Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4170af37-5dd7-3ce7-bd07-c92196387192.roa
File: 4170af37-5dd7-3ce7-bd07-c92196387192.roa (raw, json)
Hash identifier: D0c4yS50+AV5WqxwvT99eG3Jh62TGu8/1lCudabYRDA=
Subject key identifier: FD:69:20:A8:F6:90:C6:17:EE:8A:53:65:04:6D:B2:5A:07:6B:38:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D806B614EE68F7617F16D41C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4170af37-5dd7-3ce7-bd07-c92196387192.roa
Signing time: Fri 08 Apr 2022 04:00:00 +0000
ROA not before: Fri 08 Apr 2022 04:00:00 +0000
ROA not after: Fri 13 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.168.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:80:6b:61:4e:e6:8f:76:17:f1:6d:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Apr 8 04:00:00 2022 GMT
Not After : May 13 04:00:00 2022 GMT
Subject: CN=865c838a-4cda-4e39-af16-3213973a7e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:29:e9:77:61:cb:1a:bd:8a:5c:64:e8:a6:27:
79:3a:d1:91:88:e3:a3:ce:d9:6d:07:4a:2b:4b:c9:
ce:8d:9a:27:38:95:23:9d:d0:bf:25:cd:61:ff:5c:
09:59:2d:d1:28:07:f0:9b:78:9c:9c:ff:a5:9a:ac:
2b:1d:2c:10:02:6c:08:ff:b0:2f:d7:30:6d:89:9d:
7f:af:5e:da:f4:b9:05:11:3f:ae:b1:7a:25:c6:55:
e6:6c:27:96:34:5c:53:52:6d:cd:0f:da:7a:14:a7:
75:d7:5a:30:cd:81:86:ad:41:f6:9e:dd:56:77:3c:
d9:30:a5:6b:80:6f:e6:e6:f3:6e:7f:d8:43:cb:4b:
e7:c2:b5:41:cf:eb:71:b2:2d:00:11:f2:df:87:a9:
8b:fe:e7:c9:69:cc:06:f2:45:fa:70:30:0a:cc:76:
9a:91:ce:2e:1b:1e:e6:6e:aa:c8:e4:d3:a2:f7:02:
74:86:61:b2:83:a5:40:74:47:8f:89:b3:8c:84:18:
d5:07:9e:39:59:da:64:f3:9d:5f:c0:90:48:89:2e:
2b:10:37:89:d5:90:c1:43:85:94:cc:60:c1:00:8f:
27:a7:f8:bf:b7:fc:0d:6a:71:b8:4f:c8:f1:2d:96:
a0:42:77:88:22:b5:9b:a0:5d:48:3a:8e:0f:ba:9b:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:69:20:A8:F6:90:C6:17:EE:8A:53:65:04:6D:B2:5A:07:6B:38:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4170af37-5dd7-3ce7-bd07-c92196387192.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.168.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:47:d6:02:d6:8d:b8:da:31:c6:e7:cf:d8:14:3c:7c:0d:53:
25:b9:6f:47:da:cc:5c:33:86:70:e5:6d:bf:a6:7d:fe:9c:5f:
22:83:58:1e:87:1e:c2:b2:2a:db:c6:6d:d4:b6:76:c5:b8:db:
cb:e1:59:16:c2:7f:fe:c7:40:fc:ab:4c:7c:d1:d2:bc:73:fb:
4b:88:23:94:54:f3:f5:a6:19:eb:03:e0:10:20:75:7b:a2:44:
de:c5:2c:90:89:19:db:e6:50:cc:0f:be:67:3a:5c:54:8b:ef:
a5:22:c9:d0:d1:30:be:a6:8d:58:b8:9b:a5:ce:a7:ee:8a:24:
0a:ed:9d:35:44:0e:10:9c:23:7a:af:79:5c:d4:4b:65:9b:7c:
91:66:1d:f9:ab:a9:9c:09:9e:d7:c4:c4:e8:b6:c2:0d:ef:6f:
be:fb:d3:87:07:79:30:26:b2:ef:7f:c3:37:a3:18:8a:65:d0:
95:ae:40:3a:f5:90:65:e9:d6:a7:09:0d:8f:58:23:6a:56:c1:
22:38:7b:29:cd:bd:a5:c0:00:99:f4:f4:57:3c:f8:cb:fe:d3:
1f:33:f7:23:13:df:08:82:65:42:90:38:d6:61:2d:b7:1c:63:
82:e8:db:a0:8d:9c:9e:a8:5c:cc:78:cd:4b:59:79:2c:0d:5c:
42:af:7b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:26 2025 by rpki-client