Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/283544c0-0e5f-3cfe-a4cc-080ccc147cf0.roa
File: 283544c0-0e5f-3cfe-a4cc-080ccc147cf0.roa (raw, json)
Hash identifier: zY0kgOwtC0cbeIVI2auwGPnmm0WxOjpyXtn8eaR1nRI=
Subject key identifier: F9:6F:32:2A:5A:57:7D:5E:0F:5D:A4:D6:C1:C5:C5:F5:C2:64:9F:D2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584046288F2CA41A3B0F288A47C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/283544c0-0e5f-3cfe-a4cc-080ccc147cf0.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.168.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:46:28:8f:2c:a4:1a:3b:0f:28:8a:47:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=42062740-3205-4355-bddd-1437edb39541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:78:39:f3:e8:2b:aa:1f:72:57:cf:98:db:b8:
b8:03:6d:54:aa:e9:2a:12:d5:dc:c8:46:45:a2:66:
a7:48:e9:5b:87:f7:6d:06:09:64:76:2b:16:be:eb:
96:ad:5b:8f:13:5a:ac:e3:68:f5:22:e0:82:a9:57:
bd:46:a2:31:09:e1:f7:9f:5c:42:9b:18:f5:a7:de:
ce:c5:f7:04:9b:f4:70:db:e4:74:c8:55:03:99:41:
88:00:22:13:af:15:8d:c0:2a:a0:3d:4d:50:e4:e8:
77:1f:45:21:fe:b2:33:ed:32:c8:a9:59:6f:f8:8f:
10:d7:c6:6a:4e:9d:ba:91:b8:55:24:01:e8:7c:03:
66:5e:78:98:10:67:1f:a7:87:4e:8d:aa:55:cb:13:
e5:54:cd:82:b2:72:9e:ef:d6:c9:df:03:0f:47:3b:
39:40:9d:9c:fb:0e:62:1f:a9:e0:70:5d:b9:52:b7:
cb:fd:d7:ba:66:2e:59:c5:42:f2:86:95:e4:4f:4c:
74:c9:d7:4d:e4:d4:61:e6:5b:08:5f:37:31:cd:a5:
2e:0f:b8:9c:35:c7:74:fe:78:af:fc:80:2b:f5:7d:
3a:a0:c9:59:70:63:da:4b:7d:07:de:ee:ea:fe:38:
97:50:c7:32:6e:5d:7a:95:37:1a:08:ff:fa:9e:b5:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6F:32:2A:5A:57:7D:5E:0F:5D:A4:D6:C1:C5:C5:F5:C2:64:9F:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/283544c0-0e5f-3cfe-a4cc-080ccc147cf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.168.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:b2:59:8f:cc:6b:11:83:6a:7b:e4:20:ab:d2:75:bf:59:79:
07:38:b7:91:59:94:0e:32:0f:ea:3e:73:51:61:b0:db:42:1c:
60:32:a4:56:4c:f3:cf:8d:cd:77:c8:f0:a8:d7:4e:8f:a4:59:
9e:d2:6e:3a:fb:ab:a8:79:12:c8:dd:df:32:b1:5b:cc:37:fd:
5d:fd:18:4d:74:90:32:79:41:7f:fe:f2:6f:c0:6a:9d:ea:ae:
1d:da:e3:1d:fe:43:6b:d7:b2:9a:bf:19:2d:9e:df:b9:39:d3:
87:f9:18:1e:0e:75:ef:32:8d:07:c9:ce:54:8d:3c:c9:f9:da:
62:76:3a:59:86:08:ba:81:87:7d:77:f2:4f:d1:c3:df:ad:f9:
ce:16:87:55:c9:fc:66:44:db:99:87:f0:02:a3:c2:f5:26:42:
fe:18:16:92:77:a8:13:02:94:bf:b5:8d:fb:5f:14:3e:64:d3:
63:69:a2:82:6c:e3:e2:45:c7:12:b8:4f:60:48:ef:9a:54:4e:
4e:41:f3:2d:f9:5a:64:12:3f:30:f1:4a:e7:d1:a4:21:97:43:
51:95:11:b5:ad:da:a0:f1:ff:ec:90:89:71:cb:39:ea:75:91:
50:26:fd:7e:aa:01:5f:56:1a:73:e1:7e:ba:ec:bf:49:3b:be:
b5:3a:98:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:12 2025 by rpki-client