Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36ad06a7-e251-3882-8080-1bf8dc0f4b43.roa
File: 36ad06a7-e251-3882-8080-1bf8dc0f4b43.roa (raw, json)
Hash identifier: vLUqzwMMlRXqXCy73TIJWJS6s8tCM8MwrZcEWuIGGH8=
Subject key identifier: C3:E1:DE:28:2D:2E:55:A7:07:AA:5D:F9:D6:73:64:20:A3:1C:72:48
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F560326E614D628261825C740
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36ad06a7-e251-3882-8080-1bf8dc0f4b43.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:56:03:26:e6:14:d6:28:26:18:25:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=e047dde7-fdd8-4d03-a17d-46095c7d484f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:64:b6:80:da:02:1c:3a:e6:0d:96:3a:fc:
8b:7a:e2:fa:d6:78:fa:f5:40:1c:a2:5c:b5:7e:38:
c1:8e:f6:77:92:a5:6e:4d:85:9c:14:42:1d:00:37:
9a:96:7e:e0:d1:e3:5c:ea:22:bc:22:0c:20:be:e0:
9a:55:53:a2:fb:ba:b9:77:b2:c3:ca:04:16:c9:0f:
e8:32:09:6c:78:e3:6f:fb:62:3f:a8:ae:fa:2b:0c:
f3:79:1d:45:a5:e3:12:1d:ec:9e:2b:0f:29:61:01:
e0:cb:35:27:4f:37:af:5b:9a:ef:c2:17:30:b9:84:
50:e1:63:82:20:1b:9f:a9:12:d1:2e:8b:8a:7b:89:
11:6b:0d:7d:46:db:57:a4:95:c3:95:72:80:10:a8:
e1:dc:89:c2:b0:29:ab:cb:93:5d:a3:ea:01:74:69:
15:81:1d:91:58:f4:2a:74:79:33:ad:77:8b:e8:5a:
5b:ab:25:53:90:7a:1a:29:31:c2:71:a4:82:a2:ab:
76:6a:09:a7:d9:04:4a:3c:8c:61:62:45:3f:76:d9:
9c:3f:63:a7:68:f8:cc:51:4c:eb:f7:e5:57:54:24:
b6:f8:81:6c:4d:80:c1:cc:25:5f:42:a2:80:e0:65:
a4:9b:65:3f:98:2d:0f:ba:01:99:3e:3b:2e:e2:4b:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E1:DE:28:2D:2E:55:A7:07:AA:5D:F9:D6:73:64:20:A3:1C:72:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/36ad06a7-e251-3882-8080-1bf8dc0f4b43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:3c:38:90:fa:69:04:53:59:2c:de:84:b8:e7:0f:26:8f:6c:
65:0d:4a:99:38:53:04:8d:03:e9:66:24:e7:c1:a7:8b:13:0d:
fb:22:c1:b9:30:c5:e0:b3:5c:56:d9:bb:81:18:39:77:f2:96:
79:25:c6:5e:83:f0:9e:1c:e9:3d:57:5f:06:35:e1:58:cd:7b:
14:5c:bb:0c:1f:83:81:3d:09:11:62:bc:b2:ca:87:10:52:de:
21:cf:31:ab:63:62:c5:5a:1f:f5:6e:e3:3a:39:6f:ab:25:d5:
0d:eb:e5:6c:41:29:14:52:89:9d:ed:dd:39:93:b2:fb:f0:25:
fd:90:3e:c2:e8:5d:49:2c:2b:ff:a8:92:b1:d7:46:d9:ee:4d:
d8:29:6f:5f:45:81:8a:e7:b8:9e:07:c0:9e:47:45:be:58:ea:
bc:5d:93:53:56:ac:cd:1f:b0:d8:1e:ef:b7:5e:4b:92:d6:eb:
14:e7:26:4c:bb:10:6b:07:b7:ac:5a:78:6b:83:72:61:ef:b1:
37:22:53:d6:5e:ae:c7:4c:a0:f1:bd:8d:26:4f:9d:f6:38:e3:
99:54:be:d5:18:4d:8e:1a:e0:67:ee:6b:1b:31:0d:c9:89:ce:
4c:8e:f7:e7:fc:cc:e2:46:f7:ba:8d:bc:96:61:8e:1a:f9:b2:
e4:be:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:08 2025 by rpki-client