Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/293413f9-ff37-3e62-ad3f-a152435cae5d.roa
File: 293413f9-ff37-3e62-ad3f-a152435cae5d.roa (raw, json)
Hash identifier: 9OGsP7CeiU6h0ZQXCKxGSzZGoxvJJspNM4suO3jXvNU=
Subject key identifier: A2:DE:C5:8E:FE:EA:C3:D9:1B:5E:83:AD:BD:BF:C8:61:EA:53:55:C8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D082C776A2C6C4B347361A000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/293413f9-ff37-3e62-ad3f-a152435cae5d.roa
Signing time: Thu 24 Feb 2022 05:00:00 +0000
ROA not before: Thu 24 Feb 2022 05:00:00 +0000
ROA not after: Thu 31 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.23.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:08:2c:77:6a:2c:6c:4b:34:73:61:a0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 24 05:00:00 2022 GMT
Not After : Mar 31 04:00:00 2022 GMT
Subject: CN=523ef07b-aac1-4561-a6c0-c6a4d1931932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:24:4f:a1:a1:0c:a0:00:23:27:89:93:58:
06:4b:b7:15:3c:f7:2f:9a:04:e8:96:16:b4:f3:20:
d7:bd:14:55:93:a7:d6:0e:41:b9:be:d4:22:6c:c3:
3a:a8:09:24:73:6a:e4:a2:36:9b:0e:7f:e5:25:f3:
45:7d:e6:46:e2:17:58:03:8d:10:35:b0:d6:fd:df:
c4:4f:5a:b9:8b:f5:7c:90:15:ec:69:52:1a:97:b0:
22:e9:d2:eb:60:3a:4d:24:f2:f4:91:69:6d:9d:06:
8b:db:e8:c9:5d:d7:1d:28:2c:ce:bd:5a:ff:73:13:
dc:73:ee:f5:11:68:5e:80:fa:c8:63:ce:15:8c:1a:
34:26:3b:29:8a:16:14:2f:07:34:30:75:48:e5:17:
c0:36:bb:c1:93:8c:cd:4b:65:39:4c:61:bd:45:9e:
85:2b:0d:35:83:d9:ff:53:63:dd:f6:0d:7f:e3:e2:
12:02:0d:4e:c3:7d:35:09:3d:db:34:4e:0e:cc:dc:
77:d4:cd:e0:fa:76:9a:66:24:37:d5:cd:04:bc:15:
fc:51:7e:d9:82:25:38:e6:cc:4a:2d:9b:81:30:23:
b5:cd:2a:fa:68:d7:7a:37:7c:4a:34:01:13:2a:c8:
47:a9:5c:0b:99:0f:8f:92:58:d0:0e:f3:56:f1:cb:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DE:C5:8E:FE:EA:C3:D9:1B:5E:83:AD:BD:BF:C8:61:EA:53:55:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/293413f9-ff37-3e62-ad3f-a152435cae5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.23.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:fc:66:51:10:ec:2f:ac:72:f3:c0:af:53:e6:11:78:29:09:
c7:16:d0:8d:a8:19:3e:da:c9:bd:f8:c3:0a:83:e9:95:1d:a5:
d8:0d:34:cb:17:ca:ba:1d:ac:22:4c:5a:49:29:fa:3d:25:29:
1c:b6:24:0d:71:96:cc:4d:4b:32:06:0c:6c:7d:57:29:19:aa:
28:53:86:29:e3:c4:78:94:d1:5b:b6:18:1e:df:a1:45:0c:33:
ea:53:74:09:65:bf:7e:fc:1d:a1:be:82:f2:fc:d0:8b:bd:5b:
d4:5d:2d:67:50:38:93:19:d5:64:72:e8:88:3f:db:37:16:01:
76:e7:79:e1:1a:70:45:c5:9b:0a:16:29:92:f0:0b:71:2e:8d:
46:89:75:56:ff:a1:8f:e4:1a:dc:7c:3c:d0:36:98:1e:c0:69:
2f:8f:2a:fe:5a:86:86:a3:40:c9:a4:4d:33:ed:51:4e:0c:c4:
5b:e4:11:9b:5e:b6:e2:fa:20:56:8d:1c:c1:63:66:80:16:79:
4e:37:2b:5a:1d:01:d7:a5:5c:d0:6a:39:54:9e:65:d2:9f:9b:
2a:83:b0:db:4b:18:48:35:43:1c:84:f5:eb:fe:0e:d5:c9:6c:
d8:0a:2b:85:4d:92:09:43:9f:07:47:72:a0:3a:88:f0:14:9e:
5e:3f:7c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:32 2025 by rpki-client