Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42ec5109-23aa-34bf-af7d-229493ef84af.roa
File: 42ec5109-23aa-34bf-af7d-229493ef84af.roa (raw, json)
Hash identifier: qx/oWSU5OZazlHsJshEzUIrTq1hlpyfwWNHDKuxwLLg=
Subject key identifier: 3E:E9:3A:0B:C1:3F:74:9B:C0:29:C7:1D:D1:6A:4C:4D:88:66:76:CC
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D55E740EEC586E0BBAB40CA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42ec5109-23aa-34bf-af7d-229493ef84af.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 27 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:e7:40:ee:c5:86:e0:bb:ab:40:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Apr 27 04:00:00 2022 GMT
Subject: CN=a06b3441-6711-4010-b33b-7b61e63cab0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:78:29:91:34:65:e9:c8:ae:ea:a2:cb:ab:89:
b3:16:b3:c2:56:5c:79:aa:7c:86:1d:37:78:18:cd:
05:47:5b:16:9d:c0:92:ff:94:20:08:72:82:65:c0:
34:54:3e:9f:74:03:8f:ac:40:8a:33:4e:d2:7c:b9:
71:7d:60:26:1e:6c:83:90:64:db:4f:c1:b3:b7:a4:
fe:77:14:16:9d:d5:16:d1:1e:23:7b:40:06:6f:40:
07:d8:4a:2f:94:85:be:02:4f:1d:57:98:46:ac:88:
36:83:ae:a6:25:55:3a:92:ac:4c:5e:b9:57:84:bf:
70:6f:cc:e4:7d:16:94:64:0e:4f:1e:e6:8b:aa:c6:
3a:7f:19:c8:0c:71:d3:7f:12:4a:00:ce:e8:50:6f:
f6:71:5d:ba:c2:3a:66:b6:83:a7:e2:e8:4e:1f:d1:
78:5c:2d:f1:7e:d4:a7:1b:93:56:b9:2e:f4:06:13:
f6:85:4f:3d:c3:7a:17:86:e6:b9:c9:c7:bb:ff:eb:
40:c3:15:67:24:fa:83:07:c3:24:86:49:a0:69:10:
2f:f7:d5:6e:00:82:7f:88:b9:c3:a4:7c:d5:01:a5:
b3:fb:f2:24:71:1a:ad:22:0b:17:43:f8:3c:19:15:
84:17:9b:c8:68:18:cb:10:9f:78:65:f0:35:25:52:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E9:3A:0B:C1:3F:74:9B:C0:29:C7:1D:D1:6A:4C:4D:88:66:76:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/42ec5109-23aa-34bf-af7d-229493ef84af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.156.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:bf:c6:78:14:ef:95:1b:bd:00:10:ef:43:a3:d8:02:58:d2:
fe:a8:bb:1b:dc:b3:80:c4:c0:43:28:63:dc:52:99:ff:ab:86:
a2:84:74:3a:ec:70:47:11:5a:60:c8:75:93:02:7b:06:04:8d:
b9:51:d6:92:29:2d:bb:ad:50:fe:7e:8e:4b:9e:57:2f:82:4b:
d3:bf:8f:26:58:36:2e:3a:e2:d2:42:8c:2a:79:e5:4e:b0:ef:
f5:7d:78:c9:e3:d1:2e:c9:41:f7:76:09:6a:e5:98:5b:a3:1f:
4e:94:95:d3:3d:9c:41:08:2c:87:9f:84:d1:db:8e:4b:5a:89:
4b:71:06:2f:de:8f:5f:6c:3d:45:10:82:19:26:8d:99:a9:80:
dc:28:7d:0a:43:65:f5:66:79:21:55:ec:20:c6:74:2d:40:c0:
58:da:90:9e:03:6c:d6:00:e7:b6:2d:78:8a:a5:d2:75:63:56:
4c:b9:23:72:cd:1d:f3:2a:63:a8:6d:45:17:06:11:d9:bd:3e:
2e:ac:cf:db:55:4f:76:8c:c0:df:72:38:2f:3c:cc:41:16:2f:
15:99:68:ca:94:ed:d3:99:f7:43:02:7f:85:ee:12:e1:9c:1d:
50:af:d8:14:89:d8:34:fa:15:72:8c:83:66:ee:a9:3c:46:f7:
89:78:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:00 2025 by rpki-client