Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41d1108c-b6d9-392a-bad9-b99ef5f5064d.roa
File: 41d1108c-b6d9-392a-bad9-b99ef5f5064d.roa (raw, json)
Hash identifier: I7SZ4nm95itLUcZx/DbCJt+FHRCtoC72cD/Uf0SaC4I=
Subject key identifier: 03:BD:20:76:FD:CB:FA:DE:1D:93:77:11:0C:E7:C0:CB:F9:8B:1C:71
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C92D5583C04662C6204D7D0C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41d1108c-b6d9-392a-bad9-b99ef5f5064d.roa
Signing time: Thu 13 Jan 2022 05:00:00 +0000
ROA not before: Thu 13 Jan 2022 05:00:00 +0000
ROA not after: Thu 17 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.23.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:92:d5:58:3c:04:66:2c:62:04:d7:d0:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 13 05:00:00 2022 GMT
Not After : Feb 17 05:00:00 2022 GMT
Subject: CN=cbb06235-8c5b-4659-bbcb-a682ab8316b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:9a:ef:74:1a:82:6b:e2:67:96:bb:49:68:
65:21:c8:40:41:51:2d:65:c0:49:d7:52:1b:9f:47:
29:19:d7:85:82:f7:a9:a7:1b:67:e6:dd:78:ac:a0:
e5:13:7c:75:ac:d1:35:3a:c2:0b:7a:01:ee:f8:38:
47:8d:e2:44:77:d5:44:86:87:3c:dc:85:71:a7:a7:
4b:80:48:31:cc:b3:23:cf:88:58:c6:c3:b5:9d:eb:
29:e0:8e:1a:b0:3e:2e:ec:ae:0f:75:6c:5b:5d:45:
74:1d:72:91:ed:50:f3:2e:c1:e1:5a:d4:70:aa:4a:
4a:fb:f1:dd:ee:1d:50:67:ae:0b:60:e6:a2:7e:bf:
b5:4d:8c:dc:5b:7f:55:69:70:df:76:1e:dd:a7:84:
11:3c:7e:5c:cb:32:c6:6a:a1:b1:51:06:08:89:ee:
8d:0a:29:0b:70:16:6a:cd:39:85:84:29:a1:9f:aa:
c1:22:00:14:40:ff:61:86:af:d5:00:cb:38:74:fb:
ba:eb:e9:d4:a1:e0:17:41:23:56:e8:3c:e0:1f:08:
03:75:e8:a9:b6:bc:70:6b:5f:6d:26:7b:10:be:64:
89:11:f6:a7:c5:bd:a3:fa:07:8c:de:cd:17:55:d1:
1b:e8:50:db:04:37:47:a0:b6:67:0a:47:e5:d5:aa:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BD:20:76:FD:CB:FA:DE:1D:93:77:11:0C:E7:C0:CB:F9:8B:1C:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/41d1108c-b6d9-392a-bad9-b99ef5f5064d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.23.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:db:1e:87:5c:4a:04:cc:4d:e6:5d:c4:99:d0:0f:71:8e:b8:
37:7a:8f:1f:ed:03:ca:9d:31:5b:48:89:6e:75:e3:e3:de:2f:
bb:16:05:16:0a:0c:1c:aa:8d:c1:70:8f:99:3d:63:2b:4a:b3:
49:6d:a0:de:ad:0d:1d:0b:26:6d:28:e3:63:b8:0a:14:3c:73:
ef:cc:9a:1a:93:14:62:b8:87:ee:07:86:78:72:a2:7b:55:c1:
e5:3a:1a:c7:68:98:54:a1:5e:0b:ca:54:59:3a:a4:72:db:69:
ba:c4:48:a6:d9:ad:4f:4e:af:e4:f2:0b:fd:c8:bc:69:62:07:
8e:56:21:e4:bd:d4:06:75:5a:79:12:b8:e5:98:d2:ea:40:2d:
25:50:10:f4:d5:bc:b4:81:23:36:8e:44:11:39:dd:85:d9:db:
b2:e6:97:ff:e7:26:04:1b:df:d0:a0:16:28:f6:3f:09:84:b2:
ee:dd:19:45:53:d4:ee:7e:64:26:5c:f4:93:f4:f9:b6:dd:c2:
98:15:a0:d3:f4:1b:b7:8f:d8:df:98:07:80:50:b3:1e:63:d7:
4e:38:5f:cd:0c:07:8f:5a:83:70:e3:2f:b5:90:f8:5d:20:c3:
bb:ae:0f:fa:94:36:94:f8:f2:2d:35:ec:82:59:79:09:b8:34:
19:a5:1c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:28 2025 by rpki-client