Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42b916ff-d379-34bb-8f08-73d2d926609d.roa
File: 42b916ff-d379-34bb-8f08-73d2d926609d.roa (raw, json)
Hash identifier: dzvMivazOqImAsOwpnGyddV7i21C9SSuv8oPYbx4gFY=
Subject key identifier: F8:78:A2:63:F1:0E:6F:E5:24:FC:98:E8:A7:EE:08:16:31:CA:45:D3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D1921000AA200BB26E7C7900
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42b916ff-d379-34bb-8f08-73d2d926609d.roa
Signing time: Sun 05 Feb 2023 12:00:00 +0000
ROA not before: Sun 05 Feb 2023 12:00:00 +0000
ROA not after: Mon 13 Mar 2023 04:00:00 +0000
asID: 14618
IP address blocks: 16.156.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d1:92:10:00:aa:20:0b:b2:6e:7c:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 5 12:00:00 2023 GMT
Not After : Mar 13 04:00:00 2023 GMT
Subject: CN=96e34896-d941-4bd2-97bb-4bd7792e6bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c1:f9:2f:fc:51:48:ba:0a:8a:46:1d:29:89:
da:33:3c:b2:50:cb:94:b3:d0:1b:2c:69:50:80:05:
bb:33:8e:ad:eb:c1:af:b2:7e:ea:91:29:c9:33:45:
11:60:59:d7:6f:c3:67:33:da:26:85:57:60:6d:f3:
7b:02:51:1d:49:b5:d3:f4:12:e5:1a:76:a5:41:d0:
69:6d:64:2e:66:76:30:36:a7:f0:5e:40:64:e3:a1:
f3:0c:a1:98:9e:a5:db:39:e1:63:2f:af:40:67:55:
ef:35:96:bd:99:24:cf:68:22:ce:15:87:2f:fd:ef:
e9:61:52:18:67:3e:7e:0c:ba:ef:e9:ad:5c:fd:b3:
7c:1f:9b:02:d1:3e:ad:49:c0:0c:54:c1:14:56:f2:
e2:c9:4c:be:40:d5:ef:6e:53:34:e4:09:99:36:dd:
dc:a4:e0:14:b1:b1:a3:eb:a1:89:18:f2:aa:26:ab:
66:71:02:d7:de:22:16:a9:a0:13:34:bf:d0:26:12:
fe:ff:c8:9e:54:37:13:a3:b5:01:73:13:5b:1a:29:
70:0d:12:cc:6a:34:f3:95:04:79:d7:d6:04:77:ab:
b1:99:17:2c:61:c4:53:80:f3:23:2a:9b:38:ae:21:
3b:fc:4c:08:b3:88:05:27:95:1e:3c:1d:cd:a9:3e:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:78:A2:63:F1:0E:6F:E5:24:FC:98:E8:A7:EE:08:16:31:CA:45:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42b916ff-d379-34bb-8f08-73d2d926609d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.156.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:73:2a:6d:fd:c2:e4:61:6a:18:9c:fe:72:57:15:64:d3:13:
40:b9:93:38:3d:0a:91:b0:f7:06:37:cf:18:ad:6c:c6:b1:2d:
b5:2a:59:95:cd:fb:2e:2c:80:7e:a3:7d:b3:04:55:ec:b2:19:
78:07:a1:2f:bf:5a:e6:d8:3a:b8:95:10:55:8c:4c:27:26:ad:
63:2f:69:09:7f:a8:2c:b2:88:b7:eb:3e:57:4c:44:66:6f:1c:
0e:ed:89:ba:40:3b:71:a2:6d:b5:0b:5f:79:fd:be:b9:6e:d5:
09:b0:da:0f:82:a9:bd:d1:22:21:6c:4a:c8:06:25:48:34:ca:
b7:bd:b7:94:c8:97:3c:d4:76:29:08:90:83:ae:d3:11:4d:96:
e0:5b:25:9c:32:c6:4e:32:c0:69:d9:72:d1:b2:b9:00:43:15:
e6:54:07:1c:76:7d:0b:ea:42:26:6c:09:bd:e1:d6:df:b5:12:
bb:45:07:3d:39:98:9f:ef:bd:a8:fd:83:55:d0:c5:0c:36:34:
64:0f:7f:f5:8b:2a:12:ef:06:30:ea:06:a5:eb:bd:96:fd:d1:
9a:99:31:bb:6a:cc:b8:93:39:ad:30:27:70:8d:bc:d6:79:1e:
af:87:45:8c:8c:21:3b:25:da:52:12:0d:7b:32:d4:c7:2c:44:
13:ee:80:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:22 2025 by rpki-client