Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/325bebfc-dc52-31cc-8e19-44cf20324528.roa
File: 325bebfc-dc52-31cc-8e19-44cf20324528.roa (raw, json)
Hash identifier: uSmUHgFNHEhwICZsT7JLVmacv9MtIboCZhYYj68gdtI=
Subject key identifier: A1:65:58:01:54:79:71:C2:BB:D3:BD:2E:BD:93:53:6D:F5:1F:D7:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584040A20CDA958C687ED4A119C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/325bebfc-dc52-31cc-8e19-44cf20324528.roa
Signing time: Thu 15 Dec 2022 12:00:00 +0000
ROA not before: Thu 15 Dec 2022 12:00:00 +0000
ROA not after: Fri 20 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:40:a2:0c:da:95:8c:68:7e:d4:a1:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 15 12:00:00 2022 GMT
Not After : Jan 20 05:00:00 2023 GMT
Subject: CN=0ae64f42-0a05-4cc5-854e-bbf5deef458d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3e:4c:ef:69:c5:28:22:6b:6c:ee:4f:50:5a:
e1:35:06:ba:92:09:26:a5:83:26:0f:4d:22:82:1c:
22:c6:42:55:a7:c2:78:43:ad:08:db:af:85:be:47:
c9:89:c3:37:0e:fc:7b:3f:53:0d:1b:fe:6c:7f:c5:
2d:62:db:c4:31:69:20:37:9c:c0:9f:9d:68:9b:b0:
5c:a0:cc:f3:42:c0:2e:fa:60:44:3a:75:52:3e:bf:
54:89:44:34:f4:0d:09:d9:94:e1:f5:86:51:a0:1a:
49:68:b0:9b:5c:50:61:13:b5:46:e3:f6:a4:fe:49:
34:c6:d3:e7:d2:0c:71:66:72:a7:76:6e:ae:61:b7:
68:88:be:91:b4:4d:55:ac:9e:4a:99:a0:cc:5d:14:
29:78:68:b7:b7:6f:71:cd:55:9a:39:59:43:4f:11:
25:1e:7a:ce:64:91:b3:7e:eb:bc:70:64:f1:4c:7f:
3b:12:ba:f9:9a:fc:de:b5:72:eb:b1:f5:08:d0:69:
bc:93:08:da:c2:5b:60:1a:d3:55:df:25:8f:e6:72:
b9:74:c3:41:44:be:f4:62:a1:8c:bf:18:5c:06:d3:
16:d7:e1:6e:2a:92:9c:68:fd:64:95:4b:44:94:80:
5f:34:a2:7f:24:91:57:f5:fa:a0:b4:cc:12:65:d9:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:65:58:01:54:79:71:C2:BB:D3:BD:2E:BD:93:53:6D:F5:1F:D7:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/325bebfc-dc52-31cc-8e19-44cf20324528.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:37:75:4b:5e:fe:df:07:66:8d:2e:62:22:f0:12:e6:b7:84:
16:81:84:e6:0a:b7:95:2c:e0:94:cf:10:31:26:eb:82:f0:57:
5e:d5:33:f5:92:d0:6d:ca:ca:54:58:59:31:e9:a1:01:d5:62:
f0:7e:c0:c3:1d:05:72:2f:76:df:7f:9d:2a:e4:e5:bb:11:80:
ba:a4:c7:4e:ca:be:39:66:e2:a0:58:37:23:8b:71:67:5f:0c:
51:dc:57:e7:0b:f6:1f:2f:61:9e:08:7a:7b:49:37:85:0b:cd:
aa:e4:de:ee:57:eb:25:fe:4f:f8:47:6f:20:95:18:b1:35:f6:
4c:f5:ef:a5:b9:36:35:6e:e4:db:45:0d:96:99:41:cd:5e:9b:
89:83:50:f2:aa:19:b8:38:86:3f:f0:da:bd:21:4d:03:ba:5f:
98:1a:bb:65:67:52:a1:73:03:38:a9:c3:69:b6:0d:01:a7:a6:
8c:e5:b9:ab:81:41:dc:23:30:83:bd:c7:b8:66:41:1e:a1:6c:
92:13:a4:8e:e7:df:20:41:6f:44:72:68:61:5c:de:7c:79:ce:
7b:88:e2:66:d3:b0:fc:f2:49:7e:88:f5:76:e3:6b:a8:d4:69:
24:68:a6:1b:15:04:fd:d8:0f:f4:d9:e7:8f:f1:1b:85:3f:1c:
93:87:90:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:20 2025 by rpki-client