Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/133f7abc-0377-3a7c-afe7-168cd6679068.roa
File: 133f7abc-0377-3a7c-afe7-168cd6679068.roa (raw, json)
Hash identifier: jaqaXo19GpFbHDX9L8cYRRgRHSRhfPH51+nzyfZ6sOs=
Subject key identifier: 83:C3:E2:24:52:91:A2:5D:28:BA:F5:57:D5:65:56:2B:FD:BF:B6:9F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F8807AD20006D34CE181D63E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/133f7abc-0377-3a7c-afe7-168cd6679068.roa
Signing time: Mon 10 Oct 2022 15:51:07 +0000
ROA not before: Mon 10 Oct 2022 15:51:07 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:88:07:ad:20:00:6d:34:ce:18:1d:63:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 10 15:51:07 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=c936f480-8fec-4ca9-a827-71fe7c69a930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:44:d1:1f:82:22:ef:2e:05:2e:04:75:ae:
70:3a:d3:88:98:44:55:db:a7:98:12:9e:a1:36:c3:
b4:67:6c:83:a6:09:16:93:13:1b:64:6b:b4:88:e0:
d5:9d:95:5c:29:81:9a:52:e8:05:9c:68:9a:ab:de:
83:0c:68:e7:90:33:b1:d2:64:0d:bf:37:d7:38:b8:
01:29:82:6e:9e:de:24:0e:75:35:9d:3a:5c:ba:ad:
36:03:ad:3f:22:04:2c:d7:24:94:9d:c6:6c:13:5a:
05:54:e8:2b:04:13:f5:aa:e7:93:e8:85:1a:ea:1a:
a1:ed:b3:fe:8c:9c:1e:1d:d3:5b:2b:45:d4:55:4c:
49:24:d7:61:a0:d5:2a:ca:f3:25:61:f5:22:cf:fc:
4e:86:5d:eb:ee:e1:a4:e9:de:72:8c:e7:30:46:bc:
21:a6:23:8c:d7:cf:76:07:4e:ad:16:ab:a0:25:ff:
d9:df:d5:5a:82:96:e0:77:78:80:d2:f8:e9:11:46:
46:f0:ea:d2:61:22:e4:f5:9d:4b:71:25:52:84:ce:
fb:83:ec:d5:f7:2b:c8:bf:4c:43:c2:74:9b:b2:a8:
88:c7:18:2a:5e:8e:e2:21:94:dd:90:54:4d:70:1e:
ab:b1:76:df:66:01:76:9b:02:c0:dd:08:f6:97:c1:
b4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:E2:24:52:91:A2:5D:28:BA:F5:57:D5:65:56:2B:FD:BF:B6:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/133f7abc-0377-3a7c-afe7-168cd6679068.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:ca:c3:bf:d4:6c:d3:fc:2d:4a:ce:33:0b:f4:b8:9c:8a:b1:
bc:8d:48:23:fe:e2:a1:b8:fb:5d:39:b0:01:3f:09:df:64:9c:
e4:4f:f5:26:c4:76:61:2d:ac:53:22:24:3d:9f:37:87:4a:64:
cf:c7:0c:55:71:78:15:12:fd:1e:6f:a9:d2:40:dd:b2:ea:10:
da:2d:5d:34:fa:e7:82:e5:85:55:a9:ac:17:05:0f:49:ba:9a:
53:d3:8b:5b:ca:28:cb:80:e4:16:65:8e:75:79:4d:89:3a:67:
89:90:fb:73:fd:f1:a1:a5:e8:90:4e:76:fa:2f:8a:f0:49:72:
5a:0b:c2:1c:44:97:f4:76:4b:f2:15:c2:a8:b5:e1:37:7b:23:
b9:2a:d3:1d:ed:31:77:bc:71:bc:30:70:c0:0a:49:53:57:f2:
f9:50:81:7d:53:a4:7f:4f:5e:b9:79:76:77:e7:60:a9:b8:03:
1c:33:26:3a:88:08:81:9a:af:96:24:c6:25:23:2d:8a:3d:a9:
db:54:e2:be:ea:eb:f2:0e:59:85:f0:0e:53:05:41:3a:a2:de:
f0:72:df:6f:9a:35:75:e1:43:77:2e:e6:e4:aa:fb:a6:86:bb:
df:31:96:9a:84:1f:7e:9a:10:ec:5e:2e:12:f8:d8:d2:4c:31:
ec:8b:93:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:41:52 2025 by rpki-client