Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c9a04b6-d45b-30be-bd49-a57db823ec8d.roa
File: 2c9a04b6-d45b-30be-bd49-a57db823ec8d.roa (raw, json)
Hash identifier: mipaX1cpNSY14MhpEUtfzvs83dcEUq43AQQXoZbQ8q4=
Subject key identifier: 48:8F:86:8B:8E:35:3E:A5:80:B8:25:3E:0A:BD:4C:9B:0F:5D:82:70
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584017BEE9D72792244595304420
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c9a04b6-d45b-30be-bd49-a57db823ec8d.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:be:e9:d7:27:92:24:45:95:30:44:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=f07681f4-da89-477c-948a-94c36cacb461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:9d:c8:74:df:81:21:90:7b:96:66:06:08:
b8:e6:30:9b:fc:7f:ab:01:24:5d:a4:fa:26:16:a1:
67:65:70:de:13:4f:38:c7:55:90:5b:fc:a6:ff:9b:
78:fe:ee:c6:f9:84:d0:6d:da:01:df:5a:46:7d:03:
28:35:9a:7a:7b:40:09:da:d3:0d:20:25:6d:bc:51:
ce:00:47:e4:fb:89:24:fe:14:83:0c:37:45:a9:4f:
aa:ee:3a:ec:9d:0e:b1:83:6e:0b:34:0b:c5:2b:65:
9b:89:18:5d:8a:29:42:f9:c9:2f:1d:86:77:e2:32:
d0:a4:1a:8e:b1:2e:61:7b:87:04:a0:7d:4d:5d:c3:
bf:e7:6e:72:e4:0d:9d:62:e5:af:b4:00:3d:db:1d:
95:fe:36:16:1e:32:92:be:d4:b6:a5:b4:c3:2f:2c:
ce:ff:ee:6e:89:c0:c2:3d:53:e4:a7:bd:99:b3:4b:
53:86:57:15:f2:c8:a0:3c:13:89:93:f1:88:36:74:
8d:83:0c:80:df:10:2a:08:71:39:da:af:f5:72:0c:
46:3c:30:f3:c6:74:40:75:c2:83:71:19:17:d2:f3:
c3:23:be:00:2a:1b:f5:2b:c0:3d:bd:a3:19:91:5d:
bc:f2:04:32:01:92:d3:bb:ce:4f:94:d0:82:60:ae:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:8F:86:8B:8E:35:3E:A5:80:B8:25:3E:0A:BD:4C:9B:0F:5D:82:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2c9a04b6-d45b-30be-bd49-a57db823ec8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:b1:da:f7:9d:4a:67:bb:0f:89:ff:b7:f6:12:03:a8:de:94:
fd:8d:c4:8a:ad:66:9b:1b:d6:c8:04:28:3f:8e:00:8d:61:f1:
41:a2:21:5e:a6:68:c3:2d:e3:1a:60:ac:a0:4b:69:5a:67:01:
02:46:ef:ac:8d:4b:96:7c:46:a9:a6:b2:77:0a:ea:31:1c:c8:
57:cc:3c:65:0b:af:c5:dd:32:6f:8a:b9:85:6c:3f:db:62:98:
4d:e1:3a:0b:b5:e6:68:d0:35:e1:4c:3c:aa:74:56:ef:24:99:
b1:47:17:66:39:14:2c:5d:52:89:2b:06:79:6d:22:08:f5:58:
48:f1:d9:fc:21:f1:54:a4:3d:a2:3c:b1:94:e2:52:63:96:13:
06:2a:94:4f:05:a2:98:48:56:a8:c2:e4:1a:9a:93:bd:58:2c:
96:4e:69:12:a7:84:b0:2b:2e:b0:75:bf:71:cf:87:bc:2d:af:
84:b2:9b:8e:e6:0a:98:03:a4:a6:e0:cc:3c:9a:7a:f9:53:34:
7a:05:aa:72:bc:0d:56:3a:fd:a2:13:b7:be:1c:26:fd:df:77:
7f:fd:9a:2e:97:8b:56:66:e7:59:4c:ab:b2:9b:e1:bb:70:be:
fc:9e:26:5b:c6:c4:e8:35:6f:44:25:d4:98:cb:ef:46:b6:c0:
01:17:b5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:41:42 2025 by rpki-client