db:64:9e:34:ce:19:5f:fd:f5:d9:7d:41:ea:9f:
20:0c:77:7a:9f:78:05:cc:11:24:44:3a:e0:03:21:9e:8a:c0:
42:a2:1b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 08:57:38 2025 by rpki-client