Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29404651-8e81-3620-9cfa-70cdf3e5c1fa.roa
File: 29404651-8e81-3620-9cfa-70cdf3e5c1fa.roa (raw, json)
Hash identifier: VVvdKBGzWhtgVBnoXoriWRtZpDgnxYYrZnpBFJxmzDU=
Subject key identifier: 12:E3:5D:B3:AD:F0:FA:D0:41:65:49:A7:54:9B:47:2A:82:24:FA:1F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584041F1182CAB93FBEA3CF7AE50
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29404651-8e81-3620-9cfa-70cdf3e5c1fa.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.77.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:41:f1:18:2c:ab:93:fb:ea:3c:f7:ae:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=bcd2679d-b520-4645-ad90-48d94987de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:25:e2:8d:65:94:85:26:6b:2c:37:55:49:4e:
d2:07:c6:2e:c9:db:22:47:10:56:8c:6a:bb:49:10:
40:ff:f0:59:29:35:39:fe:f7:a9:72:80:f8:f4:f5:
65:a7:70:b1:46:6f:13:37:64:96:d9:44:75:44:de:
47:41:0b:ef:98:13:f1:f7:15:58:33:42:a5:1b:0f:
82:b8:94:69:da:f0:68:8e:ef:3d:96:64:d7:23:0b:
35:80:ab:9d:a7:51:24:37:fa:28:81:41:97:1c:0d:
6e:50:fb:cd:92:4e:f9:73:53:a9:38:21:b7:07:2b:
1c:b7:06:bd:6e:98:b4:87:d4:ec:2e:f2:db:96:ba:
71:63:77:40:95:1a:14:21:ed:4d:9f:4b:03:8e:a0:
7d:45:ad:7d:d8:a3:49:6a:5b:19:c3:9e:0c:72:07:
ad:d4:35:73:ce:80:84:d6:87:c5:62:62:18:d9:c6:
dd:57:6d:63:45:f0:d9:47:48:ac:a8:be:bf:da:70:
c7:cb:10:c9:8a:56:85:23:0a:37:8a:1f:2b:91:f4:
c0:8f:02:b8:07:cd:12:b5:7b:20:3d:fb:bb:d3:72:
a6:68:89:4b:fb:8f:98:74:d9:8f:82:c6:6d:5e:61:
91:de:8b:fb:a3:b3:ff:1c:67:b3:9b:53:3e:14:52:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E3:5D:B3:AD:F0:FA:D0:41:65:49:A7:54:9B:47:2A:82:24:FA:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/29404651-8e81-3620-9cfa-70cdf3e5c1fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.77.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:61:45:b6:e2:3d:94:43:74:a6:2b:57:fc:08:1b:a0:a4:65:
04:b3:0d:38:d3:66:5b:2d:cc:a0:b1:29:92:ff:a5:d3:f8:2d:
1f:c5:e0:48:87:38:71:04:37:7a:af:ab:0a:70:a7:37:27:fd:
d5:c2:06:11:e6:30:53:6c:b5:b2:33:fa:4b:c2:86:0f:32:db:
06:6d:9b:d0:32:95:95:c8:ce:b6:f0:59:15:6c:0d:68:02:cd:
52:a5:ef:d7:84:5a:ba:86:c8:ca:d4:90:68:5a:62:a0:e5:4c:
a8:80:45:2d:e7:4b:b7:45:f8:86:40:3e:64:bf:30:af:bc:c5:
db:80:49:37:51:6a:dd:81:25:5d:6a:a3:e2:ce:b5:fb:14:a7:
0a:30:0b:7c:3d:dc:64:49:34:be:66:f7:8f:de:42:41:d3:dd:
7a:f1:b0:f9:02:cd:65:90:77:8a:a6:0a:d9:41:75:ff:ae:e4:
ce:18:af:a2:b1:e7:8e:ea:30:5a:d2:b0:d1:96:a6:8d:a3:a0:
60:6b:78:35:83:08:6f:bc:58:d5:48:89:57:d6:1b:38:8d:bc:
df:56:db:08:54:b9:49:56:75:07:cc:12:81:45:9a:b0:c2:dd:
e0:5d:80:49:09:23:57:dd:b7:48:f7:df:8b:e9:6b:74:2e:47:
e1:88:18:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:09 2025 by rpki-client