Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2956a5ec-a3b3-39d8-9173-d1bc03304718.roa
File: 2956a5ec-a3b3-39d8-9173-d1bc03304718.roa (raw, json)
Hash identifier: 1ddNAUr0+c0zdYqZAv6SOkoNswzTFsDGULTjN7CXTk4=
Subject key identifier: 46:D0:5D:EA:08:01:57:31:B6:37:79:AD:E8:DB:CE:97:89:98:2A:C5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401704FC4990EFCE59D0DA3C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2956a5ec-a3b3-39d8-9173-d1bc03304718.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.27.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:04:fc:49:90:ef:ce:59:d0:da:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=b32ddee8-f5b3-4b0f-acf0-0a760cd37664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:45:12:c4:17:ed:2d:03:d6:58:59:b3:ae:33:
2e:3c:ce:3b:f6:90:1c:be:7b:0a:f6:e6:b0:22:40:
19:83:22:e3:c4:7e:81:90:cc:7b:24:bf:1d:7f:7c:
44:77:f1:e7:4f:0b:bc:1e:f9:c8:c3:dc:b9:77:99:
35:31:d9:ea:e9:bd:54:97:46:87:fa:bf:95:7d:99:
0c:7a:69:07:20:52:c0:8d:15:03:63:ec:6d:1d:0f:
7b:d9:02:01:0b:2a:51:82:2c:ac:3e:c8:7c:96:3c:
74:27:97:23:91:cb:7f:b4:90:00:82:71:83:f4:4d:
99:03:32:fa:99:9c:83:2b:dd:2b:dc:c4:fb:51:7f:
99:7f:db:c5:2c:e5:f9:70:c6:e3:cf:a4:08:d1:cb:
11:a6:2d:4e:0e:83:2c:b1:b9:4c:35:5e:9d:e2:bf:
e9:04:46:23:6a:61:ff:04:bd:c7:b7:45:b5:d4:ac:
18:05:7f:cf:90:d3:11:6d:45:8c:3c:d1:60:de:5d:
4d:ec:dc:d7:9c:27:98:c3:3e:4c:50:75:cb:d4:b0:
0b:20:3e:d7:91:a3:e6:4a:0d:b7:23:b0:4a:c6:28:
2f:90:75:80:31:2a:96:eb:91:17:2b:91:99:e8:9e:
40:70:de:e5:eb:6c:b6:86:26:26:33:48:7a:04:28:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D0:5D:EA:08:01:57:31:B6:37:79:AD:E8:DB:CE:97:89:98:2A:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2956a5ec-a3b3-39d8-9173-d1bc03304718.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.27.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:38:f6:10:9c:99:69:ac:9e:7c:91:6e:7d:46:bf:bc:05:8a:
a6:ae:f5:bc:c0:be:f7:77:6f:85:12:80:b6:a8:4d:84:31:e3:
96:60:c4:2e:de:bf:d8:8e:d0:55:c8:99:5a:f2:da:a4:97:6f:
2a:c7:08:f4:6d:97:0a:da:5b:cd:7c:85:00:24:78:93:5f:f6:
c5:e5:94:b7:3e:96:cf:cf:8d:4b:04:42:11:d4:cc:dc:33:18:
08:be:03:b6:d0:dd:81:4b:71:75:4a:41:f0:d6:d7:7d:1b:25:
dd:24:e0:14:c8:38:a6:89:6f:2b:4f:75:d9:93:ee:7f:7a:13:
44:5b:58:a7:a4:2d:2e:44:d9:7e:6c:3d:87:21:e0:ed:84:e1:
a9:59:2b:3a:7b:02:83:1d:88:32:6e:ba:dc:5f:33:ed:17:dd:
b7:c3:10:0b:7e:79:40:85:da:ef:62:1b:06:c2:43:d7:dd:3e:
31:6a:aa:f6:f7:3e:4e:d9:cb:2c:8e:97:1d:d3:91:cf:e8:2d:
bb:3f:78:d7:12:d3:5b:60:ed:03:2a:7b:6e:c2:16:da:8f:e6:
21:33:b5:7d:a7:20:23:71:0b:55:bb:0e:7a:d7:66:c3:db:1b:
15:a5:8d:b5:33:ef:18:02:21:88:a7:b8:08:5e:0e:07:92:1c:
66:d4:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:33:21 2025 by rpki-client