Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11d488e3-0885-34c5-bde1-be75c910b453.roa
File: 11d488e3-0885-34c5-bde1-be75c910b453.roa (raw, json)
Hash identifier: 9uUs7mDEqeNLch0jdpNVKWLkh6kZ+on+OwLyYf47s4g=
Subject key identifier: A1:BB:92:74:15:E2:A9:31:E3:73:59:01:B7:2A:55:15:8F:9E:35:F0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404689973524863A4E74BF8880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11d488e3-0885-34c5-bde1-be75c910b453.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:89:97:35:24:86:3a:4e:74:bf:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=92e838f2-a32b-4818-a52e-fbb81fd28230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:79:d1:8b:ca:f4:3f:1f:a0:72:e9:3b:f4:
a2:29:9d:de:29:58:58:83:5a:e2:ba:87:e3:3c:56:
af:09:3f:0a:43:d0:b3:7d:95:78:41:bb:e7:18:e1:
f1:cc:43:85:de:cb:5c:aa:5a:78:19:d5:ea:8b:dd:
3f:d9:97:2b:5a:b1:31:47:54:9a:7c:7b:eb:d4:f0:
41:89:14:5c:40:84:34:63:29:22:c6:2f:6c:08:f2:
fa:ae:84:d1:4f:d7:f9:f0:47:c7:dd:77:83:39:6f:
ce:09:50:9d:f8:ab:ef:37:74:96:37:d7:83:77:f2:
40:55:a6:82:c8:79:67:87:18:3d:01:4f:25:d2:cf:
a3:fa:23:67:5e:34:b4:97:94:85:8d:45:30:10:f6:
52:28:8b:33:09:be:98:22:4f:6f:6b:10:3d:86:ed:
15:72:63:7f:2a:72:dc:99:8d:0f:e2:37:f1:a9:df:
4a:89:d2:3b:0d:24:94:de:d3:17:9d:fe:5b:e2:9e:
05:ab:0a:ff:8d:47:d6:b5:7e:cb:a8:33:49:6c:fd:
f6:05:0f:1f:63:65:5b:b9:2f:6c:65:8c:da:a5:00:
e4:13:6a:1d:63:63:51:69:8a:23:7a:ef:52:ac:17:
a8:cc:6d:0a:d3:a1:14:0e:a9:ba:62:33:a1:06:bf:
92:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BB:92:74:15:E2:A9:31:E3:73:59:01:B7:2A:55:15:8F:9E:35:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/11d488e3-0885-34c5-bde1-be75c910b453.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:8d:88:f9:d5:7c:d8:84:a2:ff:f9:b0:54:77:fb:fa:58:2a:
a3:61:5e:08:5b:74:ee:3b:ff:0a:49:10:99:b0:46:4f:0b:00:
91:6a:18:53:2d:54:71:d0:14:2a:17:be:4b:24:a8:1f:e0:3e:
8e:11:d0:4c:15:9c:af:9b:72:fa:7d:f2:b4:1c:02:ec:20:88:
40:3b:b0:42:92:77:e2:8d:d2:6f:e6:83:be:1a:21:ed:01:34:
fb:d7:b9:10:af:1a:3b:6c:f7:ed:0c:ce:96:59:1f:05:04:a5:
13:54:7f:14:32:4f:c0:c4:fd:ba:df:87:bb:55:fa:1f:1b:df:
6c:5b:1a:9b:e9:fc:2b:28:74:0e:79:5a:68:79:e8:4d:94:da:
03:63:b0:d2:35:41:63:25:c9:13:a3:09:ea:53:1e:cd:c7:54:
47:d3:6d:6f:62:04:fe:59:f5:6d:62:04:d9:b5:83:4a:67:1c:
fa:f6:41:56:5d:5b:cd:b7:64:9d:70:3c:9e:6c:96:33:72:31:
55:3b:b8:33:7a:69:02:1a:49:0d:37:ee:00:f5:c3:04:47:1d:
dc:97:06:52:fd:bd:0c:18:ba:5e:c2:b6:f1:db:62:4a:00:f0:
97:78:b3:5c:fb:f3:65:ad:2b:2d:d1:75:03:90:10:77:9f:43:
fe:89:ff:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:02:16 2025 by rpki-client