Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3da42fa3-5609-3559-974f-9c5badf229ee.roa
File: 3da42fa3-5609-3559-974f-9c5badf229ee.roa (raw, json)
Hash identifier: QBATwe+kAeJDDTr9H27Y/Jow8CnDEvO3Pxpp18Jwvi8=
Subject key identifier: E0:AC:0C:06:B1:50:D9:C5:68:EA:61:52:B0:5E:BB:6B:6C:85:F9:C0
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF8EB9A0A3EC4EDBDFC5CB700
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3da42fa3-5609-3559-974f-9c5badf229ee.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.162.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:eb:9a:0a:3e:c4:ed:bd:fc:5c:b7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=8c556f9f-0532-424b-ac5b-952a51ebe250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:20:00:6f:c6:6f:70:d5:78:27:0e:73:d1:
17:d6:07:02:22:72:4f:e0:0c:c5:9b:27:e0:bf:8d:
16:20:dd:3a:f7:39:79:a8:a2:9e:de:e5:6b:19:be:
73:8a:05:ab:83:c8:7e:8a:4a:10:fc:a1:99:2d:b6:
6e:c1:1c:73:a9:f3:82:74:88:1f:be:5d:10:dc:6b:
e9:ad:ef:95:a3:b4:19:c6:7f:19:ff:d9:60:d7:24:
02:97:7a:de:08:ce:20:8e:38:ac:a5:1d:55:58:5e:
45:a2:d9:36:1c:60:01:bb:cf:65:40:5b:d2:6d:5b:
06:f9:05:bd:b7:2a:bf:ec:75:c1:f5:eb:ce:49:26:
72:f0:ea:9c:5c:a2:c8:cb:8a:8a:6a:5f:59:13:7f:
3c:32:34:8f:ea:98:11:16:af:40:49:39:2f:9d:46:
08:a1:54:69:0a:5c:f0:25:d2:0d:ee:93:aa:ec:11:
b1:d2:7b:55:76:aa:60:0a:e5:45:51:16:42:a2:6f:
eb:36:a6:8e:18:fa:d9:07:d6:36:50:f4:a3:e4:94:
e0:08:fa:e3:04:70:08:ba:09:c5:17:2f:fd:49:0f:
03:fa:c8:47:65:6c:0b:9a:54:e1:c1:9d:27:eb:19:
02:5d:71:33:e8:27:36:14:2f:7a:23:d8:18:8e:cc:
ff:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AC:0C:06:B1:50:D9:C5:68:EA:61:52:B0:5E:BB:6B:6C:85:F9:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/3da42fa3-5609-3559-974f-9c5badf229ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.162.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:97:1c:08:de:21:d3:74:ad:5c:46:11:24:be:79:17:15:5e:
6b:28:d2:56:4b:ab:60:57:5a:3b:c5:d9:94:aa:6b:17:68:5f:
65:1d:95:3f:58:c0:1a:ce:6a:e9:7c:71:25:40:16:73:50:e0:
a9:38:0c:81:01:66:27:4d:ff:eb:59:d7:84:52:14:96:57:c9:
40:b4:38:c5:57:35:10:0f:84:15:15:9b:6f:69:c2:44:54:f9:
d7:bb:71:61:c1:70:26:17:20:35:2d:22:a8:ed:d0:c0:17:d4:
41:95:01:3d:a6:0a:43:d3:70:86:4b:ba:18:6e:55:b1:cc:b2:
9b:28:75:99:7c:a8:42:72:26:07:db:0b:6d:25:e9:3e:b1:f8:
49:3d:af:df:80:5d:bf:74:ff:11:a9:e8:7e:8c:b8:eb:10:6c:
84:7a:dc:ad:90:28:94:00:a7:01:d3:e5:fa:4b:ce:31:15:87:
dd:8d:5e:06:37:cc:6f:39:cc:08:77:93:17:a2:9f:70:b7:06:
01:ed:b0:41:1e:89:ad:3e:6d:15:dc:57:a2:84:b0:4c:5b:c9:
50:19:8d:02:69:3f:19:b7:5a:dd:f9:e6:b4:7e:af:94:1f:a4:
78:e8:c2:95:96:e0:0a:d5:78:be:f8:46:3f:29:0e:7a:b4:99:
30:60:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:26:01 2025 by rpki-client