Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1670d759-a87d-3435-8ab4-f9ef30bb4650.roa
File: 1670d759-a87d-3435-8ab4-f9ef30bb4650.roa (raw, json)
Hash identifier: h3eO/W46YgkPxsFHjkESDuuHcCcgXz/wIzpPzpVEUrA=
Subject key identifier: 45:82:55:E9:81:08:B3:9C:C6:C9:29:CD:56:C3:81:83:30:09:85:75
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D806B47D79CA046DD52EAF480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1670d759-a87d-3435-8ab4-f9ef30bb4650.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.159.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:6b:47:d7:9c:a0:46:dd:52:ea:f4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=a2eee97b-2be7-4615-9d05-02d8a0dc81b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:aa:0e:5e:d0:e9:52:1a:08:cc:99:ac:04:6a:
47:2d:61:4f:d8:82:c2:87:f9:32:f2:aa:36:05:1e:
7b:89:0b:d0:87:67:03:ef:ec:8c:79:cf:88:d3:32:
dd:cf:c8:e0:2c:bf:10:33:4e:ce:c0:0d:c1:0b:7c:
92:b9:91:33:57:a8:8e:01:a6:af:eb:94:8a:a6:bd:
3c:95:79:09:6c:99:88:aa:f3:94:e1:fc:a5:6e:fe:
0d:39:2b:9b:6f:d9:a0:09:47:2f:67:dd:48:3a:1f:
5b:89:76:8a:72:e9:20:42:70:86:3f:33:6d:3f:d7:
17:4d:7f:f9:ba:de:55:9c:d4:eb:57:8b:d0:e6:6d:
86:d3:bd:0e:6c:bc:a1:b8:e2:6b:06:c2:9c:82:42:
18:bc:97:48:3d:2d:b9:ab:84:fd:c4:95:b0:a5:ee:
60:0a:81:c5:5e:e2:0f:64:2f:36:54:a4:63:c6:5a:
69:d3:7e:bd:f0:dd:35:d5:ae:6d:ee:fd:31:0a:5a:
61:a0:7e:55:dd:24:05:c0:66:e7:27:a5:34:90:31:
ff:60:91:bd:d5:43:c0:18:7f:94:54:16:5d:77:b0:
3f:2a:6f:34:86:3b:16:bd:81:84:f4:a4:cb:1d:35:
5f:6d:9e:6c:6a:31:a7:cf:a3:37:50:57:ac:e7:98:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:82:55:E9:81:08:B3:9C:C6:C9:29:CD:56:C3:81:83:30:09:85:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1670d759-a87d-3435-8ab4-f9ef30bb4650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.159.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:4d:3c:73:64:2e:9f:d1:d4:45:40:ab:8c:a2:12:9d:35:20:
0e:91:de:13:cd:c5:9b:c6:ae:b8:e0:40:8c:a2:4f:de:c5:a9:
d1:47:32:08:1e:c0:78:22:d4:79:b3:78:aa:74:87:5b:56:e3:
0b:4d:b8:8e:df:e5:45:8c:fe:e9:5f:95:c5:9d:06:76:6d:21:
a5:4e:7b:52:9a:43:84:59:87:08:a7:ad:43:c1:d3:e2:71:24:
4d:54:db:62:25:61:69:16:14:26:21:a7:ba:e0:d5:06:b3:d9:
e6:a8:74:c0:92:a0:58:8e:7f:92:9c:d1:3b:31:c5:64:f2:9b:
a2:2f:4c:1f:64:52:36:cb:53:db:13:1e:ac:68:75:79:e9:32:
ca:da:fa:83:03:72:73:f7:f6:3c:1a:b4:83:9c:a5:00:21:f4:
84:f3:aa:96:00:8a:35:a8:ea:d2:c7:7f:a2:18:5f:c6:9e:a3:
4e:e0:a8:53:7a:a7:86:7b:42:18:16:2a:ab:1d:73:66:61:95:
76:d2:94:ba:87:7b:af:bf:57:af:a5:50:32:a9:b6:bf:cb:c4:
f4:01:46:ad:49:dd:f8:19:3e:75:49:e8:ef:a1:fb:e5:0c:e8:
6a:a8:8e:57:d2:72:f0:66:33:89:4c:33:bc:fa:5f:65:36:cb:
5f:0a:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:46:56 2025 by rpki-client