Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25f8aac6-a165-3658-b720-2fe35bd1014a.roa
File: 25f8aac6-a165-3658-b720-2fe35bd1014a.roa (raw, json)
Hash identifier: 1SFWBKS6UOLCSxXfiIbH62PVRhxmgAWOTyHIoYEvk00=
Subject key identifier: 1F:0F:69:35:10:6F:75:B5:5D:C8:8D:B2:25:3B:37:1F:CA:F4:61:6C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858400DDBEDFEC069C27152AB1A80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25f8aac6-a165-3658-b720-2fe35bd1014a.roa
Signing time: Sun 27 Nov 2022 12:00:00 +0000
ROA not before: Sun 27 Nov 2022 12:00:00 +0000
ROA not after: Mon 02 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.78.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:0d:db:ed:fe:c0:69:c2:71:52:ab:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 27 12:00:00 2022 GMT
Not After : Jan 2 05:00:00 2023 GMT
Subject: CN=6b9c5295-c3a8-4aea-a3a0-b1b28d273823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ce:ae:f9:1f:23:10:27:55:7c:0c:8c:33:45:
bf:9a:2e:1d:da:94:9c:f2:35:8d:13:48:b2:a0:9a:
a3:b6:0b:2e:92:51:57:2b:71:2d:d0:54:ec:04:91:
8b:3c:3f:d7:f1:ca:35:69:f1:f8:b3:74:93:99:13:
53:74:47:84:52:dc:9e:93:6e:c8:c7:52:84:ba:cb:
ef:f8:b3:34:8b:cd:6c:f9:02:bc:70:2e:cc:b7:c3:
66:74:f1:fc:68:13:10:a5:41:00:c6:4b:b8:a5:5d:
a4:58:c3:77:50:25:07:c7:1b:d7:d2:66:fc:7c:c8:
e4:60:17:58:1c:d2:01:1c:ab:ee:29:45:53:98:1c:
02:11:7e:b3:f1:1b:cc:17:1a:9a:cf:1b:4f:59:22:
7a:8a:bd:f3:76:cd:e0:8b:2b:25:ec:4b:ac:39:6b:
13:fe:04:fb:df:b8:7f:99:09:48:89:d5:50:8a:ca:
0f:42:4d:16:47:b7:a1:22:9e:be:73:c6:3a:fc:68:
b5:67:bb:00:97:c2:59:83:38:da:37:93:60:67:12:
d1:20:6e:cb:b5:00:4f:0e:47:fb:6d:da:c2:aa:90:
35:3a:7d:27:2f:a3:fd:70:1a:09:30:0b:aa:04:e1:
47:cd:31:30:6d:fc:4f:fd:e1:84:7c:b9:cd:8d:f8:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0F:69:35:10:6F:75:B5:5D:C8:8D:B2:25:3B:37:1F:CA:F4:61:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25f8aac6-a165-3658-b720-2fe35bd1014a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.78.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:99:68:6f:92:08:fa:62:7e:bb:6c:4b:4a:60:03:8b:a9:65:
99:1d:3f:c3:d0:ab:66:2c:21:36:0e:69:1e:4f:8d:6e:ce:7a:
ea:50:2f:38:78:de:c5:87:47:c4:47:cb:ec:46:b7:26:48:38:
d3:c0:bd:e5:d7:ad:7d:53:c1:1a:ae:e7:1d:d1:3e:49:47:83:
9e:69:b9:e9:bc:27:af:33:d6:59:f7:15:a6:f1:57:41:19:44:
33:05:8a:31:27:61:16:d0:58:31:48:76:0a:85:58:e8:0a:f9:
2d:f7:e6:02:c5:27:f7:37:24:75:32:ac:4c:37:7c:f1:73:be:
35:dc:ac:e5:69:bd:13:87:b5:fc:e4:65:76:16:72:03:3e:b1:
ee:44:86:c2:7d:e3:ce:13:de:0d:a1:30:ce:2c:15:f4:9a:a5:
cc:36:38:ec:25:56:a2:e4:a8:b8:a8:1f:6f:65:85:f1:28:f1:
8d:83:50:4f:91:42:5c:01:7e:aa:4d:09:4c:ce:52:d2:b0:bc:
40:81:37:2a:d0:7a:44:a1:50:4c:81:9a:80:c1:1b:04:9d:00:
37:76:9e:ae:49:37:91:cd:fd:05:44:34:56:74:59:a7:af:47:
d5:a9:02:46:79:09:ec:85:7c:80:e6:d6:f6:10:75:69:23:c4:
bc:35:d8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:45:46 2025 by rpki-client