Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16500e1e-0f39-348e-a175-e6d9c19ec63c.roa
File: 16500e1e-0f39-348e-a175-e6d9c19ec63c.roa (raw, json)
Hash identifier: VoFBqlUh0b8MXBzCPfRIEa7/uahlbL3JrXN0H29z1TA=
Subject key identifier: 1D:D1:41:73:82:AB:28:E8:9A:93:B7:61:B0:BF:CB:F3:1B:3B:D1:00
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406F994A8FFEF8D9DB301D58C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16500e1e-0f39-348e-a175-e6d9c19ec63c.roa
Signing time: Sun 01 Jan 2023 12:00:00 +0000
ROA not before: Sun 01 Jan 2023 12:00:00 +0000
ROA not after: Mon 06 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 194.21.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6f:99:4a:8f:fe:f8:d9:db:30:1d:58:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 1 12:00:00 2023 GMT
Not After : Feb 6 05:00:00 2023 GMT
Subject: CN=e15e3bef-c2b3-4270-bd22-edd2d1e854c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:b3:43:82:99:76:5a:2f:d1:da:c4:59:8f:
6c:c7:b9:91:e5:99:11:58:18:2f:18:14:6d:ac:f5:
6d:77:d2:4e:46:9e:dc:d0:ac:fd:01:31:da:c1:fe:
34:bb:56:ab:46:36:1a:b1:65:80:ec:0c:d8:78:50:
63:a8:43:30:88:18:0f:f0:9c:d0:7c:46:4c:e6:44:
3a:99:70:08:e2:42:5a:5f:5c:44:0c:70:83:e8:1a:
49:6b:ac:ae:29:33:91:50:48:de:34:21:9d:1d:71:
9b:a3:47:bc:71:f3:d5:f2:72:a9:3f:37:33:1f:75:
50:5e:21:e3:b2:7a:62:36:75:23:59:e9:e8:25:48:
11:4b:11:1d:e8:45:0f:6f:e5:dc:01:e0:a4:19:bb:
33:63:96:fc:89:34:be:e1:ec:c8:de:fa:f9:bf:e6:
63:2b:00:23:c5:da:9e:9f:4e:02:96:d0:1c:69:d9:
7c:fa:8c:63:af:db:db:19:dd:cd:33:1e:b5:c1:9a:
fc:57:2c:7c:27:5c:20:75:f4:3e:23:c3:84:34:77:
f0:6c:e2:f6:64:76:f6:9f:72:3a:95:04:ba:89:7f:
4c:32:9c:5d:da:f7:e6:ef:47:6f:21:7a:07:cd:e4:
e0:27:04:f7:0b:93:d8:4a:5a:8f:c2:03:51:e8:2a:
63:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D1:41:73:82:AB:28:E8:9A:93:B7:61:B0:BF:CB:F3:1B:3B:D1:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16500e1e-0f39-348e-a175-e6d9c19ec63c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
194.21.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:aa:2e:16:01:ee:a8:9b:53:8d:4a:ea:94:cb:c7:02:82:2e:
46:4c:41:23:b9:61:82:9b:28:0b:2b:f5:ef:44:02:49:df:90:
96:db:d3:21:32:70:77:c6:c1:9f:35:1d:a1:df:0c:e4:a2:6f:
67:83:df:54:23:1f:be:dd:99:c9:ac:8a:04:ba:71:44:55:b1:
3a:b9:ae:92:f7:b0:85:47:43:fc:cd:b8:38:cb:c8:79:91:ab:
0c:84:73:27:8e:c4:43:f2:39:23:a2:b3:43:24:8a:7b:a8:5b:
3e:ca:2d:dc:63:4a:9a:d3:ea:a8:73:60:88:4f:f7:73:29:8a:
bd:2d:bd:64:88:cb:f7:50:6e:51:84:67:89:7e:c8:d3:31:a9:
a1:12:26:20:34:3a:a3:2d:fc:0a:4f:bd:86:20:c1:d9:b7:01:
8a:87:17:d0:f9:b6:af:1e:c6:dc:e1:a6:d3:67:9e:c2:a6:4f:
6d:f5:52:38:1f:15:b7:2e:a7:a4:39:be:15:b3:cb:d4:94:e2:
24:20:56:51:59:da:2d:7d:67:1b:67:5a:10:31:74:1e:e0:1d:
d1:5e:16:5e:38:97:82:9c:32:87:2a:c3:c1:ae:5b:63:e6:0d:
cf:00:cf:19:98:23:8d:bf:5b:cd:80:d1:be:a3:ad:b8:84:9e:
eb:17:67:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:38 2025 by rpki-client