Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14914e90-569f-368c-a54f-ccb468be15f2.roa
File: 14914e90-569f-368c-a54f-ccb468be15f2.roa (raw, json)
Hash identifier: 5UbBMxdbYsstOoQEjuA/yILdtrsjpyvvjdPc49b2fj0=
Subject key identifier: E7:8C:71:16:BF:56:7E:7A:C5:BC:F7:3A:DC:E3:7D:A1:AA:E9:FE:7C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401F471F3F77CD2A69D7127B50
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14914e90-569f-368c-a54f-ccb468be15f2.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.130.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:47:1f:3f:77:cd:2a:69:d7:12:7b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=aaad1eee-ca10-4d11-8c7c-b86c0dfb98e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f5:35:3b:c5:7d:15:32:7b:bd:d4:f6:d3:42:
31:2c:bb:2f:fd:7d:c4:f7:81:61:ff:53:cf:af:4f:
08:36:a9:d6:1f:9b:88:b0:b4:61:da:f0:d1:18:ee:
f0:f9:c0:b6:8b:d7:f5:1c:f1:bf:25:ee:a7:ec:39:
8b:04:05:87:a0:b3:83:93:19:0f:72:1e:a9:d6:af:
59:49:b6:4d:73:ad:6e:84:f0:be:4f:36:a7:0c:a9:
c1:09:5c:bd:0a:28:1c:1c:80:5a:11:27:11:3d:bf:
52:e1:79:b5:55:f9:02:5c:ad:28:a5:9b:2e:2b:c4:
31:a6:ec:ab:17:05:4d:b8:68:db:8a:b3:e0:21:32:
ba:9f:1c:b7:86:a7:57:2c:f4:b3:ba:e3:d1:56:a5:
dc:d2:57:94:9b:10:3f:32:fc:91:18:59:dc:96:29:
3b:11:f4:82:22:10:7b:cf:d8:e5:e7:b2:78:60:d4:
86:9a:ce:16:3c:1c:9c:8b:6b:49:0b:0e:cb:52:17:
39:1a:90:7c:f7:ab:86:b6:e0:77:57:4c:73:16:9a:
ea:5c:a4:19:92:2e:38:1e:02:44:08:f6:13:54:9f:
21:aa:69:e7:c0:c4:d5:a3:b5:6c:74:a1:42:49:74:
68:99:5e:77:9a:da:ee:a2:ed:2c:b0:a0:34:8c:8d:
13:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8C:71:16:BF:56:7E:7A:C5:BC:F7:3A:DC:E3:7D:A1:AA:E9:FE:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/14914e90-569f-368c-a54f-ccb468be15f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.130.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:97:94:fb:9a:6d:64:00:ab:6c:4c:4c:f2:0f:44:5b:3a:b6:
b2:18:b2:ed:a4:8d:13:b8:73:56:5f:b7:87:fd:c3:ee:ed:52:
b5:bd:ad:d8:ec:c6:05:27:49:83:ef:22:68:b7:79:64:aa:cc:
3e:76:34:f4:9e:0d:ba:46:51:ef:78:40:9f:2e:72:13:2b:b9:
b9:fd:f8:12:f4:d7:4f:02:77:84:79:4c:30:76:4c:14:27:80:
dc:f2:0f:0a:7a:ce:30:d8:52:f0:36:da:72:40:83:d0:da:0a:
dc:16:b3:4c:96:78:ce:a5:12:dc:b9:35:2a:b6:ec:68:95:24:
3b:de:7c:85:7d:d6:4d:24:31:7c:fd:3d:33:43:ef:42:e9:d3:
93:bf:f5:67:66:99:a0:33:a7:b2:90:07:98:46:80:33:76:5f:
bd:89:6a:ca:11:ce:0d:fd:82:24:5b:3b:d7:ab:1d:c9:55:85:
9d:4f:d0:40:a4:26:05:c7:c8:88:c8:6a:76:25:d7:b2:d5:cd:
1d:a2:2f:96:1d:55:9a:db:c9:68:0e:54:61:e7:db:3b:91:6c:
2e:30:2f:17:36:65:6f:ee:f4:85:48:13:e6:8c:fd:e6:16:ca:
7b:a4:cf:11:4d:85:de:da:18:53:8f:38:fd:da:af:16:a0:70:
c6:79:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:56:20 2025 by rpki-client