Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24120a36-897f-3f13-9f9d-63db11e98a93.roa
File: 24120a36-897f-3f13-9f9d-63db11e98a93.roa (raw, json)
Hash identifier: Fd0qyh37L2LcHq0lCveah0ghjfYbcU3V+8WRUXdKTUQ=
Subject key identifier: C7:EE:56:86:4A:EF:51:15:11:67:27:28:F6:6B:5E:37:B6:E4:92:48
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402465C052C6986E92EA111700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24120a36-897f-3f13-9f9d-63db11e98a93.roa
Signing time: Mon 05 Dec 2022 12:00:00 +0000
ROA not before: Mon 05 Dec 2022 12:00:00 +0000
ROA not after: Tue 10 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:24:65:c0:52:c6:98:6e:92:ea:11:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 5 12:00:00 2022 GMT
Not After : Jan 10 05:00:00 2023 GMT
Subject: CN=44d77ddf-e922-4da9-8c7b-47f44cc09b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:b2:5a:94:6b:a8:22:40:af:3f:06:e0:d4:
e0:17:14:ac:93:be:21:7f:ef:22:77:8f:4d:61:52:
27:08:6b:0a:0a:f3:ef:a6:82:1d:87:58:88:2a:fd:
96:ba:54:4a:9a:af:79:c7:6a:76:f8:6f:34:94:83:
9e:5c:82:29:d3:f7:62:aa:8f:98:9c:56:fc:83:a1:
32:e3:dc:2f:4b:ed:fd:8a:43:71:12:fe:f0:f9:11:
01:a7:40:41:9a:44:60:f6:79:3e:28:cb:d2:ad:eb:
aa:08:b0:c8:ca:cd:24:55:62:26:07:c8:c3:2e:75:
dc:7e:34:5c:ec:63:b9:90:ca:b2:66:e7:ee:e8:68:
95:84:f2:d9:92:ba:93:91:34:74:23:6c:f2:aa:0d:
9e:70:2b:f4:d5:5e:3f:57:62:64:42:fb:83:fa:86:
33:85:6d:0f:c6:50:28:07:d5:08:b9:80:9e:53:c9:
93:9f:8f:ff:3e:f4:40:3f:cf:e7:2b:16:5b:f7:fc:
93:39:11:b1:e9:89:3f:bc:8e:e5:35:59:a5:4a:a8:
db:a5:c4:d5:b5:74:cf:f4:2a:71:4a:d8:d9:c4:8a:
f4:0e:7d:d7:a7:b0:9e:42:59:33:61:cf:af:6c:37:
dc:4c:58:ce:34:41:45:29:73:cb:96:97:2e:76:9f:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EE:56:86:4A:EF:51:15:11:67:27:28:F6:6B:5E:37:B6:E4:92:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/24120a36-897f-3f13-9f9d-63db11e98a93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:79:f9:27:3a:d8:03:a1:af:3e:ec:df:0a:08:bc:27:a8:10:
bc:00:57:53:00:57:ab:b7:4f:f4:7d:91:b5:7c:11:5b:3a:ea:
28:a7:76:d2:c9:65:09:ee:a7:0c:3a:ac:96:6a:c1:ee:0b:34:
46:9c:c6:a0:37:3f:e2:16:fb:72:ce:9c:5d:e8:cb:11:83:3c:
c3:da:07:b1:e6:4c:50:a7:f9:fd:b1:f2:cf:2b:c8:31:ff:72:
d9:27:e2:ab:87:ee:00:d9:92:e5:e1:1d:a1:bf:0b:a4:8b:9b:
e8:00:f4:98:71:0d:0c:67:3a:e2:f3:38:50:36:30:5a:ca:ca:
b5:3a:82:29:0b:af:b8:76:87:96:30:4a:f4:9f:f4:b2:e9:27:
f7:8f:7f:e9:1e:dd:77:52:1d:01:ca:a9:18:62:57:4d:90:97:
6d:de:76:b5:80:69:14:4b:03:79:aa:6e:ad:3d:c7:19:e0:9d:
e0:b0:5f:c9:1e:9b:3c:bb:a4:8c:17:f7:fd:e0:66:44:e5:22:
0e:45:af:f1:c1:18:ef:45:f6:45:1e:0c:90:21:79:0e:e1:d6:
e9:36:2c:bb:06:b9:20:67:49:f7:85:9f:c1:49:e6:0d:db:df:
61:f6:3b:f1:05:ae:b0:97:6f:fb:2e:84:d9:22:c7:12:ef:95:
3c:a4:62:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:55:14 2025 by rpki-client