Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b60f2f9-35f0-3335-8e70-e76c5aa52823.roa
File: 1b60f2f9-35f0-3335-8e70-e76c5aa52823.roa (raw, json)
Hash identifier: Pp1l7qbiZDOlXo4m/7Z1AiWfq/QaI0YzOnmv/NVI4mM=
Subject key identifier: 77:93:67:33:A7:3A:8F:8A:5F:F2:F9:1B:EA:DB:FA:46:AC:69:03:8B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FC92BEF1832B25272C710B040
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b60f2f9-35f0-3335-8e70-e76c5aa52823.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.71.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c9:2b:ef:18:32:b2:52:72:c7:10:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=4359bf0a-75f6-4c16-88f9-2cad56c12497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:03:cd:7a:6e:7a:89:a2:11:85:74:af:8b:30:
de:8d:6e:f7:90:03:6b:89:d0:73:d0:87:30:94:4a:
3e:b4:8f:a8:bb:0b:53:58:86:bf:c3:16:a3:9c:cf:
4c:55:d5:08:c6:67:5e:a7:d3:66:65:19:e6:2c:49:
2f:64:f2:3c:61:b4:09:bc:b8:a2:bb:66:1e:f4:d7:
01:d4:0c:4b:cb:1f:0b:e9:58:5e:33:4d:4d:ae:b9:
ab:b1:65:41:a2:5d:56:e4:cf:62:f2:86:70:64:60:
0d:63:aa:1f:d4:30:b8:10:de:87:a9:19:5c:ed:f4:
a0:d8:67:bc:56:a9:a1:9b:fb:7f:07:95:18:d8:97:
75:26:0f:3d:92:a1:fd:1f:48:95:18:ff:6e:13:7d:
91:1e:73:49:6c:3e:2f:81:e3:ca:d0:f0:5a:ea:ff:
e9:cb:0e:2f:b0:1a:f1:7e:a9:6a:c1:74:92:70:07:
32:b9:22:c1:6f:39:bc:b2:03:55:00:9d:7a:71:9f:
d5:c4:e8:2b:36:0a:91:81:b0:ad:04:46:46:f2:80:
2f:e7:fa:27:de:3e:49:f7:68:fa:a6:5d:20:48:a8:
e3:f7:17:aa:33:19:58:e9:e6:47:7b:20:0a:bf:f0:
b9:00:18:72:c3:00:af:45:97:70:b9:59:b6:fd:63:
69:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:93:67:33:A7:3A:8F:8A:5F:F2:F9:1B:EA:DB:FA:46:AC:69:03:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1b60f2f9-35f0-3335-8e70-e76c5aa52823.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.71.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:43:3d:56:92:25:97:45:8d:6b:fc:db:42:a7:70:0b:1c:56:
b2:5e:1c:3d:72:ef:53:38:19:b5:fb:d5:da:52:59:f0:cd:82:
34:02:c1:d6:4a:80:b3:ac:af:4e:d4:2c:af:f6:c0:fd:09:5d:
54:e4:a1:79:ce:8a:58:9e:9b:07:6f:8a:23:41:39:21:af:61:
01:0d:e3:86:1a:09:5d:11:4d:0f:5d:15:52:64:1a:94:bd:4f:
10:79:32:6b:9d:ef:c7:3e:62:88:ef:d7:d3:6e:9c:0b:0e:c8:
41:6e:b1:58:c3:3f:50:15:8b:d3:d4:ee:96:72:2b:2d:41:75:
ad:2c:18:2e:47:73:36:ac:f1:b8:d0:c1:4a:1b:fa:70:be:ef:
48:96:49:27:b5:81:1a:99:c3:83:0a:c3:31:59:62:56:70:d1:
bc:b2:2f:62:50:c4:47:32:6b:94:c6:b2:da:27:92:d3:0f:05:
01:5e:d8:b0:1a:2a:10:36:76:9f:36:b0:8c:5e:46:2d:a7:b3:
db:56:ed:89:fb:ab:41:e2:25:13:68:43:94:03:16:b8:45:e4:
e6:34:c6:33:79:d0:28:3f:18:be:40:2d:99:46:3a:b4:80:c7:
16:d5:be:a8:7a:63:43:12:82:fc:5b:9e:52:9d:e9:74:56:18:
77:4e:d0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:41:50 2025 by rpki-client