Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e0b7a05-381b-3ec7-8c3d-a62e173c515d.roa
File: 1e0b7a05-381b-3ec7-8c3d-a62e173c515d.roa (raw, json)
Hash identifier: +PwL+ptgR/L6UhwSg6hqUgnk4/PUvQqzQBXwIs+VnY8=
Subject key identifier: 31:C8:59:3C:F2:F6:83:7B:2A:53:1B:EB:80:FB:1E:B5:05:2A:DC:27
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CFA79864727E3F96AED64AB80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e0b7a05-381b-3ec7-8c3d-a62e173c515d.roa
Signing time: Sat 19 Feb 2022 05:00:00 +0000
ROA not before: Sat 19 Feb 2022 05:00:00 +0000
ROA not after: Sat 26 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.16.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:fa:79:86:47:27:e3:f9:6a:ed:64:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 19 05:00:00 2022 GMT
Not After : Mar 26 04:00:00 2022 GMT
Subject: CN=9f5b47d9-90bd-4ab3-bc3a-136ceb6009c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:36:02:5f:b0:be:2e:34:ca:13:8d:b2:c2:
20:e2:f6:06:c6:b1:ed:57:23:85:f3:5c:a9:1a:3b:
ac:8b:91:71:0f:9c:61:81:4f:00:76:ca:6e:f5:d8:
14:b9:c5:60:f7:67:f4:0e:51:fc:90:4e:9b:ea:13:
7a:92:5c:62:69:6f:85:f5:2c:fb:81:d5:e2:c7:1c:
98:ad:2c:04:b9:76:fa:fd:14:30:54:ef:96:32:5e:
e3:bc:92:53:bf:d1:2e:21:06:e3:48:c6:2a:e8:a6:
29:a7:1e:0b:63:87:e5:43:e1:f4:55:6d:12:c3:5b:
11:11:e8:06:47:9c:7b:4a:9e:a9:95:cb:d2:ed:f9:
cc:88:29:95:aa:ba:18:fa:1c:de:d9:9c:65:5a:e0:
23:9a:83:7f:03:29:b1:d3:97:2e:4e:4d:2b:00:d7:
50:70:00:5f:70:3e:96:9b:e0:35:28:da:f5:e2:68:
e8:54:9e:51:ae:67:29:a5:e8:25:95:b1:35:42:86:
ec:59:4b:ac:9c:ed:51:ca:34:71:7c:bb:be:f9:54:
95:93:8b:62:3b:00:59:24:87:67:f6:ca:33:96:fd:
c4:43:4c:e6:6e:71:f7:f9:8d:97:16:83:29:f9:f3:
4c:73:60:72:c8:00:8f:59:e9:bb:da:6c:d1:b0:a2:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C8:59:3C:F2:F6:83:7B:2A:53:1B:EB:80:FB:1E:B5:05:2A:DC:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1e0b7a05-381b-3ec7-8c3d-a62e173c515d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:29:85:81:06:02:f8:dc:c8:b5:93:69:81:3c:94:3f:92:8f:
4a:39:e7:04:6e:1e:87:ee:d3:4c:20:ab:ce:7d:00:ad:10:86:
58:69:fd:c2:f0:ab:77:f4:bb:7f:ed:92:d9:32:29:ce:75:3a:
7d:dc:fd:d2:cb:07:10:18:05:06:ff:c7:06:58:45:89:1c:1b:
63:bb:d6:a7:5c:80:6b:a2:c9:00:f1:80:74:df:c7:9d:89:a1:
cb:4a:11:5c:fc:a0:6c:55:5a:b0:b2:b2:d2:be:d5:5f:b1:e5:
fb:fc:e2:71:c2:eb:c5:02:d5:3e:ae:eb:eb:08:75:74:6b:62:
90:b0:fd:82:3a:9c:84:99:62:88:5a:f0:ea:e6:29:e5:30:35:
83:99:00:4b:9b:af:c1:28:13:73:73:9a:59:82:56:58:57:c4:
66:4d:0d:ef:b8:23:31:40:1f:48:e3:a0:07:99:92:84:0b:44:
ea:7b:df:8d:e0:b4:41:56:ce:f1:be:88:13:8d:c2:ac:bc:9b:
2e:70:46:26:2e:78:2c:50:08:28:b3:f6:72:35:48:88:09:aa:
3d:81:5b:db:74:5d:93:7b:cd:d3:60:dc:ff:bf:4a:8e:1a:03:
b6:0e:1a:69:44:84:00:46:a9:4b:e4:07:e5:23:3e:20:a6:f9:
52:4b:3c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:46:04 2025 by rpki-client