Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/308d331d-f091-3c00-94ed-6c3906e1dc4e.roa
File: 308d331d-f091-3c00-94ed-6c3906e1dc4e.roa (raw, json)
Hash identifier: M70zMr93PTwtQ//e5f+QYRPNpTQoq4PFioRtVrGzXok=
Subject key identifier: 05:77:29:10:DC:DD:93:F0:02:F6:7C:49:18:B1:9E:8F:C0:BF:9E:77
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D64883602EBF40A99AC479600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/308d331d-f091-3c00-94ed-6c3906e1dc4e.roa
Signing time: Tue 29 Mar 2022 04:00:00 +0000
ROA not before: Tue 29 Mar 2022 04:00:00 +0000
ROA not after: Tue 03 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.154.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:64:88:36:02:eb:f4:0a:99:ac:47:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 29 04:00:00 2022 GMT
Not After : May 3 04:00:00 2022 GMT
Subject: CN=a97869b4-370c-4a5f-8bed-832e6d8cc888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:74:4f:01:39:26:f9:3b:16:da:33:0b:e2:dd:
fb:38:67:61:06:12:7a:e3:4e:37:8b:5a:ad:35:c3:
25:4b:a1:66:17:88:81:0b:5c:19:76:bd:3b:e0:81:
a0:26:76:5c:05:df:80:6c:67:37:b9:21:ee:2e:bc:
ae:10:6f:fa:4e:c7:42:1d:a6:f6:32:42:0b:7a:c7:
7b:f2:37:57:9d:55:d4:11:c7:77:6a:2e:6b:71:4c:
08:7b:5d:f9:90:8c:93:0f:d9:7f:2a:82:0b:0b:39:
90:ad:af:8d:d9:55:c5:11:04:41:f1:98:b9:51:d9:
66:a0:88:95:60:ea:55:ef:3a:8a:2d:04:c4:35:1e:
44:7c:3b:29:7a:07:e5:36:2f:15:72:b3:4c:f5:62:
01:e1:6c:d2:d7:f3:50:79:ac:4e:7f:5d:8d:c2:1a:
c7:d8:17:dc:97:2c:5f:4a:bc:9c:42:69:b3:1a:4f:
aa:cb:b7:54:c4:7c:74:cf:2d:a3:b1:90:f3:38:c5:
10:60:79:86:1c:7d:e0:be:63:18:b9:db:97:d8:17:
c9:e7:a3:5b:78:4d:e7:19:8a:4a:8b:08:f4:09:93:
ea:f8:c1:a5:02:26:62:74:e6:9a:41:ec:e9:03:05:
6b:8f:40:c0:84:47:b1:fd:0f:48:02:2f:43:c3:c7:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:77:29:10:DC:DD:93:F0:02:F6:7C:49:18:B1:9E:8F:C0:BF:9E:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/308d331d-f091-3c00-94ed-6c3906e1dc4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.154.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:dd:a8:fc:2d:53:d0:8b:9f:f6:69:f3:08:35:43:ac:f0:67:
8a:f4:b2:6e:5d:eb:33:c7:1b:37:77:43:c0:9e:d9:af:12:89:
f5:d0:03:a6:b2:06:a4:5d:f4:bb:7c:8e:5f:ce:51:e6:ae:c4:
97:9e:62:e3:76:46:b3:b5:8b:c1:df:64:94:a6:eb:0d:ca:e7:
f6:d3:09:3e:31:04:61:6c:03:51:93:2f:e5:5e:95:b2:e5:29:
b3:90:ca:ec:4f:1f:cc:e3:3b:7f:93:38:22:fb:07:91:39:21:
96:50:35:b7:35:58:25:94:48:42:81:e4:c9:d3:a1:90:19:96:
a8:a6:a7:6d:7a:82:7c:1a:9c:65:9d:42:b4:23:6b:77:30:6f:
2c:a7:58:3a:0a:35:00:44:1a:7f:0b:6b:03:3a:bb:01:bc:f8:
a2:bb:72:f7:76:d1:86:9d:ab:91:e2:ba:71:f3:d5:33:5d:cc:
f9:8d:a0:9c:88:64:ee:4b:42:74:a1:c9:2e:66:78:ba:f9:7e:
08:06:9c:f2:07:16:af:37:1c:d5:12:80:c0:a4:9b:ca:33:b4:
78:fd:32:e0:0b:2b:76:23:9c:3b:49:6a:55:92:d2:a8:69:c8:
63:a1:f2:ab:1e:16:25:37:b3:d9:b0:03:3b:eb:49:94:d6:a4:
9d:0a:ed:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:34 2025 by rpki-client