Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3325acb0-3ecf-3982-bfab-775d386e734d.roa
File: 3325acb0-3ecf-3982-bfab-775d386e734d.roa (raw, json)
Hash identifier: D6Vx5gsB28rAVzyhRM571IlNP7tBjxraPKoVQT4ykBc=
Subject key identifier: 10:CC:DD:21:AA:08:EA:42:86:64:65:66:1E:71:E8:6E:30:9E:C9:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584067F3840BA0EC67268E03A880
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3325acb0-3ecf-3982-bfab-775d386e734d.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.107.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:f3:84:0b:a0:ec:67:26:8e:03:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=4efe3e4b-0481-481e-b9e1-f96be31586cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:46:32:04:e6:06:4f:30:29:3e:e1:82:f5:
6e:80:0f:72:dd:5d:eb:1b:01:6e:27:c7:02:39:f2:
17:fe:22:e4:a5:0b:ae:54:74:62:eb:80:a5:95:a0:
1e:73:08:fd:f1:e8:19:c5:2f:c5:1e:2a:ed:08:db:
0d:e0:e6:b5:4a:b2:5b:1f:1b:e0:0b:c3:43:1c:74:
77:fa:1c:5b:f0:45:ee:e9:48:8c:29:19:1e:b4:0e:
17:08:85:70:8c:42:34:84:0c:74:39:dc:0c:82:da:
e8:8a:0f:81:96:34:ad:53:8d:79:0f:e1:67:cb:b7:
1f:ba:6f:eb:69:f2:82:94:41:8b:f9:88:3f:a9:48:
8d:d7:36:76:81:87:22:fd:79:65:25:a0:14:1c:67:
64:e3:1e:c3:0f:72:29:cf:5b:6c:f5:c6:28:1c:43:
61:5c:9b:2f:13:1c:2c:5e:99:5f:93:ef:ce:cd:4a:
1d:53:76:26:3e:1c:c5:22:7f:79:1b:4d:34:c3:11:
64:6b:cd:ee:17:b4:94:bb:0b:d4:3d:65:f2:20:51:
a7:9a:e6:b7:ae:ef:81:c6:b6:aa:b3:a2:b1:13:01:
ba:76:c5:d8:56:ec:69:32:2e:29:3c:f7:9d:1b:66:
4a:2e:37:d5:42:16:74:df:f1:77:85:d7:75:3d:78:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CC:DD:21:AA:08:EA:42:86:64:65:66:1E:71:E8:6E:30:9E:C9:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3325acb0-3ecf-3982-bfab-775d386e734d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.107.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:2d:b5:46:95:2c:75:f5:d7:3d:f8:4f:f3:cd:35:a6:54:b3:
d0:4f:55:bb:58:0c:ac:9d:92:24:5d:b0:e2:9c:f0:ba:27:c8:
2e:b3:87:66:e6:5d:a0:81:e2:36:2c:4b:72:ee:cd:d6:e0:69:
7a:6b:f5:f1:43:e8:ff:ae:9f:cc:d4:8c:a7:75:df:f2:0c:b2:
dc:3d:a1:16:f5:a9:f7:81:c8:b0:dc:9e:d5:01:4b:6f:e4:43:
a3:75:79:c5:f2:03:df:40:60:7e:1d:1e:d0:81:48:d1:62:89:
e5:96:67:d5:c0:01:c6:33:4e:4f:36:3d:3b:a4:95:5e:77:b3:
26:2e:76:b1:d9:14:92:10:fc:b7:29:9f:f3:ab:3a:b1:8b:9b:
4a:5a:53:c1:25:15:40:ba:36:0d:44:0e:6f:55:ee:56:1a:60:
7b:db:f7:fb:f4:1e:bf:ab:93:3e:bd:8e:a4:90:5c:c0:53:7b:
8c:8e:87:97:70:7e:84:28:b8:63:fc:07:eb:fe:16:e5:6b:33:
c7:a3:8f:84:1a:30:af:4c:63:e1:46:19:9c:ec:f1:da:30:f2:
da:6a:d0:ca:61:77:31:1d:be:e0:0a:ee:c5:de:80:85:b6:2e:
8f:d5:e5:44:dc:ea:8f:ec:f1:a2:b2:39:54:5c:fa:5e:38:a6:
a2:78:3c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:11 2025 by rpki-client