Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3437ae0b-f5ea-3744-ae15-83a50214af4d.roa
File: 3437ae0b-f5ea-3744-ae15-83a50214af4d.roa (raw, json)
Hash identifier: Px83qaDeQvvVZSf5IiUteJ6t0SvCf8DQ3qIwDy3BPjM=
Subject key identifier: 66:DD:DA:C4:33:0D:73:AF:FA:B8:B9:6F:FF:54:C3:6E:EA:24:5E:7C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D2F5F368F42ABA1E635070B80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3437ae0b-f5ea-3744-ae15-83a50214af4d.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:5f:36:8f:42:ab:a1:e6:35:07:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=2d07d66e-2c49-4714-84ba-67c0a9a6119d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:a4:62:4e:73:fc:23:7a:c2:45:b7:9e:1e:
4f:d8:7a:28:3e:eb:5e:8e:a8:db:56:60:51:96:64:
65:7c:89:c5:45:4c:a8:2d:10:6f:2b:0e:8b:15:4d:
89:9e:4a:b1:a7:6a:6d:f2:b3:8e:c6:1b:7e:12:ef:
a0:cf:64:dd:c7:90:54:f0:6b:13:d7:c6:e2:4e:f9:
7d:4d:9f:b1:29:0c:92:8b:3c:6e:f4:33:40:1c:2c:
a2:54:21:03:7d:b6:9f:5c:1a:d0:d6:d4:f0:71:6b:
3c:f6:fe:ab:fa:b2:0f:ab:de:ad:ca:6d:2e:b1:60:
24:00:35:94:c7:42:a6:62:20:58:03:eb:96:d3:d0:
5e:d6:51:53:55:ae:51:f1:ac:cb:6d:4d:14:d8:44:
90:c7:61:bb:bf:86:bf:a2:54:f0:39:7a:d1:38:01:
12:db:74:62:db:f7:e6:35:58:a9:18:90:1c:49:d7:
b0:60:33:af:42:f6:10:bd:b7:58:0d:f8:53:88:2c:
5d:a7:41:ec:c3:b7:79:f0:0c:52:a8:bb:40:54:dd:
48:cf:c2:37:97:13:2d:fa:31:bd:2b:f0:15:a5:8f:
03:18:f4:9c:ce:71:24:2c:26:a1:24:7c:55:b4:8f:
a7:77:f1:ea:42:9a:68:3d:fb:92:11:bc:a4:49:02:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DD:DA:C4:33:0D:73:AF:FA:B8:B9:6F:FF:54:C3:6E:EA:24:5E:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3437ae0b-f5ea-3744-ae15-83a50214af4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:a1:c1:8d:a6:c0:bb:51:8d:aa:11:be:2f:2f:36:cb:e9:04:
90:4c:2d:d8:2c:8e:b6:68:a6:1c:10:cb:c8:d2:e0:ee:25:a1:
f3:00:1e:fb:2d:78:78:3e:ae:98:b1:fc:16:86:6f:e4:bb:aa:
24:90:a4:bb:3a:86:cf:60:ce:75:29:9b:eb:8b:46:45:21:8f:
85:30:e7:4d:5d:64:fb:f5:86:08:1b:03:66:2f:77:f6:65:d4:
54:d7:f5:39:c0:b6:73:2a:82:e4:2d:cd:7c:ca:67:56:17:31:
1a:65:23:10:39:a7:4e:40:73:93:cc:89:b6:e0:d3:c7:8e:6d:
a6:db:0f:0f:50:ca:f1:31:af:ae:e7:53:fb:73:96:bb:29:97:
18:e3:d5:c0:c8:65:ff:3a:4e:5c:82:e6:88:a8:4b:73:fb:9b:
dd:79:a5:2d:55:20:98:c1:88:e5:3c:1d:2c:77:f8:a7:fc:1e:
12:a1:e7:0c:61:e1:e9:53:f3:6c:26:73:36:2a:5c:ec:82:80:
65:f9:39:13:28:83:2d:fe:b7:47:98:e6:c7:03:6f:b2:b6:b6:
44:2d:0a:8f:99:be:26:20:79:63:50:e3:c6:94:74:0c:2b:d4:
cd:eb:11:cd:e6:94:78:f5:c2:bc:3f:e2:4f:e1:94:93:32:cf:
e9:a2:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:33 2025 by rpki-client