Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ec42abe-962f-3bab-a03a-055209d1c3ca.roa
File: 1ec42abe-962f-3bab-a03a-055209d1c3ca.roa (raw, json)
Hash identifier: Nt95H5qzN83uq8c+VVGhT39/E/m+NjLZVGYhHKS4EQ8=
Subject key identifier: 5B:74:32:C4:A6:98:9A:25:EF:77:48:C4:D5:21:37:5F:AF:B7:4C:2C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DCDF26763B8735C9B4E5067C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ec42abe-962f-3bab-a03a-055209d1c3ca.roa
Signing time: Wed 04 May 2022 12:00:00 +0000
ROA not before: Wed 04 May 2022 12:00:00 +0000
ROA not after: Thu 09 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:cd:f2:67:63:b8:73:5c:9b:4e:50:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 4 12:00:00 2022 GMT
Not After : Jun 9 04:00:00 2022 GMT
Subject: CN=41afb8c9-cfdf-4481-ad68-6546e530ffbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:44:0a:e2:2c:b0:d9:c0:18:51:06:c1:e5:
20:d0:4a:84:f7:6c:ef:f3:42:c6:30:19:2b:8e:60:
b6:2b:b4:0f:e3:e9:c0:80:5e:58:ef:58:87:3e:bc:
25:c1:d0:7c:b0:91:69:0d:fc:a8:59:db:22:31:09:
dc:ed:30:8f:64:20:09:2e:f9:18:47:20:c2:cf:83:
89:e4:db:1b:f0:e1:00:a5:d0:b8:3b:99:d6:66:01:
a8:48:5b:7c:1d:5c:6f:d5:6b:53:8d:59:87:2c:85:
29:c6:fd:fd:2f:6e:50:f9:b0:c9:f8:5a:ef:b1:1a:
e3:c0:28:fa:4a:70:34:32:50:38:8a:22:06:f0:50:
f9:a8:97:c1:ef:a1:e8:91:ca:d6:04:4f:be:f1:4b:
7c:26:71:5d:b4:33:cc:bf:fa:32:f4:94:e6:c4:c4:
69:3a:d8:37:5c:51:74:7c:e0:0c:20:4a:b2:01:84:
20:a7:96:18:1f:f8:be:8f:d0:da:be:ab:da:4f:b1:
1b:5c:92:67:fa:f0:67:59:e0:88:7f:5e:0a:50:7e:
76:9d:5a:9d:0d:8d:73:28:5c:7a:be:ca:16:81:79:
5b:0b:90:95:1e:aa:ca:89:5e:80:da:17:2f:05:3a:
14:34:d5:df:32:78:49:01:48:7c:70:15:8c:bb:81:
96:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:74:32:C4:A6:98:9A:25:EF:77:48:C4:D5:21:37:5F:AF:B7:4C:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1ec42abe-962f-3bab-a03a-055209d1c3ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.108.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:0b:20:42:01:98:20:29:38:6b:db:11:8f:f7:10:cf:3f:b8:
16:33:be:8e:93:d5:a4:a1:7c:2c:ee:0e:69:9b:4f:7c:fd:af:
01:51:e3:2e:52:f0:0d:d5:4b:a6:d8:21:58:72:52:4e:f9:28:
99:b4:13:bc:95:5f:ee:ad:c0:74:dd:37:ad:bb:27:3e:ab:0e:
d5:df:f8:98:c5:68:b8:be:b5:1f:ef:1a:af:d7:89:0f:94:dc:
43:7a:c6:c9:85:0f:2f:58:ce:23:ef:77:a7:c5:f1:a0:71:77:
28:6c:21:91:1d:b7:38:d1:07:a9:0f:61:4b:79:cb:54:fc:bd:
68:c8:3e:65:63:2f:eb:8f:3e:70:f1:25:c0:4d:3d:70:36:20:
d0:c1:27:2f:e9:d8:b1:2b:c8:66:47:03:0d:84:a7:51:51:cb:
00:cf:e7:c3:7f:c6:80:a9:7a:82:20:91:e1:1c:37:43:bf:8b:
b1:73:ea:34:45:81:b6:62:1e:f6:97:3c:93:22:e4:78:a7:22:
37:3f:6d:b2:11:ee:c6:1b:73:95:e1:65:3b:f1:13:07:b3:98:
d9:a4:9e:aa:96:74:ab:1a:1c:db:d4:89:15:04:a2:7a:0a:cd:
86:1c:70:cd:7d:39:5b:f2:e2:ad:ee:4a:a5:bd:f1:d0:da:2f:
ac:4a:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:59 2025 by rpki-client