Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3549f400-409d-3889-9ae4-989c88d9cc29.roa
File: 3549f400-409d-3889-9ae4-989c88d9cc29.roa (raw, json)
Hash identifier: IQFmge3AikyCW380DMj9lTUo19B7kqQlOUmi2ogxnTI=
Subject key identifier: 23:A3:F6:B3:75:AA:46:F1:FD:7F:51:15:69:44:9E:79:E7:09:05:00
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858407DB3C51839AC4E61B30EED80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3549f400-409d-3889-9ae4-989c88d9cc29.roa
Signing time: Fri 06 Jan 2023 12:00:00 +0000
ROA not before: Fri 06 Jan 2023 12:00:00 +0000
ROA not after: Sat 11 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.30.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7d:b3:c5:18:39:ac:4e:61:b3:0e:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 6 12:00:00 2023 GMT
Not After : Feb 11 05:00:00 2023 GMT
Subject: CN=5d898377-39d4-465a-9f7c-48d89281f368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:d2:8e:26:53:91:27:12:be:af:86:0b:05:
27:d0:82:29:7e:95:12:03:32:ee:d1:6e:1c:92:91:
fe:b7:81:9a:7d:5a:92:74:78:a6:ee:18:b6:ea:87:
39:68:94:e8:f2:e3:ce:74:16:49:ba:cd:2a:c1:fe:
2f:72:3b:66:96:dd:09:25:37:29:80:0d:34:27:2e:
4a:e6:f3:5e:10:70:b5:f0:9f:ca:66:5d:e1:52:2c:
49:bf:6c:f1:1b:e2:da:cd:8f:83:59:f5:50:08:5b:
33:60:a9:e2:de:e4:2d:a1:aa:f2:41:05:8a:12:b5:
65:e8:1f:73:6c:fd:ac:83:a7:8c:d0:51:61:88:e5:
27:b3:27:97:1a:fa:1e:c6:6f:91:00:26:5a:c9:5a:
a7:b5:85:ba:07:0a:b6:be:9b:1d:e9:10:f2:b9:ca:
92:d4:fd:13:8e:e8:e0:18:df:c4:d3:ab:fd:e5:53:
9a:bf:72:e1:63:43:85:e4:dd:f6:c0:b1:f0:ab:cf:
3c:27:90:9b:e4:b6:d3:c5:45:7c:13:df:ac:6d:c0:
b3:75:aa:8e:58:34:28:3f:96:13:2f:1b:e3:1e:d3:
91:7c:d2:a1:7a:48:69:c3:50:55:13:3c:40:45:9e:
fe:8b:bb:bb:8b:46:54:d7:6c:cc:f3:be:00:f8:5e:
17:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A3:F6:B3:75:AA:46:F1:FD:7F:51:15:69:44:9E:79:E7:09:05:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3549f400-409d-3889-9ae4-989c88d9cc29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.30.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:8d:e4:cb:74:ed:1b:a7:0a:12:6f:b4:8d:62:fa:89:ac:70:
9b:c6:14:72:22:b7:53:5d:76:8c:16:46:a7:5f:e7:8b:54:be:
29:ff:a0:f8:ea:d4:2f:8c:4d:fb:db:7f:41:8f:2c:54:89:4a:
92:f0:a4:62:04:58:42:a6:2e:e0:c3:90:30:99:9d:78:c7:a5:
ae:ed:3d:06:80:81:fd:98:78:69:a1:5c:bb:3c:29:00:da:26:
3e:df:22:51:5e:3d:10:bc:52:31:e4:1f:d9:5b:40:8c:bf:6f:
27:e1:21:03:a7:ea:51:03:58:64:64:45:3a:e1:e0:f1:d1:25:
a2:76:f2:f7:c4:61:a3:66:f0:7d:34:6b:5b:a8:04:3b:c3:da:
73:6d:db:c5:23:9c:be:68:63:21:ff:c4:af:ce:fb:c4:e5:66:
15:b9:0f:52:ee:e2:17:af:37:1d:db:61:5b:5d:05:a9:17:08:
ac:7b:d6:ba:52:d9:2e:ca:5f:85:a4:e4:06:1e:1b:ac:d5:50:
3d:12:ac:fd:48:06:89:6d:5b:65:f4:1f:3f:bf:30:c9:21:ec:
e7:19:ff:82:0f:b2:6d:18:7c:c1:f0:db:cc:d1:f6:44:b1:b4:
80:d6:25:82:34:36:ee:93:bb:6d:9a:98:69:50:9b:79:e9:ff:
04:21:40:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:12 2025 by rpki-client