Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/161b41a6-2a0a-3850-96fd-4f8ebf86366a.roa
File: 161b41a6-2a0a-3850-96fd-4f8ebf86366a.roa (raw, json)
Hash identifier: cXzo2+xfvOvM4LD+t7oWCo6qbJGfsjCR7P6iZ8Dp2zA=
Subject key identifier: C3:7A:FB:D2:6F:4A:C7:00:17:9A:EF:AD:33:33:A0:17:FB:A4:21:D5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FA233C2DDB73E911D809D9780
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/161b41a6-2a0a-3850-96fd-4f8ebf86366a.roa
Signing time: Wed 19 Oct 2022 12:00:00 +0000
ROA not before: Wed 19 Oct 2022 12:00:00 +0000
ROA not after: Thu 24 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.87.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a2:33:c2:dd:b7:3e:91:1d:80:9d:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 19 12:00:00 2022 GMT
Not After : Nov 24 05:00:00 2022 GMT
Subject: CN=40b3de7f-8f23-4cf9-a340-c280ba301110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f0:8a:2c:c2:48:e0:87:55:72:a7:d1:90:bd:
e6:a8:d7:6f:17:dc:f9:1e:8b:e9:be:bf:b5:2e:90:
84:80:00:81:b6:9c:06:c0:17:9f:fe:34:8a:ed:4d:
bb:85:57:9b:b0:b6:98:55:cf:2c:83:3e:d2:84:72:
08:37:53:51:1d:ea:ce:c1:ad:c5:eb:d4:5e:2a:0c:
ec:6c:25:d5:5f:4e:66:f6:2c:1b:0b:50:b9:32:33:
24:67:35:ea:ee:96:59:1c:2c:11:de:37:7b:6f:fe:
1f:56:06:71:dc:2a:64:21:f4:31:f4:66:07:ed:a7:
4f:d8:fa:43:7f:e8:6f:c9:cf:f8:56:f7:db:6d:d6:
2e:19:b9:ee:8c:f6:d9:8f:cf:96:bf:08:6c:1f:68:
1c:a7:41:c6:18:7e:bf:bf:9e:6b:2a:e6:b9:12:b5:
87:c7:77:07:43:a7:05:27:b4:54:28:89:d5:24:93:
36:b9:2a:d8:39:e8:23:b0:32:b3:97:78:f5:21:f6:
53:e8:cd:57:1c:16:d2:01:44:60:cf:39:67:04:7b:
47:38:28:3b:25:fe:36:34:5b:92:f9:fc:c6:38:99:
97:28:f4:46:ae:b9:cb:fc:37:d3:b3:a3:0f:e6:90:
66:0c:f4:c5:65:ab:49:18:40:14:cf:28:7d:63:75:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7A:FB:D2:6F:4A:C7:00:17:9A:EF:AD:33:33:A0:17:FB:A4:21:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/161b41a6-2a0a-3850-96fd-4f8ebf86366a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.87.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:a8:6d:7e:40:c9:e0:c7:78:80:95:57:a5:5b:74:b9:c3:23:
da:e8:8d:6b:45:17:53:68:42:38:f0:53:38:ad:59:a3:b6:66:
16:60:0e:93:a7:50:27:b5:d2:c4:be:d6:30:d4:2c:5d:7c:0f:
26:7b:6c:93:01:73:cf:4b:85:9c:9e:e8:3c:a1:4a:9a:51:81:
14:b2:a5:42:40:37:69:6a:a9:b9:7f:c0:6f:2f:b0:99:24:ca:
c1:5b:7a:e5:13:80:71:34:86:de:f3:79:e9:a2:cb:65:45:71:
8d:eb:e5:9f:3f:61:81:b0:59:1a:60:43:8c:0c:c2:63:0c:05:
e9:7a:5d:b3:b9:98:f9:a9:5d:cb:2b:c6:9a:f4:6d:52:30:74:
3f:e2:f5:91:d0:20:17:58:a0:60:56:e8:45:67:d2:f3:dd:6c:
63:51:29:8a:73:b6:65:0e:30:fe:61:94:f6:f7:4f:79:60:47:
f2:f7:9f:88:4b:3b:30:16:0d:f3:53:11:e3:33:69:ac:75:3b:
b5:e7:68:19:22:be:23:57:e6:74:90:21:65:e8:4b:44:e3:8f:
91:cc:e1:cd:ea:27:eb:4d:95:e2:60:37:26:29:24:83:e1:bf:
4a:4e:a2:ac:2c:9d:34:bb:d5:36:55:a7:c2:f0:2f:e1:d3:f1:
85:4f:53:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:10 2025 by rpki-client