Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0b7119fd-d50c-32c7-8e07-c0732292addf.roa
File: 0b7119fd-d50c-32c7-8e07-c0732292addf.roa (raw, json)
Hash identifier: cAVISVnzFVHXY6L/tU2jyhzBpnbzpK0BP32X3Hx1pIE=
Subject key identifier: A5:C0:CC:4A:A2:6D:3B:59:5C:E6:09:83:5E:21:0A:B5:44:B0:BB:EB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858403E73B4FA5BB37F2338B26B00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0b7119fd-d50c-32c7-8e07-c0732292addf.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:73:b4:fa:5b:b3:7f:23:38:b2:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=ce9ff1ea-5755-409e-8b67-22169e2f47a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:36:ab:20:6f:4e:f3:58:a0:c3:c8:02:3e:
e8:f5:cd:72:08:dd:e0:60:3c:fe:56:7d:6d:27:66:
bc:59:dd:7a:8a:81:a8:8f:88:12:53:73:be:c2:2f:
a6:08:d1:2a:2b:cb:b2:b7:a8:4f:ed:73:4c:51:55:
42:66:fd:bd:1d:50:00:a5:d6:02:1b:ea:87:f8:fc:
a0:92:79:aa:e9:04:4c:d0:e2:de:eb:fe:5d:40:c1:
7b:48:96:34:a0:65:24:02:80:69:aa:06:8b:25:32:
22:75:72:4e:75:c6:12:e5:43:f3:0e:83:9b:a5:49:
3a:0d:69:6d:e0:89:aa:a3:8e:03:ed:61:15:86:9c:
57:92:fa:cf:1e:15:20:32:4a:84:e4:06:a3:09:1f:
f8:24:38:8d:4a:d9:3a:13:91:a2:51:90:d7:0b:66:
4f:2a:47:32:7e:c3:31:bb:53:20:d0:02:f0:70:f1:
f7:3d:4a:9c:3c:41:64:25:62:a2:f3:67:b5:7a:99:
44:4b:7b:5e:f4:be:57:9a:6d:61:69:1a:d7:ac:e6:
1d:86:bf:e9:40:e6:f0:41:37:0e:55:c0:77:b6:13:
78:d8:10:4f:25:48:18:50:c9:89:c0:28:cb:e3:08:
bb:ff:b7:b4:b0:5a:f6:8e:9c:ca:04:56:70:e9:29:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C0:CC:4A:A2:6D:3B:59:5C:E6:09:83:5E:21:0A:B5:44:B0:BB:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0b7119fd-d50c-32c7-8e07-c0732292addf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b6:c7:b2:2a:a5:25:9d:b9:21:95:47:9e:6a:22:8d:54:79:
af:62:9e:c5:f2:4e:bd:c1:66:c7:21:ca:34:aa:bd:d7:ae:7c:
41:ba:bb:8f:08:cf:d5:db:83:a6:d3:1d:0e:f6:78:ef:74:d1:
31:11:8c:4a:d8:2c:88:e7:1f:03:67:2c:0c:fc:9e:60:d0:87:
6b:ad:ca:aa:f2:fa:0a:8a:f4:6d:58:9b:48:84:72:8c:25:eb:
c3:58:b4:5a:58:df:2a:a5:82:c9:7b:2f:9d:7a:54:26:30:70:
bc:b0:3a:87:0e:07:99:6e:b2:7d:d5:42:1a:83:aa:63:2c:18:
b5:25:6e:de:55:db:65:2a:3c:48:1e:0d:f7:84:41:c0:d0:0a:
86:2e:91:ef:5a:2a:4c:7f:00:ee:ae:1b:3f:3a:ec:e5:fe:d5:
4b:c4:3e:99:73:81:87:24:c5:1f:12:e1:2a:7b:b6:ce:2b:6d:
90:b8:54:bd:59:01:5f:42:04:9e:f4:ab:7f:a9:3e:29:98:ce:
e0:2c:09:0e:3f:24:a0:a7:0a:d1:fe:77:58:ec:69:8a:2e:9f:
8a:0a:eb:f2:23:4b:ea:9c:41:1b:5b:5e:74:2a:c1:4e:13:13:
44:91:88:ae:b3:71:d7:7e:53:60:94:43:a1:4b:af:1e:9c:7f:
0a:74:66:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:17 2025 by rpki-client