Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/230296d1-e1cd-360e-a305-0c459f9039d8.roa
File: 230296d1-e1cd-360e-a305-0c459f9039d8.roa (raw, json)
Hash identifier: drho42AGX2/J6/6jq4Ab6GmAwa0bi7FWWV1B9MUGF8g=
Subject key identifier: DC:3E:9A:58:F7:5D:A7:9D:67:06:54:55:76:00:42:6C:F3:80:44:84
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840085577EF789F4BDCAAB9DA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/230296d1-e1cd-360e-a305-0c459f9039d8.roa
Signing time: Fri 25 Nov 2022 12:00:00 +0000
ROA not before: Fri 25 Nov 2022 12:00:00 +0000
ROA not after: Sat 31 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.30.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:08:55:77:ef:78:9f:4b:dc:aa:b9:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 25 12:00:00 2022 GMT
Not After : Dec 31 05:00:00 2022 GMT
Subject: CN=a01a5a64-dca3-4191-afcc-fde211b5279a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f0:d3:93:48:05:1a:b9:83:c1:ba:60:d3:ed:
d6:af:f7:2c:8d:f3:41:d9:6b:71:38:50:03:b8:d3:
ab:91:09:c7:a7:36:b2:42:ac:ca:2d:dd:54:3a:a9:
7d:9a:ce:2d:47:c1:ac:25:cf:96:94:67:c6:bf:45:
e7:a6:f3:52:af:5e:37:54:78:2d:8d:fe:cc:e6:53:
83:ef:c2:2a:de:4d:89:fa:a5:0b:49:79:91:f8:52:
de:24:86:93:4b:3d:b3:49:c6:93:2e:fa:80:eb:c3:
bc:1f:d0:ce:f6:06:5e:89:8c:aa:ea:7b:51:44:37:
d7:86:8f:e3:b9:06:22:23:30:65:17:ea:e7:be:4c:
0d:ba:8a:33:2c:ff:2e:79:d1:72:ac:92:8c:86:1f:
1e:c2:0a:e2:50:79:26:27:35:a3:0c:23:18:03:b1:
21:0d:b4:7b:45:71:a5:4d:ab:b7:0a:a8:76:54:ff:
48:b7:eb:e4:2e:28:66:2a:88:99:a5:e1:fd:61:1c:
30:ce:aa:fb:87:e8:1b:fe:2e:48:88:36:0e:d4:10:
f0:e1:fa:0c:3c:f3:45:47:a1:c2:03:cc:99:3e:45:
5a:ca:3d:4a:78:e8:0a:3f:4e:93:be:b0:9e:3c:71:
1b:29:70:bb:bf:46:4e:1e:6d:d0:64:19:cb:80:1e:
bd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3E:9A:58:F7:5D:A7:9D:67:06:54:55:76:00:42:6C:F3:80:44:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/230296d1-e1cd-360e-a305-0c459f9039d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.30.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:48:d7:6d:62:23:b4:03:04:00:7c:f2:20:17:fe:54:b6:af:
42:cc:7a:2d:a2:16:b0:68:23:dc:64:4b:75:0d:fd:8c:d6:7c:
26:7f:ef:c8:3f:c4:80:a8:c7:50:b8:18:00:4e:e5:96:b8:d3:
6a:7e:cb:f0:d2:06:d2:c9:ff:b7:2e:0a:10:31:de:3f:19:04:
fd:0a:1f:07:d7:32:ff:2a:f6:f5:a4:0a:54:5c:0f:87:dc:e5:
e3:f7:8b:cf:23:33:af:f0:bd:c6:c6:55:71:85:91:f8:3a:cd:
59:9a:5b:ba:67:93:85:63:5c:0f:e0:4c:fc:a8:a7:84:1a:cc:
9a:00:7b:85:84:84:ed:9e:99:39:d0:ca:71:f5:f4:2a:1d:91:
0b:6c:c8:45:aa:ac:2d:7b:24:7e:fd:38:8e:98:1f:91:86:33:
0c:5b:fa:65:64:b1:c8:24:1d:0c:17:81:be:74:63:e3:22:02:
56:ab:12:46:61:86:b4:b9:f6:03:e2:0d:6d:42:10:54:b4:9e:
70:07:87:03:05:f3:7b:a7:66:f0:ee:72:f1:32:a5:13:1d:93:
9c:a7:1e:cf:97:eb:ee:f3:77:a8:0b:af:48:91:6f:cf:b9:3c:
5b:35:e6:4c:ca:a4:6a:c0:c4:64:23:c7:4c:2f:8d:77:45:e4:
51:e7:04:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:07:33 2025 by rpki-client