Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fce70a5-a5bc-30af-8cca-fb224e875e1b.roa
File: 2fce70a5-a5bc-30af-8cca-fb224e875e1b.roa (raw, json)
Hash identifier: QBMLwfvz72ovYGmmz3gDWPUPclkpaFxriOTEZ/3S8EU=
Subject key identifier: 92:26:8E:51:05:6F:41:7D:FD:39:24:12:0F:6D:98:57:84:D0:F3:B2
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CBA009E10BD02DC9311A2EC00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fce70a5-a5bc-30af-8cca-fb224e875e1b.roa
Signing time: Thu 27 Jan 2022 05:00:00 +0000
ROA not before: Thu 27 Jan 2022 05:00:00 +0000
ROA not after: Thu 03 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.18.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ba:00:9e:10:bd:02:dc:93:11:a2:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 27 05:00:00 2022 GMT
Not After : Mar 3 05:00:00 2022 GMT
Subject: CN=d4b32f5a-c0de-40c1-99bc-17cf5984c78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:b2:a0:05:45:85:6d:61:1d:9f:e1:83:67:
3a:5e:8e:8a:6e:2f:e7:51:45:83:14:73:41:8c:2e:
8e:4d:40:45:58:69:f4:a1:02:9d:45:92:80:00:89:
32:4c:c9:de:34:bf:2b:a5:bc:97:32:a0:5c:e2:e9:
a5:54:6e:c1:73:f5:1d:1a:3c:d3:58:fd:bc:39:3b:
92:c4:39:a7:e3:5c:76:82:8d:1c:47:ba:9d:ee:27:
cb:3e:01:78:58:b0:e6:f2:e6:5d:7a:4d:74:32:05:
e2:6e:4c:68:83:c7:1b:11:90:04:e7:79:22:b2:1d:
21:10:85:9d:d3:6e:88:9e:ef:09:e0:7b:58:8c:ea:
f1:d5:5b:af:0e:ee:32:84:77:37:0b:c0:d8:ae:4c:
2e:d2:02:54:49:af:4f:25:5a:f7:6a:f1:38:a1:03:
25:01:1e:63:69:a4:8e:34:af:96:31:05:36:c9:90:
41:62:c3:ed:1c:43:d2:2b:89:e4:9f:fc:5b:cf:ea:
8c:07:d6:d6:f2:0a:49:95:c4:c1:f2:a0:3a:68:53:
97:b7:da:8f:fa:10:65:b7:4d:7b:fe:e8:ae:c7:95:
7d:ab:44:d0:87:85:f0:f1:47:d7:f2:ea:05:4e:a4:
e4:38:86:bd:0b:5f:d9:42:c7:31:4c:57:65:43:c6:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:26:8E:51:05:6F:41:7D:FD:39:24:12:0F:6D:98:57:84:D0:F3:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/2fce70a5-a5bc-30af-8cca-fb224e875e1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.18.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:6b:12:0c:ce:14:62:57:a3:97:58:89:b0:d9:d6:3f:c9:5d:
bf:48:15:75:21:17:7a:ef:9e:ae:09:75:90:46:bc:25:3c:4d:
df:91:bc:14:e8:9e:fb:f0:9a:e1:9e:8a:11:37:4a:30:b0:8a:
e8:3a:0c:6c:11:de:5f:79:22:af:46:9d:dd:60:8b:ba:91:84:
36:64:12:bc:9b:e7:dd:27:db:6c:97:2c:3a:51:3d:55:0a:a2:
8f:f0:67:0e:5b:bd:d9:db:89:cc:83:24:45:c9:0e:f4:06:fd:
4b:50:c8:ce:f3:fa:20:3a:b6:fd:9b:e0:94:15:10:21:b5:13:
00:ae:6c:7f:5a:96:3c:26:e5:b3:a7:95:37:76:e6:2c:ef:31:
e4:0b:eb:dc:2c:1b:d2:b8:0b:20:97:9e:af:6b:ab:db:e5:fe:
b8:d8:f2:83:2f:81:04:a2:f5:c4:e0:09:bb:b8:d5:3f:55:50:
78:ea:d9:0a:cf:d1:b2:43:fc:c4:76:9d:61:b7:c1:c2:8d:66:
72:e2:4e:3f:37:60:de:68:84:eb:93:87:a3:f0:ac:8d:51:54:
74:a4:f7:d8:88:0a:94:2f:47:31:0e:47:4c:d9:b3:4f:22:a4:
d6:e7:f6:9e:a3:4f:09:86:98:f0:70:51:dc:e8:71:90:12:a0:
41:3a:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 04:25:05 2025 by rpki-client