Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b683fb5-9527-3065-949d-5d29523c88f4.roa
File: 2b683fb5-9527-3065-949d-5d29523c88f4.roa (raw, json)
Hash identifier: BEJG0lKY6TPooGJX2fZRaTt9ySm+xgqpyi5MO4k+ql8=
Subject key identifier: C0:84:42:9E:55:17:C3:81:9B:E1:D2:7E:37:30:22:CF:8F:3F:EB:98
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B371A7D0C273889A535A3B20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b683fb5-9527-3065-949d-5d29523c88f4.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.31.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b3:71:a7:d0:c2:73:88:9a:53:5a:3b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=83d4eb4e-2313-4a45-ad7c-a97e97ceb850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:db:31:f4:43:df:ac:23:90:dd:32:5d:9d:00:
09:b0:85:5b:27:d3:9b:c6:47:dc:a5:79:19:11:0e:
4e:cc:ec:eb:96:dd:e4:6c:08:b8:d0:4b:de:e8:9b:
c3:e0:a3:18:7a:8b:06:99:da:03:4c:2b:c7:ae:95:
4e:26:5d:21:13:be:72:cf:5f:d7:4e:3f:0d:88:1b:
84:c8:6e:ce:94:89:ed:54:fe:c8:f3:03:b5:d9:c9:
7f:57:f8:63:ac:9d:8f:4e:b7:cf:08:cf:80:82:14:
66:09:da:1b:d9:0a:d0:a1:f7:08:03:0a:be:d6:e2:
51:20:3e:bd:4a:24:4c:cf:02:b5:3f:e3:38:e1:bb:
cb:87:3d:af:f5:8e:22:4b:9b:73:e4:a4:ff:b2:58:
34:06:16:cb:26:81:d4:cd:6f:c8:60:ee:69:7e:49:
27:50:37:c5:d6:33:b7:5c:d7:84:74:87:05:cd:02:
8d:3b:f2:9a:bd:8b:a7:1b:5e:89:47:c0:34:78:05:
57:4c:32:a4:c4:91:97:d6:eb:42:da:a4:d2:8c:84:
4b:4c:e2:be:50:aa:75:bd:74:22:da:65:6a:25:01:
93:9b:6e:86:8f:88:80:bf:01:89:e0:c0:dc:60:8c:
75:4a:8a:4c:83:02:5e:ee:da:b0:0e:52:70:ef:dd:
08:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:84:42:9E:55:17:C3:81:9B:E1:D2:7E:37:30:22:CF:8F:3F:EB:98
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2b683fb5-9527-3065-949d-5d29523c88f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:82:ca:c0:61:6b:32:93:e4:16:3c:43:63:22:69:fd:0e:be:
eb:b8:23:5f:7d:da:33:a5:4d:b3:52:3c:cf:f7:9a:6d:d8:aa:
bb:46:10:df:4c:ef:81:a9:1c:de:7e:74:ed:90:ab:c3:2c:31:
71:c2:72:a7:7f:1c:04:aa:54:37:13:28:e0:4d:6b:f8:6c:1a:
9c:96:52:b3:00:31:74:ef:0a:ff:bf:14:12:c8:a6:4b:45:85:
bd:e3:6b:3b:c0:3d:68:f1:56:85:fa:e4:8a:6a:fe:eb:79:7e:
8b:08:26:9e:07:c2:3d:cc:50:1a:19:37:d1:6c:19:14:8c:a7:
c1:46:cb:66:dd:02:1d:ea:44:0f:bb:07:f1:d6:b1:c4:5a:95:
1d:77:d2:8b:e4:37:6a:84:6b:7e:d4:a4:7a:ee:68:92:92:14:
c6:8d:00:d3:64:c2:6e:9d:00:35:9b:34:b2:a3:d2:bc:37:73:
2b:e2:10:69:66:cc:4e:ba:90:ec:35:4a:27:5f:ef:6d:9d:94:
bc:dc:c0:12:be:ce:41:45:78:d6:f8:06:b5:7c:37:6f:c5:57:
60:68:f4:66:1a:b9:83:6a:37:6c:74:94:85:d6:d9:4a:75:53:
f9:3a:ec:49:e0:0c:22:0b:88:3e:5a:9e:3c:f6:7c:b0:3d:97:
fe:b7:0d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:34 2025 by rpki-client