Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c92d860-5f81-3677-9dc0-45976ee3f016.roa
File: 2c92d860-5f81-3677-9dc0-45976ee3f016.roa (raw, json)
Hash identifier: S4UdDVURrQ4xIezf7gXvcEFx42RLmRf9eOVQVBTUa1k=
Subject key identifier: 31:04:B9:68:52:B2:39:C2:AA:97:56:7E:51:6D:98:05:97:D1:A7:54
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE09042D329633E5B7DC95A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c92d860-5f81-3677-9dc0-45976ee3f016.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.148.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e0:90:42:d3:29:63:3e:5b:7d:c9:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=95b92018-9094-4ea0-9f9a-7a1c01524d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:fb:89:db:d2:f0:41:0f:de:98:01:df:bb:
6a:bb:9a:75:6e:15:5e:cf:01:b0:b1:95:4f:e4:aa:
8e:1e:1f:30:d2:cd:04:5a:91:eb:ff:7c:68:44:c8:
d9:30:01:c4:9f:3d:41:ef:ca:fc:e5:c6:f9:a8:06:
08:1c:3e:ef:61:94:98:21:59:61:e4:31:19:df:6d:
5b:5f:9d:5c:45:34:20:f2:33:02:b0:73:0c:a9:f2:
39:af:a8:cf:45:0c:b8:1a:1e:38:69:20:c4:1d:29:
79:35:4f:ff:2d:d8:2b:42:17:92:fd:34:7a:ee:09:
23:3d:74:f7:5f:5e:1b:a6:a5:d3:0f:b7:d3:4f:eb:
7f:2e:77:f5:5f:1e:1a:63:fe:b3:15:de:1b:a5:91:
04:f5:82:f1:eb:d4:d9:70:9c:80:9b:ab:36:b0:9e:
35:f0:f9:32:fa:2d:4e:3c:e4:6b:81:66:59:65:4d:
cb:26:3c:95:1a:f4:27:53:bd:2c:66:5e:18:9b:d2:
0a:6f:86:b2:4e:33:a4:06:8e:af:dc:2c:46:72:1e:
70:42:e7:e9:ca:28:09:5e:f6:e8:0a:e5:86:a0:c8:
e3:9f:5f:f9:57:65:9b:ee:6a:e2:f1:02:e3:f7:08:
5b:af:f0:1e:a0:d9:71:28:de:2f:05:68:d3:a0:ee:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:04:B9:68:52:B2:39:C2:AA:97:56:7E:51:6D:98:05:97:D1:A7:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c92d860-5f81-3677-9dc0-45976ee3f016.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.148.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:0f:5d:57:e3:c3:f8:c8:ef:d7:13:b9:65:6d:aa:a8:19:a5:
8e:31:b2:16:7f:b3:82:fb:a4:e7:b2:b8:74:13:08:5b:b8:f3:
ef:5b:64:b1:7c:70:54:97:e4:38:c5:18:86:45:2e:a4:e0:31:
10:31:d1:6c:35:39:ae:b4:4b:48:98:45:8b:3e:f6:2c:6a:f9:
d9:d1:65:73:52:af:0a:5c:fa:ab:1e:f0:9f:f3:2c:1b:0b:79:
bd:1a:9b:d6:97:d1:02:45:b0:2c:04:aa:af:a7:33:0f:97:f0:
9b:25:4c:c5:40:e1:b9:48:d6:ff:dd:e0:0b:97:46:23:fa:9b:
f8:db:1b:29:68:ae:e1:08:88:5d:03:65:1b:99:85:a3:85:2a:
79:8a:bf:b0:66:9d:ec:f3:b4:19:3c:cb:72:4b:54:e2:18:42:
0e:65:ce:b2:ec:0f:38:f6:a7:dd:c6:91:f4:32:95:4a:4d:f4:
cc:b1:65:e9:20:44:9b:0b:18:6c:8f:55:f2:1b:01:ce:42:16:
7c:87:d3:46:e1:09:b0:5f:38:48:38:4e:6c:3f:24:c2:34:d3:
40:58:fa:71:38:8b:64:89:d8:ea:6c:aa:d0:85:d6:73:80:3b:
27:1f:9b:e7:8d:6b:54:31:c9:1c:5e:c4:30:9a:b7:10:22:b9:
6b:65:76:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:12 2025 by rpki-client