Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42b2de0e-f9ee-3a2a-81de-e2a412388e9f.roa
File: 42b2de0e-f9ee-3a2a-81de-e2a412388e9f.roa (raw, json)
Hash identifier: loirndWc99cjtD6PYXroXCUdn54aKfGgXm0X9XGkxpY=
Subject key identifier: 0B:03:A0:D7:1E:37:03:81:8B:CC:A2:B0:80:EA:4B:77:F7:AF:B3:E4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583DF3A29C5606695ACB81BE8C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42b2de0e-f9ee-3a2a-81de-e2a412388e9f.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.148.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f3:a2:9c:56:06:69:5a:cb:81:be:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=4c8f1c02-167b-427f-92b3-615e15a0d5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c2:5a:b3:55:c8:d4:c8:9e:3e:15:2c:7e:01:
92:f9:e7:53:69:3a:55:c7:fd:cd:22:40:dd:da:a6:
f6:8d:ce:21:a3:a7:59:3d:cd:ef:57:a9:fb:ff:50:
b7:bb:dd:99:e6:74:a7:96:b2:2f:42:06:84:e4:f6:
a2:e1:ae:10:b6:f7:a7:4e:a9:30:38:07:43:e2:fd:
b6:02:c8:2d:65:1b:d8:78:14:d4:fb:64:39:8f:83:
14:e1:26:24:f4:ce:09:6e:c5:7d:23:2a:08:fc:bd:
4b:e8:8e:ec:3c:88:fa:be:87:7c:07:24:80:d5:a5:
95:c2:f4:11:6b:c8:ec:62:0a:56:71:f9:23:9f:6e:
cf:90:52:4f:20:1e:b8:c5:6a:c2:03:63:87:e1:76:
53:d0:21:8b:1b:45:d4:1c:78:1c:d4:04:0c:f7:78:
aa:56:24:63:69:d9:75:eb:fc:f0:2b:78:de:5d:24:
27:25:3f:a4:ca:ce:20:6b:0f:15:5c:38:e0:25:bd:
73:66:b8:b8:68:e6:6f:ca:44:fb:42:09:63:09:01:
ee:04:58:80:58:c2:6d:d3:cb:a8:50:96:c3:53:ae:
bc:a9:d4:43:39:65:01:16:99:8c:f6:bc:83:ac:f6:
4d:87:42:01:1f:b3:3f:ce:85:49:b5:89:c5:c6:7b:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:03:A0:D7:1E:37:03:81:8B:CC:A2:B0:80:EA:4B:77:F7:AF:B3:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42b2de0e-f9ee-3a2a-81de-e2a412388e9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.148.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:c6:6d:b0:13:ac:8b:86:73:c8:4c:e0:0e:7e:60:7d:b5:ba:
33:24:1c:d3:a0:08:98:b6:67:1d:0a:2f:84:87:d8:96:11:93:
bf:fe:37:fe:05:db:f3:50:c9:96:45:b9:7a:4b:51:b1:75:1e:
1e:78:76:40:48:09:1b:f3:2c:58:3d:08:7f:f1:42:8a:72:42:
12:f4:9e:77:78:17:fd:2d:69:d9:c8:ab:ee:cf:08:71:f1:ca:
26:dc:aa:ca:6b:dc:55:dc:c2:da:60:fd:ae:b9:0d:42:9a:6f:
1c:e0:ac:d6:7e:87:11:2d:e3:f6:f6:35:2e:3a:5f:7e:51:03:
db:3d:a1:88:17:cf:30:4a:d7:23:08:e0:2b:70:07:73:20:68:
76:00:c4:78:be:ec:8f:e8:30:15:ce:c1:d9:27:66:64:10:cf:
9c:87:7e:05:09:e0:0c:ef:f6:56:46:b4:16:47:01:5d:e7:c4:
03:62:24:1d:1b:fc:2d:41:45:9e:e5:42:31:b6:4a:4f:ef:12:
04:a0:4e:c8:63:0b:f5:6c:94:87:4a:91:68:c9:0c:59:e5:57:
46:3e:49:d2:d4:e2:4f:a2:be:c7:c5:40:d4:88:b4:b6:bf:ad:
da:18:2c:33:4b:88:07:ba:23:5d:c6:03:db:24:18:fd:9c:f7:
d5:76:3d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:33 2025 by rpki-client