Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2e8e8bc1-f788-3cb1-92f8-acce1e401699.roa
File: 2e8e8bc1-f788-3cb1-92f8-acce1e401699.roa (raw, json)
Hash identifier: EHSjLeRTHCCZ2kW9Hpw8Yugiro8JJ5QxbTLZgQFbYsA=
Subject key identifier: 96:50:77:A6:21:95:E9:15:66:69:EA:B0:2E:F2:DE:AD:0A:06:E7:1E
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584094B4AF4765326CA5280A3240
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2e8e8bc1-f788-3cb1-92f8-acce1e401699.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.123.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:b4:af:47:65:32:6c:a5:28:0a:32:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=4ed56818-34bd-462c-b9b0-6302bb1bef13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d4:79:c4:48:27:cd:30:cd:27:8c:d7:8a:f7:
6c:87:01:5c:8b:c7:66:ca:e0:e9:0c:9e:e0:ff:d1:
d3:0a:8d:6d:4f:18:86:bf:be:9f:29:cd:ff:2b:3d:
9c:ff:13:04:99:47:1d:be:34:d1:88:24:35:9a:8b:
e0:59:ed:a6:ce:3f:62:d0:e1:a9:0c:1e:a2:94:2e:
7c:ee:c9:67:f4:60:db:75:92:d7:78:8a:87:21:eb:
25:3d:09:f1:79:7b:1d:75:f8:d9:90:51:e8:88:52:
d9:58:91:18:02:a1:39:b1:2c:6f:86:96:2b:fd:f0:
34:33:6a:e9:5e:c6:64:53:f9:66:9a:4d:3c:d9:50:
e2:fd:02:31:b7:b4:9d:b2:dd:13:6f:7f:95:0f:2a:
3b:58:80:55:8f:7d:b8:ef:78:2a:b8:7d:91:76:26:
90:ed:cd:ad:87:db:07:bf:05:5a:04:aa:5b:0d:d4:
92:7e:62:5c:4a:ae:c6:58:73:6f:63:ba:99:57:84:
73:d9:8f:3f:9d:37:c8:e3:71:c4:2f:59:77:e1:68:
da:55:1c:03:28:da:a1:0e:bc:fb:5f:fe:5b:f7:16:
ee:2d:66:fa:f2:9b:e4:39:93:ef:a5:bb:8a:73:0d:
6f:5d:d2:ba:d0:f2:88:ce:4a:72:30:4d:07:a8:dd:
ff:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:50:77:A6:21:95:E9:15:66:69:EA:B0:2E:F2:DE:AD:0A:06:E7:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2e8e8bc1-f788-3cb1-92f8-acce1e401699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.123.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:03:62:c0:99:b2:ad:dd:9f:08:4f:3e:3c:e4:30:3a:25:d8:
54:c1:5c:11:3d:13:09:6f:04:1b:eb:bf:9e:7c:61:c1:c4:50:
5a:44:29:ca:a4:d3:e0:e9:0d:aa:42:bb:62:89:70:18:5f:7b:
56:c4:dc:25:9f:89:49:25:94:89:b6:cb:aa:ce:e6:d1:63:9f:
d5:ef:ed:6e:90:ed:71:0c:8f:8c:aa:7d:7c:69:1c:01:c9:bf:
92:d9:c3:d7:2b:9e:a8:7c:41:20:8d:60:58:20:7f:1e:b7:16:
57:e5:b6:bf:c4:33:3e:01:ef:ff:5e:7f:c4:99:08:fd:73:af:
89:a5:b2:b6:cd:d4:f4:f7:79:d9:64:71:70:78:98:92:42:4b:
2a:3b:4c:13:6f:19:af:63:45:da:8b:5c:c4:10:28:0b:66:94:
7b:70:2d:63:c7:bc:df:29:17:ea:29:a0:96:0a:78:b9:20:26:
0f:1e:d1:80:c8:b5:67:0f:5b:11:ea:fb:47:e6:09:0c:a2:ce:
a8:48:d0:df:34:b1:b7:65:ca:c6:2b:10:51:31:23:0a:b0:a2:
cf:fe:d0:74:2e:18:78:5a:d8:e8:0e:a0:1b:65:f8:e6:69:4d:
68:9b:e3:e9:be:eb:99:cc:cf:71:41:86:68:60:12:ee:0e:fe:
2a:41:04:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:31 2025 by rpki-client