Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3138be11-2a92-3b4f-90b3-f27c04637074.roa
File: 3138be11-2a92-3b4f-90b3-f27c04637074.roa (raw, json)
Hash identifier: WoNBqf6Gk+UkCX8jivQ60lU6CECJY68WftybFTJC3MI=
Subject key identifier: F2:41:59:42:F2:2E:02:15:32:C2:DF:5C:C6:BE:6C:86:AB:56:92:54
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840198CABF110BBAB72C414BBF0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3138be11-2a92-3b4f-90b3-f27c04637074.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:8c:ab:f1:10:bb:ab:72:c4:14:bb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=70d4d138-da0e-4f32-86f5-e62faa15d331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:c0:e7:29:3d:5a:80:a9:0e:9a:24:5c:08:
3e:d4:ab:3c:9d:8f:ae:b4:2d:a4:7a:46:0f:b8:39:
fc:44:c9:e9:5c:ea:33:bd:ba:17:a3:d5:ed:8c:68:
5f:9b:ed:77:75:e7:f2:95:b8:88:d8:4e:a9:c1:bf:
e8:38:31:61:ca:aa:12:39:1e:2b:fe:34:5e:7a:73:
32:54:b0:34:ca:07:e7:58:78:59:f8:a6:83:f2:e3:
a6:7b:04:fd:9c:f5:1f:27:f9:e0:be:36:78:d3:7e:
27:51:bd:b5:14:35:7e:90:d6:45:c8:a8:2f:98:02:
bf:d2:fb:27:35:92:32:16:f0:a0:8c:ba:0e:de:56:
22:be:13:1a:eb:9c:90:d7:61:70:54:0a:bb:e8:ae:
db:e3:54:f4:c4:54:99:34:8c:b5:61:1c:65:54:a2:
50:a2:28:2f:ac:8d:0e:80:9f:00:1d:09:b7:06:46:
f9:bb:40:21:35:92:47:9b:4e:c9:9d:d3:e9:62:b0:
70:66:ef:9c:6c:bb:04:e6:38:0b:9d:a7:c6:68:4e:
f8:b7:de:ac:62:0a:62:ff:b3:1e:c0:8f:ac:61:66:
01:c2:6f:cd:92:ea:a5:a2:ff:a4:0b:a2:3f:d2:e6:
a4:50:72:90:ef:35:6a:37:e1:e5:c6:c0:87:9b:f0:
fd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:41:59:42:F2:2E:02:15:32:C2:DF:5C:C6:BE:6C:86:AB:56:92:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3138be11-2a92-3b4f-90b3-f27c04637074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.204.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:d5:6f:44:ab:0e:0f:5d:f9:d6:29:b4:57:67:c0:8a:ff:38:
99:c9:51:85:dc:b5:8e:40:87:72:9d:d5:56:15:35:89:57:9a:
ec:79:43:07:cd:b4:b5:40:98:be:9b:1c:85:47:50:3d:ae:d7:
9f:a6:43:ad:d3:c4:38:6b:7a:72:55:5b:6b:5a:8f:71:32:25:
8e:4e:b3:b0:14:43:d3:15:ea:ef:f2:dc:ee:bb:ba:bf:69:e8:
e5:0a:34:e3:4c:b5:7b:09:12:9b:78:d8:fa:b3:6e:2d:d4:83:
cb:4e:32:76:2c:02:68:b4:aa:9f:dd:97:9a:d3:d8:02:5b:8c:
7e:95:87:0a:01:e5:e3:e6:a6:4c:c5:39:78:96:7b:c5:23:93:
53:33:dc:ed:20:83:6d:ce:34:13:cf:38:f9:e8:82:af:0e:72:
78:c9:47:2a:4e:09:30:4c:f8:f8:9e:a0:e0:a5:a7:2f:7a:28:
df:18:cc:14:39:5d:f3:63:ee:82:69:40:9c:26:c0:f4:98:52:
29:52:ac:cc:57:ae:5a:d9:23:94:0e:58:67:30:70:f9:09:32:
86:f2:4d:fd:0a:54:8b:44:02:70:41:7d:7f:5b:03:18:8c:e3:
d0:16:09:4b:19:7a:e9:32:e4:6b:d8:64:18:71:17:bb:b9:02:
7b:ce:e5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:45 2025 by rpki-client