Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a33be43-b101-3a4e-a91c-d05ca2895f2a.roa
File: 2a33be43-b101-3a4e-a91c-d05ca2895f2a.roa (raw, json)
Hash identifier: bYNR2LUlnG/gGrKFUIcipXJeHPufT5umC0E1ynEO/w0=
Subject key identifier: 38:6E:C5:14:C5:5B:CF:59:80:98:BE:5D:F8:6C:85:AA:B8:1D:EE:03
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF7DF95BB096C770966565600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a33be43-b101-3a4e-a91c-d05ca2895f2a.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.168.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f7:df:95:bb:09:6c:77:09:66:56:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=1b6c60d2-62bf-4939-9109-6ce6a59100b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:0a:43:5f:a1:60:4f:fb:89:a4:4d:3d:02:
8e:02:3b:ca:4a:7a:a1:eb:4d:c8:9f:ec:04:9a:19:
6f:86:d9:0d:ef:c6:b2:f9:f1:28:65:8b:fc:63:14:
54:bc:fa:0a:8a:46:fc:4c:e5:85:01:13:4f:c9:45:
61:8b:ac:40:71:1f:5f:c6:cf:0a:0d:da:f4:56:79:
26:4e:0b:b8:70:e2:98:6b:df:fd:d0:2e:51:fe:dd:
b4:3f:e5:ff:39:40:02:cd:0a:62:29:e6:79:b3:86:
92:d2:46:4d:f5:f9:a5:34:82:15:15:88:26:bd:b9:
9e:14:89:fd:da:80:24:3a:4c:37:f2:c2:fa:67:a0:
54:e0:47:b1:ca:80:6e:92:59:70:0e:c2:6e:53:ed:
91:4c:98:c6:a9:19:6c:78:92:8d:ce:d9:f5:86:1a:
43:d9:63:37:05:70:78:bc:98:71:c6:fe:d8:7e:fa:
f4:1b:1a:22:f8:a8:5e:1c:86:fe:c7:3d:ab:af:29:
52:13:6c:cf:00:ff:be:65:10:10:59:3a:03:7b:a3:
72:7a:9c:4b:46:db:d7:d2:e7:c3:f5:f9:ce:14:03:
62:69:a1:d7:44:f0:68:5a:70:42:2b:99:df:a6:79:
7f:13:a8:c2:e0:24:ab:7a:67:cb:93:ae:ca:be:9b:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6E:C5:14:C5:5B:CF:59:80:98:BE:5D:F8:6C:85:AA:B8:1D:EE:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2a33be43-b101-3a4e-a91c-d05ca2895f2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.168.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:b7:5c:9e:1d:3b:96:bc:2e:b9:b8:95:47:6f:70:48:3d:2e:
0b:5e:37:8f:99:3a:57:25:0f:3d:4d:8b:6e:87:13:6e:a6:a6:
53:de:cb:71:9d:41:c5:47:2f:ff:17:61:f2:76:13:ab:fc:24:
6a:d4:3e:7b:1c:26:74:df:ff:c2:3f:10:77:a0:37:09:a2:1b:
3f:69:00:ef:c6:37:e7:b8:b9:8d:cd:be:f1:95:eb:41:22:cb:
be:a1:20:89:76:ad:03:1b:e3:bf:17:08:5b:d4:8f:23:7f:35:
0d:46:cc:75:e9:d8:79:c0:43:db:3d:f9:85:66:a7:f9:a5:3e:
98:93:a9:40:c6:f7:ca:a6:96:de:72:2c:b2:be:5d:c0:f9:84:
8a:70:78:e5:f5:62:b2:26:26:31:2f:62:3e:1a:7e:f9:e8:a6:
3a:c3:a9:8c:ac:dc:f0:55:19:20:31:db:90:ea:05:b3:3e:90:
8a:12:3b:b3:8e:ba:81:47:87:6b:07:4a:fe:ff:41:37:f9:24:
59:74:70:c7:2b:a9:31:80:c4:44:56:c1:09:f3:46:e8:ac:20:
1a:a0:27:c5:c1:f8:03:f3:e3:f9:6a:21:60:19:6a:48:52:d7:
6e:d5:28:1a:34:0b:48:5b:57:f6:f5:54:af:d0:75:13:3a:c5:
4c:3c:80:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:43 2025 by rpki-client