Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10e00c45-1a51-38cf-bc4c-9aa19f7199eb.roa
File: 10e00c45-1a51-38cf-bc4c-9aa19f7199eb.roa (raw, json)
Hash identifier: kWa8WWojwSvb/UddaS6t3S4NyTCJMl+BfqrTlj9ajA4=
Subject key identifier: 72:23:42:11:D1:68:7D:7D:F5:CB:E8:35:87:22:5E:E5:20:D7:05:AD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF06659F1861F911693014400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10e00c45-1a51-38cf-bc4c-9aa19f7199eb.roa
Signing time: Wed 16 Nov 2022 12:00:00 +0000
ROA not before: Wed 16 Nov 2022 12:00:00 +0000
ROA not after: Thu 22 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.132.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f0:66:59:f1:86:1f:91:16:93:01:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 16 12:00:00 2022 GMT
Not After : Dec 22 05:00:00 2022 GMT
Subject: CN=552a4bc7-ab8d-4d5f-8cf9-5c537f829136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:00:86:d3:b7:37:23:22:e2:bf:ca:8a:ad:62:
b4:c6:f6:dc:70:ea:16:10:15:84:9f:00:d2:11:82:
8c:da:f6:38:0e:59:19:36:63:01:13:c3:c2:42:3c:
2c:2c:39:2f:81:bd:b1:4d:cc:1a:c7:79:35:c8:8f:
21:6e:0d:30:d7:e6:41:7d:0b:45:88:19:8a:21:4b:
2c:20:5d:f6:20:9d:dd:60:19:6e:08:7e:34:4f:34:
80:05:17:ab:45:58:a4:c0:6b:e5:f8:76:a2:01:d3:
b3:28:da:4a:00:ec:1b:22:fb:0c:f2:0d:b5:e5:78:
14:ac:06:85:b9:65:ab:b3:b5:b0:2d:5e:82:75:1e:
84:98:ae:13:c1:a9:6a:dc:e3:b7:08:41:28:2c:e6:
50:e4:b0:a4:fc:65:28:99:3c:33:de:da:b5:89:ab:
8c:8b:d0:ea:8a:de:7d:31:4c:4a:57:a3:8a:dc:a4:
b1:db:2b:46:90:43:37:89:59:fa:06:71:06:d4:0b:
ba:d5:02:8a:cb:13:7c:25:13:3d:c3:c1:95:c6:b7:
b3:b6:96:7f:6b:22:22:b3:d4:ed:83:18:47:89:4c:
54:38:12:1e:44:a3:e1:c9:4b:27:be:95:cb:ec:9d:
95:15:42:c9:ac:3c:38:ea:4f:33:8a:45:35:49:fb:
21:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:23:42:11:D1:68:7D:7D:F5:CB:E8:35:87:22:5E:E5:20:D7:05:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/10e00c45-1a51-38cf-bc4c-9aa19f7199eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.132.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:c8:79:ca:6c:d7:66:a4:94:b0:6d:49:e6:fa:a9:2a:75:34:
3d:e5:38:87:f0:03:5e:14:07:8b:c7:a7:fd:0e:36:3d:2d:e7:
4d:c4:82:e4:81:ad:74:94:8f:ef:94:ff:08:2a:2a:4a:13:52:
5b:65:47:90:77:07:f9:53:30:1e:ba:d5:cd:b4:46:e1:8a:3b:
5e:51:35:cd:d2:31:04:df:49:78:c1:13:88:a9:0f:2d:4f:c7:
e8:18:83:b9:3b:c5:9e:77:52:24:5d:dd:8d:3f:66:22:5e:80:
18:96:d8:44:59:ce:ec:21:06:9b:ea:5f:aa:5b:93:3a:da:ce:
8a:13:1c:75:5f:78:36:20:92:99:43:af:c8:37:d8:c9:b9:d7:
25:c0:bd:86:e6:96:c1:5f:9b:e6:48:2e:f1:5e:08:cf:9f:3b:
e5:b6:1d:0d:18:e4:88:36:f9:04:03:e5:6a:f8:62:1e:f2:b8:
f6:93:8f:b8:5c:ae:28:8c:a1:bb:91:c5:8c:69:13:74:31:7d:
21:14:8e:b8:3d:23:74:44:1f:ea:f0:e1:9b:54:5e:40:b8:76:
fc:9f:cf:a7:a9:9b:41:26:1a:10:3c:20:c3:2e:83:8f:4f:2d:
e4:1d:23:91:94:66:a9:46:8b:8c:c3:6a:db:33:3b:77:d6:3d:
e0:ed:f7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:34 2025 by rpki-client