Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3303195f-00e2-3df8-8a25-d84068324114.roa
File: 3303195f-00e2-3df8-8a25-d84068324114.roa (raw, json)
Hash identifier: hNGmQIjfZ4efbPMXJ8grhtlrIYGa6DrQmkMVBCz0uh4=
Subject key identifier: DD:BC:E2:57:3B:F2:37:86:97:FE:CD:61:EA:5E:25:B7:CC:D1:9B:EC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2F5F43460567027DF6FF9360
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3303195f-00e2-3df8-8a25-d84068324114.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:5f:43:46:05:67:02:7d:f6:ff:93:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=e1f0781c-2b10-473e-984d-198568471167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:76:1c:8b:79:8e:e9:18:41:7b:2a:6f:37:
b4:7f:70:36:91:3e:45:79:17:86:dd:ef:48:f5:ad:
bc:ff:1e:63:73:6d:81:6b:d2:bb:b4:fc:22:a9:2f:
c5:33:5e:4c:8f:46:43:74:66:45:96:eb:1f:f2:4c:
01:91:4e:82:f0:cd:ae:30:5a:9f:3b:84:21:4a:81:
5f:f1:ca:43:1a:c2:8b:60:45:d0:88:b3:14:91:ea:
8b:c6:95:d7:f2:0e:26:46:a4:ae:6e:61:34:92:d1:
fd:4d:4e:cd:cd:59:75:69:52:8c:2b:62:2d:d7:11:
7d:55:0a:d2:50:73:10:ee:d6:ea:b2:32:f7:91:79:
7c:05:a9:1a:ea:f7:63:81:83:8c:00:d1:a0:7f:a0:
3f:59:63:e1:a9:b2:67:ac:f4:15:0b:60:e8:c9:e2:
6e:cc:f7:58:e5:8e:a0:de:b3:93:9c:4e:56:da:da:
e8:65:2d:eb:5c:5d:dd:dd:22:47:ea:a9:54:b5:ee:
23:31:74:89:78:99:5e:09:6e:03:8f:67:71:ed:d3:
52:5b:e3:37:88:ab:3a:fa:f8:72:d7:64:49:c7:7b:
40:4f:c8:51:20:ac:cf:8b:58:4c:48:dd:fa:dd:5c:
a4:51:ce:96:28:d2:42:b3:99:8b:5b:19:80:28:c9:
81:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BC:E2:57:3B:F2:37:86:97:FE:CD:61:EA:5E:25:B7:CC:D1:9B:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3303195f-00e2-3df8-8a25-d84068324114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:d3:da:d6:ec:4f:f1:2a:1b:d6:07:04:70:c0:b1:bb:f8:3d:
04:72:46:f7:9e:bb:8b:4e:32:d4:93:68:fa:fc:53:94:30:60:
d5:49:48:e6:18:d1:66:ea:4e:54:10:0d:7e:57:ce:fd:c3:d5:
c6:4d:fc:e5:05:ff:01:1f:b0:3d:52:ef:f0:d3:95:ad:34:d8:
2f:e7:8d:8c:98:59:66:d8:58:2a:7e:74:51:3b:c6:89:47:f9:
97:8e:1a:d1:35:5b:21:94:fa:af:c3:71:fb:47:0a:a5:6f:82:
24:68:fc:fe:be:c4:54:b8:92:4d:61:92:86:6d:8c:34:ea:4a:
7d:ed:1e:c7:07:0d:7a:42:08:ea:3d:64:98:5e:e2:8b:56:18:
cf:2e:52:24:cd:eb:74:ad:dc:86:12:51:29:c3:c8:ab:18:10:
cd:cf:77:b9:70:04:c6:a5:c4:08:b2:f8:a2:21:84:97:72:51:
7b:79:a4:17:9b:4b:c4:e5:7a:6c:c0:e1:6a:51:c6:51:b0:b4:
a6:59:04:55:20:95:fd:62:c9:e9:f9:0e:52:28:f6:8a:29:8d:
69:c6:71:54:a6:c5:d2:be:f2:99:9c:a1:07:d0:85:79:ea:b3:
7d:3c:a8:6e:32:0f:97:dd:be:2e:fe:c9:90:dc:88:a7:29:56:
48:b8:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:12 2025 by rpki-client