Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0763e625-c579-3c8d-a720-ce40d04ca682.roa
File: 0763e625-c579-3c8d-a720-ce40d04ca682.roa (raw, json)
Hash identifier: Xys5fZeSKtGmnciUlhBVaAQ06BvFentxVdgeC9gW8TE=
Subject key identifier: 41:22:01:F5:E4:A4:26:BA:19:0E:13:C3:BB:D5:AA:15:87:AC:32:6B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584067B7E3080B39228E20564280
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0763e625-c579-3c8d-a720-ce40d04ca682.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:b7:e3:08:0b:39:22:8e:20:56:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=68c9df72-b2f0-4bf5-92bb-0f6fb2edb538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:33:91:77:88:42:a0:e9:b6:87:2e:25:58:35:
42:48:2a:84:15:6e:ec:fe:bd:2f:b6:b0:a9:11:6e:
5a:e1:01:97:bd:16:ba:0a:1f:6e:b1:7e:11:12:86:
97:0c:99:12:ca:6f:f6:cc:ac:5a:63:82:b3:46:12:
d1:d6:ab:18:9f:17:08:f8:0d:e4:c7:da:98:03:4a:
1d:3b:17:54:29:a7:a1:09:45:cf:82:ef:40:f4:4d:
04:42:b9:16:03:96:42:18:f3:e8:e0:24:05:13:ef:
c1:52:78:df:9b:b8:c5:57:fe:87:fa:92:f5:72:3e:
36:4b:68:da:c1:5b:87:06:ae:22:8b:2e:89:3a:40:
6e:b7:60:1f:d6:7a:a7:de:56:02:56:20:fc:a4:14:
e9:97:05:d2:fb:1f:46:17:ed:78:a5:87:44:7f:66:
fb:42:c9:df:34:40:14:3d:43:df:a1:1c:8f:79:06:
6a:59:b9:45:c0:cd:59:48:eb:9d:39:ff:db:b3:22:
49:99:d2:c9:c7:cc:21:af:c1:8f:d0:26:41:b2:29:
a6:bc:20:f4:26:a5:34:01:b3:d6:9f:90:0b:70:02:
5e:51:b7:01:b7:78:09:5d:ff:65:77:4a:d9:da:d4:
b4:7a:10:be:fb:68:0f:43:00:8c:e9:28:8a:14:28:
11:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:22:01:F5:E4:A4:26:BA:19:0E:13:C3:BB:D5:AA:15:87:AC:32:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0763e625-c579-3c8d-a720-ce40d04ca682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:3a:2a:a6:3a:df:c2:e1:4f:ad:cb:c5:15:1b:f4:85:de:09:
02:01:3c:09:d7:41:87:f2:f4:a9:a5:de:e5:be:1b:eb:e9:9b:
c6:7d:79:e0:4c:b3:4c:32:ab:92:b8:04:fd:11:4f:38:c5:c2:
1a:84:70:1a:dc:c2:d9:89:b2:db:a9:5b:25:98:f5:9e:eb:78:
88:cf:7f:dc:0a:82:ea:b3:90:94:09:cb:41:4a:11:71:27:37:
9c:16:1b:cc:78:68:5f:93:43:9f:67:f9:20:a1:d6:0f:52:5c:
f1:e3:0b:66:64:da:0d:90:72:d1:0c:4e:f9:cd:c6:c5:5c:c5:
7e:24:0f:0f:c7:a4:1d:61:2f:cd:f9:c0:a3:54:b1:51:0c:8e:
5c:8d:e7:d6:c1:a4:cf:e0:92:80:af:7f:28:af:ee:8b:2e:8d:
5a:00:75:d8:f0:ec:88:91:1d:10:79:ba:31:6d:17:76:20:30:
54:f8:f7:d9:57:14:b2:a7:20:be:aa:22:b6:fc:f3:7b:f7:58:
d8:37:c2:a0:ee:9a:9d:3f:31:9f:4f:62:d5:db:ca:f0:6d:db:
2c:d3:85:47:d8:ff:a6:30:d9:24:cd:ad:12:2d:e6:24:a4:20:
d5:45:90:1b:a5:04:30:22:6a:40:f1:c2:26:ad:6c:da:41:2d:
6e:2b:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:33 2025 by rpki-client