Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/272a6ae1-71b1-3735-804e-abbcfc248eae.roa
File: 272a6ae1-71b1-3735-804e-abbcfc248eae.roa (raw, json)
Hash identifier: PCmt+bEy5jmOsq6yHRG478/Wanc7OiFtKCwIXig/ibM=
Subject key identifier: A9:1D:78:B8:46:1D:4A:62:6F:3B:89:F7:13:C8:4C:01:86:17:DA:6E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D48B387A0D4944A9DF2B06500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/272a6ae1-71b1-3735-804e-abbcfc248eae.roa
Signing time: Sat 19 Mar 2022 04:00:00 +0000
ROA not before: Sat 19 Mar 2022 04:00:00 +0000
ROA not after: Sat 23 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.16.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:48:b3:87:a0:d4:94:4a:9d:f2:b0:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 19 04:00:00 2022 GMT
Not After : Apr 23 04:00:00 2022 GMT
Subject: CN=e205d57b-5632-41d2-b211-2a5e66cf3594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:8e:33:07:6b:7f:47:5b:fb:b6:73:3e:1d:
9b:0e:ed:b0:b1:77:65:ea:de:10:e5:64:07:cb:4b:
2d:a7:e1:58:1c:8f:50:a6:2f:05:c3:b3:b7:a4:56:
84:53:f2:0e:1f:68:1a:4d:32:7d:30:40:04:43:3d:
72:62:cd:bd:e3:c9:b8:b0:fb:59:63:b2:c4:5e:24:
ae:15:8a:c7:88:46:2a:5a:34:0b:b4:cd:02:fb:6a:
03:8d:8e:d3:6e:6e:33:2e:22:90:f9:3e:19:a8:27:
10:c6:0a:5d:db:ff:81:fd:34:20:4a:13:21:bc:eb:
8a:f1:d0:ed:06:a3:f3:c1:ea:f6:a0:95:09:71:63:
0b:57:08:57:ba:2c:e6:a3:d3:b5:7f:68:62:3f:7f:
0d:e1:dd:8f:3f:a1:36:4c:bf:e1:3a:b3:6e:7b:40:
e0:53:8f:92:cf:92:c4:1b:a7:e6:39:d1:ad:41:13:
97:a6:52:c3:d0:b0:b3:76:91:88:4f:43:9a:60:a8:
60:63:8d:4e:c0:18:66:87:b3:f2:84:8d:1c:c9:7b:
24:5d:ef:87:1f:06:80:e2:49:4c:ad:90:06:31:09:
58:c4:1c:26:20:db:30:13:86:3a:0f:04:c9:72:49:
87:6a:8e:18:49:13:65:42:2e:f4:dd:ba:64:2c:33:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1D:78:B8:46:1D:4A:62:6F:3B:89:F7:13:C8:4C:01:86:17:DA:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/272a6ae1-71b1-3735-804e-abbcfc248eae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.16.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:9f:c2:2c:4d:db:63:d5:a4:1d:4c:fa:fc:47:ba:7c:4a:b3:
1b:3b:3f:88:6a:29:43:b4:7b:4c:40:f5:70:c3:0a:3a:64:ae:
7a:d2:46:34:8b:9e:d6:20:c1:47:1a:81:20:0a:3f:3f:7c:48:
69:16:1f:af:f1:fd:fe:93:21:86:0c:4b:f5:ed:ae:5e:ef:0b:
75:0b:85:6b:40:51:db:58:78:0f:db:00:e2:0d:18:6d:52:20:
df:8d:f0:49:0c:07:53:00:ce:27:dd:a6:12:b6:48:40:f9:c1:
ac:99:c8:74:3b:da:16:e9:f3:db:68:03:a6:25:b2:84:ba:e8:
98:ee:86:f7:9c:53:25:e1:0c:f6:b4:c1:65:c4:c5:be:c9:d7:
39:f1:70:7e:52:c2:b0:50:f6:7e:4e:3a:0a:31:16:a4:0c:b1:
09:33:49:10:10:e5:d0:3a:98:df:00:25:1a:e2:b0:71:fd:fe:
2e:d4:53:85:b9:4c:5b:38:81:30:84:23:73:a2:02:5d:96:6b:
2b:a0:ea:e4:c3:e0:74:d4:58:c9:d6:71:a6:d8:a5:87:0c:dc:
0d:c5:76:0c:24:95:ec:fe:3e:22:ed:78:4e:06:1a:10:e4:a6:
fa:a7:09:d5:aa:7d:90:bd:bf:6d:c1:13:bb:64:8c:64:03:25:
ac:31:ab:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:02:56 2025 by rpki-client