Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16dab9ba-fe40-3bac-b941-33e5273ad8e0.roa
File: 16dab9ba-fe40-3bac-b941-33e5273ad8e0.roa (raw, json)
Hash identifier: O+xXGiaQGhvmLFlFkwi+2WVSz5A7DuNcumOPnJK5tZo=
Subject key identifier: CB:6F:98:32:90:B4:FD:D0:4F:BB:A8:E9:FD:29:93:20:54:4E:EF:7A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840AA411B9EDEDF959E3CAE1C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16dab9ba-fe40-3bac-b941-33e5273ad8e0.roa
Signing time: Sun 22 Jan 2023 12:00:00 +0000
ROA not before: Sun 22 Jan 2023 12:00:00 +0000
ROA not after: Mon 27 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 54.116.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:aa:41:1b:9e:de:df:95:9e:3c:ae:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 22 12:00:00 2023 GMT
Not After : Feb 27 05:00:00 2023 GMT
Subject: CN=987ce96e-5861-4f0d-ae7c-fa75ca9bbcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:32:94:98:47:22:f8:ee:27:04:24:44:c7:62:
8a:28:e6:42:3c:2b:5e:14:c2:a9:cd:16:91:33:1e:
ce:9d:4c:9c:ea:12:d3:81:3f:2a:8a:5f:99:03:2a:
5f:66:a4:c5:f7:24:b9:f5:5f:e9:22:0a:a8:cd:17:
03:07:91:bd:8d:6a:52:2e:cc:ef:63:99:a9:7c:fc:
45:9b:f9:99:76:00:27:dc:13:9f:f6:b9:93:8f:9c:
d8:d5:de:63:3f:dc:9d:ab:20:a1:d0:fe:03:0e:09:
0c:02:32:fc:0b:a4:f5:da:a3:45:7e:24:d1:74:64:
43:53:ab:9c:37:bc:70:b7:e9:07:4d:2d:5a:3d:71:
94:21:37:92:d3:af:4f:e9:f8:77:16:ac:66:e7:34:
b1:41:7f:38:af:24:d9:1f:b8:40:fe:6e:3b:01:20:
1a:81:43:54:5a:6d:ba:64:a6:6c:80:6c:18:b1:28:
a4:77:6f:a2:1b:b3:8b:0a:8f:21:b3:f6:34:51:f6:
82:16:97:3f:f0:63:da:49:0e:3f:31:9a:bf:c8:65:
40:a1:a1:a5:a2:b0:ba:96:d8:d1:4b:f1:dc:7e:40:
d6:b9:5e:aa:95:14:a4:34:95:c3:76:f5:fa:ea:bf:
71:73:44:57:1b:62:33:81:11:a4:7a:fc:c4:6a:b2:
03:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6F:98:32:90:B4:FD:D0:4F:BB:A8:E9:FD:29:93:20:54:4E:EF:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/16dab9ba-fe40-3bac-b941-33e5273ad8e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
54.116.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:a1:45:aa:18:07:e5:4d:9b:5f:c2:3c:a1:1b:c5:60:35:84:
40:98:37:14:09:72:66:34:c6:af:f8:31:d0:48:5a:c7:1e:e9:
25:6e:17:fd:29:8f:b0:c3:f7:0a:11:71:64:fa:54:80:a3:7e:
75:a6:6f:a5:b9:e8:5d:f4:b6:1c:a9:9d:17:8b:7f:bc:d6:ab:
c4:40:cd:6e:b0:5c:53:e3:a0:1b:6f:8e:0c:c6:17:f1:e3:4e:
94:1c:30:2d:ee:11:64:31:6c:f7:4b:74:88:5e:a6:b0:47:45:
54:67:47:7b:21:89:01:e0:47:c7:bc:9d:91:d5:7d:e7:f9:81:
65:8a:ed:57:9e:dd:91:d0:b8:3d:00:c4:d7:89:9a:00:97:8f:
48:92:9a:ab:37:20:0f:42:b4:f5:69:98:da:75:09:bc:bc:db:
d6:7b:1c:8a:f3:be:b7:21:13:6c:87:05:be:29:fa:b6:2d:7f:
fd:ae:a3:eb:ee:af:37:9c:08:47:bc:b9:8e:8a:28:ad:b4:d8:
43:2d:ec:1c:e8:6c:7d:e4:8b:3b:c3:9c:8c:e8:b9:11:01:1c:
8e:f6:1d:35:41:c3:ff:0a:a3:43:ad:e4:d5:3c:13:02:3c:85:
c3:d6:f7:93:a8:3f:6e:d8:e1:d6:1d:59:c9:b0:d0:60:73:26:
ae:39:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:34 2025 by rpki-client