Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33d1557d-7f1f-38a3-bf95-a3dde1185b9b.roa
File: 33d1557d-7f1f-38a3-bf95-a3dde1185b9b.roa (raw, json)
Hash identifier: dPTqCdyhC6Vi3h75stkublMjHvTMicSU9rOyF92UekE=
Subject key identifier: 8C:AF:0A:DD:47:E5:25:F2:28:34:24:C8:FC:D1:21:E5:09:50:D1:8B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FD65F64134211F0781AE830C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33d1557d-7f1f-38a3-bf95-a3dde1185b9b.roa
Signing time: Mon 07 Nov 2022 22:33:08 +0000
ROA not before: Mon 07 Nov 2022 22:33:08 +0000
ROA not after: Tue 13 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d6:5f:64:13:42:11:f0:78:1a:e8:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 7 22:33:08 2022 GMT
Not After : Dec 13 05:00:00 2022 GMT
Subject: CN=4f8e70cc-6613-4a36-b489-16ec674c9e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:ed:ea:0f:d8:be:a8:ba:ec:0f:80:6f:ff:
f9:b8:ad:b8:a8:6c:e0:5a:61:83:f9:23:42:bd:c1:
78:f8:f7:19:fc:cf:24:d8:8b:25:24:86:7f:4f:16:
ce:4a:a4:30:35:a4:da:6a:31:bf:79:f3:2e:ef:09:
1a:eb:29:e0:43:c6:55:67:15:7a:c0:bf:15:23:f7:
c3:8e:0c:d9:96:44:eb:fc:a2:1e:5c:8e:89:13:2e:
33:f1:a6:9d:96:51:5b:a0:88:cf:ff:b1:00:08:b2:
a6:19:e8:72:b2:0f:60:30:29:bb:64:4c:e7:09:fd:
04:c0:df:f9:d6:ac:48:3e:ed:c2:67:f2:88:81:83:
35:ac:3f:06:70:7d:86:45:e4:53:9e:03:d1:8c:2e:
1c:52:ad:08:d8:f4:ea:f6:b4:6d:af:66:84:57:37:
79:9a:14:b0:e2:b0:41:57:61:9a:20:d7:23:e3:fa:
97:9f:06:ad:86:5d:ad:8d:4e:eb:1c:f0:47:06:a9:
66:21:cb:8a:cb:fe:17:0a:b4:ee:df:0c:d1:f0:e7:
47:52:93:3c:05:42:c5:a1:41:cb:2f:da:c5:55:21:
a6:a5:39:45:96:06:0c:a1:c2:18:3a:85:ed:1a:2f:
b1:39:5c:ef:b5:3f:d2:0c:d6:0f:0a:df:0f:aa:d4:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:0A:DD:47:E5:25:F2:28:34:24:C8:FC:D1:21:E5:09:50:D1:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/33d1557d-7f1f-38a3-bf95-a3dde1185b9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:6e:06:1f:33:30:97:fc:24:4e:5e:e3:65:ca:93:f2:9f:f1:
c0:28:aa:d4:14:8f:ba:a9:bc:6b:9a:da:7d:ea:cb:ca:f9:6c:
4c:5f:31:7c:30:b9:0a:16:fa:31:11:3c:51:60:e4:5a:ed:00:
d5:19:c6:bf:7c:6b:cb:27:e9:f2:af:b9:05:6a:d9:86:b9:f0:
7d:c7:af:40:b9:65:8a:68:6c:52:e5:42:c8:19:de:63:24:cd:
da:df:c1:3e:61:46:ab:b7:d6:56:d6:75:af:ba:62:c4:92:f8:
92:3b:54:82:94:31:39:99:1e:9f:e3:a4:e8:f5:e0:ef:9e:89:
1a:3a:25:c4:dd:30:ac:19:05:09:40:5f:99:30:95:35:af:ab:
9b:fa:47:a0:22:f2:fb:75:6b:ed:dc:77:5b:6e:d4:43:b7:97:
5d:e2:33:15:71:4d:b8:4e:04:5f:fc:fa:85:dc:fa:04:eb:3c:
c9:a3:7d:51:07:a3:db:d2:be:34:c2:00:f7:ba:6d:a3:d1:48:
2b:54:da:60:fe:77:ef:27:ee:00:e6:77:ff:da:bf:4a:13:1b:
14:6c:94:2f:12:98:ad:7f:11:2f:41:0e:59:8b:a3:fd:8a:e9:
47:4c:27:41:09:4a:a2:29:3a:25:a7:1f:22:8b:fb:8b:82:7f:
92:15:ce:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:55 2025 by rpki-client