Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f713ff2-5ad7-347b-baa1-5922a58b7927.roa
File: 1f713ff2-5ad7-347b-baa1-5922a58b7927.roa (raw, json)
Hash identifier: mXZdWHXOvvXJG+YnXcyGqDNQSD/nAbo4iG8I86mJv7I=
Subject key identifier: 00:FB:DE:D3:BC:E8:21:A5:CB:4F:19:CD:54:9E:94:0F:1A:9E:79:76
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840A4A46D4BD35EEC1B02799BE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f713ff2-5ad7-347b-baa1-5922a58b7927.roa
Signing time: Fri 20 Jan 2023 23:36:08 +0000
ROA not before: Fri 20 Jan 2023 23:36:08 +0000
ROA not after: Sat 25 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.15.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:a4:a4:6d:4b:d3:5e:ec:1b:02:79:9b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 20 23:36:08 2023 GMT
Not After : Feb 25 05:00:00 2023 GMT
Subject: CN=82d31996-61eb-4028-8062-a383f1206330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:66:66:ea:d3:97:a3:71:16:7c:cd:b4:dd:
bb:96:e3:39:cc:f6:e9:6b:71:13:33:c4:17:e3:29:
66:c4:ee:e7:2c:a7:e6:9f:63:68:a9:29:b7:64:54:
63:cd:36:6a:2c:2d:5a:33:62:69:6c:57:15:24:80:
fa:e6:73:ce:2f:0e:c2:0b:51:f0:4c:6c:bd:23:d8:
02:4c:65:64:8b:a0:0c:cd:6e:59:b7:8a:64:3a:19:
d6:dd:0e:69:d4:95:28:9a:34:8a:a7:34:a0:fc:53:
ae:d0:fe:c6:88:5a:a9:08:6d:39:d7:dd:57:e5:85:
18:94:66:8b:e9:bd:fb:9b:e5:7e:28:65:ff:21:38:
3f:34:68:74:70:57:bf:6c:d6:6e:b6:b8:d9:34:fa:
a6:3e:5d:ae:0e:0d:ce:43:ae:b2:00:85:8c:92:11:
f8:de:41:4b:22:d0:bc:1c:30:ab:6f:07:5e:ea:4c:
78:21:c4:cf:8f:d8:39:17:38:1e:eb:1a:f4:62:e2:
50:67:f5:15:d7:21:5a:6f:93:1b:4d:f6:3a:fd:58:
00:10:eb:a0:00:4e:a2:e1:36:14:22:18:c8:ef:4f:
72:b2:cc:24:f4:5f:f8:94:a9:e3:cf:77:3d:8e:a0:
75:b2:dd:d4:7c:b5:ce:ac:b8:46:41:41:bf:12:e1:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FB:DE:D3:BC:E8:21:A5:CB:4F:19:CD:54:9E:94:0F:1A:9E:79:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1f713ff2-5ad7-347b-baa1-5922a58b7927.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.15.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:7c:cd:d6:76:a8:61:16:b8:b5:36:6c:8b:c1:ae:26:90:9d:
86:e6:5e:ad:a1:b0:cf:d0:31:99:c8:9f:60:b4:e6:5d:6a:ad:
a7:ee:8c:5a:f9:6d:ad:e3:e9:e5:8b:bc:96:ab:5c:cc:c0:19:
e2:9e:ef:7a:b2:dd:3f:8b:fc:10:b2:ef:0d:7e:31:f4:0b:38:
b3:e5:79:32:23:e3:be:69:0a:6f:23:c3:60:09:0e:40:57:22:
2c:ef:e9:da:51:da:58:cc:e6:99:aa:76:85:1f:e8:8b:18:87:
d2:c6:5f:1c:f8:43:ee:12:a5:03:06:13:26:4d:07:cf:b7:51:
45:1d:ee:89:23:7f:49:62:8c:06:87:bd:f7:69:7c:8a:19:a8:
96:ec:c7:2f:b1:85:62:0a:dd:88:0a:36:0a:dc:42:ed:28:80:
72:97:40:be:56:5e:54:53:5d:8a:5a:54:92:1a:0f:7a:29:94:
97:f6:f8:f0:c7:d1:a1:07:8a:8a:56:ae:b2:68:6f:b9:e3:25:
98:bc:4f:1e:27:75:04:4b:4d:a3:87:fd:76:a8:3e:68:46:7f:
ad:55:00:b5:e7:86:59:db:b7:91:b8:9d:60:25:e2:f1:34:48:
dd:a4:2c:ed:79:7f:50:0c:07:08:51:44:d6:a5:61:81:e6:e3:
4a:e0:c6:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:46 2025 by rpki-client