Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ad22163-e0fa-3cd9-bef8-e688ce925dc3.roa
File: 1ad22163-e0fa-3cd9-bef8-e688ce925dc3.roa (raw, json)
Hash identifier: PBOxOv5p3/T4YqTPog8MXAPMFn0gI+lXTDaQ7VK1iGE=
Subject key identifier: 18:D7:AE:78:5C:2B:16:84:02:8F:C9:0B:73:E1:FB:E1:B2:6A:F5:CD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584019762D9B366A7E2C8DD0AA60
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ad22163-e0fa-3cd9-bef8-e688ce925dc3.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.89.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:76:2d:9b:36:6a:7e:2c:8d:d0:aa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=93f56d39-85f0-41f5-89d7-1d98381740f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:91:2a:08:fd:55:ba:6a:8d:3b:53:d4:cd:
05:2f:68:28:12:9d:cc:56:50:a6:c1:2a:10:87:f0:
d4:5a:6e:87:52:74:6b:dd:e5:d0:cf:63:98:ae:bb:
c6:74:45:53:3d:bf:77:54:23:0e:a0:a1:56:52:d3:
64:8c:e8:a7:b5:a9:30:80:00:df:b6:2e:56:bc:41:
7b:bc:bc:8d:d8:3e:1c:1f:bc:07:e9:08:f1:49:c9:
f6:50:6e:04:f4:b3:cd:d3:5d:2e:16:0d:52:7d:cc:
11:9e:20:93:48:88:4c:a1:fc:3d:20:d0:d3:9c:51:
fc:a4:90:35:93:43:2e:3d:a6:75:77:3a:cb:30:6a:
55:92:b9:cc:7b:11:72:09:d7:a5:23:ae:e4:e2:16:
20:67:7f:0b:b3:d2:b2:01:a8:eb:7f:3a:26:7d:55:
ff:7a:a8:b0:a0:f4:23:53:54:bd:ac:15:7d:e0:bb:
26:f4:5d:45:71:fc:4d:4f:a9:81:63:d0:23:e5:21:
17:94:ce:b4:9f:93:ef:cc:76:14:4b:d7:68:b9:7e:
54:d4:89:0a:d1:0b:85:f1:9d:dc:2d:d4:b8:a9:d5:
61:d0:83:be:51:7b:fd:e0:d6:46:e3:75:e9:22:bc:
60:45:5f:09:cf:bb:f3:00:ae:cc:74:af:bf:8a:f3:
56:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D7:AE:78:5C:2B:16:84:02:8F:C9:0B:73:E1:FB:E1:B2:6A:F5:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ad22163-e0fa-3cd9-bef8-e688ce925dc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.89.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:aa:5b:29:97:64:30:d2:d0:4f:d9:b9:af:5b:a4:be:fb:cd:
92:e8:19:e6:59:fb:d2:68:af:52:7b:a4:ae:db:34:58:db:e4:
84:1a:30:44:f4:98:96:03:e4:a4:41:74:8e:64:d3:e5:38:79:
05:3b:ae:f8:65:2a:d1:a9:c6:be:41:45:f3:f4:86:e9:8d:a2:
83:1d:79:c4:ae:36:aa:29:b0:07:0c:a0:73:1c:7b:24:c9:0a:
8e:50:3f:0d:9d:aa:c4:42:8e:ad:c1:ef:b6:fe:56:dd:b9:6e:
46:4d:b5:55:13:e6:10:65:19:59:3a:8b:ec:ab:9a:52:4d:be:
b0:80:2a:7e:d6:39:55:08:61:c8:86:9e:03:9b:c2:ae:12:cb:
f2:e9:2a:db:3c:96:c9:cd:2d:a5:65:69:fb:19:d7:da:3e:71:
89:58:00:21:9d:d0:22:8e:5b:78:f1:33:69:14:3d:63:3a:fc:
59:7e:ea:df:12:6e:ae:8e:ce:48:97:ee:a7:5c:ca:f5:09:62:
e9:bb:e6:7c:64:95:02:28:04:69:a7:e3:6e:10:be:56:c3:8e:
ec:ce:2d:0c:c6:1a:44:47:5c:03:b0:80:82:22:0c:8d:e9:98:
b0:4e:0e:96:88:ca:4f:3e:0a:88:8c:7a:20:16:07:ad:ea:09:
68:d6:5d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:46 2025 by rpki-client