Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a15c743-5568-3e61-b7da-dc8739e76abc.roa
File: 3a15c743-5568-3e61-b7da-dc8739e76abc.roa (raw, json)
Hash identifier: u332PYCn+KPsrdQsWmwCU51ROiR8QvgWy+hlkJ6PFIU=
Subject key identifier: 47:75:9E:9E:69:0E:69:AA:EA:02:F7:CD:F9:EF:39:A7:01:A7:A9:3F
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF3A2A2753A0510F72550D380
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a15c743-5568-3e61-b7da-dc8739e76abc.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.148.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f3:a2:a2:75:3a:05:10:f7:25:50:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=e9607b8a-6a55-46d0-9036-22b470d85eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:8a:3b:7d:4f:43:2a:5e:83:8e:65:cd:96:
d2:d6:3e:37:e9:d0:3e:fe:04:c1:5b:dc:bb:56:49:
3a:1f:44:31:05:94:50:16:a5:3e:5e:be:a7:22:7b:
71:7d:f6:94:65:a4:22:93:a8:a3:7d:7c:6c:e5:a2:
2a:6c:87:27:ae:49:fb:42:b1:be:e9:95:b3:27:93:
4e:ad:83:e4:d9:12:c9:d8:7d:15:bf:04:fc:6c:bd:
16:97:1a:f4:c9:38:1b:10:05:fe:25:96:1a:e2:a6:
31:c3:c5:0c:8e:02:36:6e:a6:92:42:97:77:d5:25:
f3:8e:34:af:db:05:99:c8:90:ab:dd:20:a6:aa:95:
ca:2a:34:c7:8f:67:b6:d0:17:45:3f:66:81:71:d7:
6f:4d:a4:00:ea:9b:a6:24:11:8f:74:b1:79:37:ea:
89:e4:50:2e:2a:be:78:50:43:ae:77:f6:46:38:54:
82:7c:67:d5:cc:ba:ee:4d:fc:80:40:f8:9b:fe:ee:
57:ff:8e:b7:3b:9d:c1:21:ff:34:98:86:8b:a6:d8:
e2:50:90:69:59:bd:2c:ed:33:8d:f5:e4:df:55:34:
7f:b6:0c:60:fe:36:0f:15:90:b4:c6:c8:1a:a7:e0:
ef:2c:db:aa:f1:58:3b:ab:a3:64:e7:70:36:8c:b9:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:75:9E:9E:69:0E:69:AA:EA:02:F7:CD:F9:EF:39:A7:01:A7:A9:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3a15c743-5568-3e61-b7da-dc8739e76abc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.148.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:29:72:13:ba:4a:8b:2d:aa:fc:b0:63:fe:2e:6d:12:7c:59:
4c:41:da:93:cb:a2:ec:49:d9:0a:fc:62:cf:6a:6c:8c:fc:6a:
a2:bf:12:45:e0:c6:f7:8c:5a:ae:fb:f6:fc:60:72:d2:e8:5f:
13:49:52:b4:2c:53:7d:db:81:c0:81:9b:3c:32:da:a6:4c:bf:
8e:81:ad:61:e6:b7:bd:f2:23:4d:41:ad:d0:2c:67:be:35:ca:
e4:59:7a:76:78:28:3c:b9:cf:42:1f:f7:05:42:6f:ae:bb:19:
50:1f:8c:60:1c:a8:47:b4:29:d7:dd:eb:71:e1:da:a3:17:c9:
e4:9a:c6:b5:04:da:9b:cd:88:77:42:6a:02:a0:c0:6c:95:88:
f1:d9:24:65:fe:a3:2a:8c:f8:6b:5e:0e:54:bb:1c:39:7b:f3:
66:82:0d:be:27:e7:20:0b:86:00:5d:44:06:01:23:ab:5e:29:
b1:46:62:ba:fe:82:ef:f4:ff:8b:a5:d2:19:80:45:b8:c6:f5:
24:3c:9b:50:8c:5b:55:68:a2:9f:70:71:ea:1b:43:b2:80:1a:
44:7a:64:ba:1c:ff:61:b2:03:75:31:ac:4e:f5:bc:26:2d:4d:
73:9c:be:41:5c:11:9c:59:9e:f1:e3:25:db:b1:91:85:80:17:
7c:64:66:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:31 2025 by rpki-client