Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44e2900e-990d-3cfd-a7d2-3c7b9870d66d.roa
File: 44e2900e-990d-3cfd-a7d2-3c7b9870d66d.roa (raw, json)
Hash identifier: MA588dPICYpayTLCNSvMpCvQFatxYvtgU5BSfGPzcuI=
Subject key identifier: CE:38:24:D7:19:65:6F:1A:83:E9:FF:1A:3A:B9:E7:0B:1D:22:08:37
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840CBC12DD09E9663924439B2C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44e2900e-990d-3cfd-a7d2-3c7b9870d66d.roa
Signing time: Fri 03 Feb 2023 12:00:00 +0000
ROA not before: Fri 03 Feb 2023 12:00:00 +0000
ROA not after: Sat 11 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.52.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:cb:c1:2d:d0:9e:96:63:92:44:39:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 3 12:00:00 2023 GMT
Not After : Mar 11 05:00:00 2023 GMT
Subject: CN=4f4a56de-94ec-4bcd-9a2a-43efe2e7bbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:c2:e5:fe:c7:28:65:72:c5:33:88:d9:d2:
7b:d7:76:6b:39:40:23:19:68:ca:07:ca:6a:ff:e3:
a5:3b:d1:06:d1:45:31:86:8d:65:f8:3c:e1:df:61:
ac:22:fe:72:6d:80:6e:a4:98:13:3e:f9:e4:da:83:
e8:1e:0c:3d:df:9d:7f:b4:cd:b7:ba:75:ed:96:1c:
fb:51:eb:3b:53:58:85:ec:e9:9b:43:1e:16:10:4a:
29:72:3c:b1:4b:cb:7d:94:73:3f:17:1b:84:5d:79:
f8:f8:b5:32:f2:2d:9c:b4:40:8a:ae:49:68:e6:1d:
1a:a9:6c:72:96:2a:a5:a2:a1:06:fb:32:78:50:3e:
19:3a:47:be:41:bb:ad:dc:07:4c:40:b9:f1:4c:b4:
f0:34:d7:d5:6a:06:50:cd:2e:5c:bb:76:41:6f:43:
98:3a:cc:7d:03:e0:bd:7a:af:14:90:51:5e:6b:c0:
12:fc:eb:00:79:a9:aa:d0:e8:87:e7:41:c9:e3:d1:
14:bf:b2:0f:28:d9:1d:19:80:87:52:a2:5d:8b:ef:
70:a2:e7:7e:03:b4:d2:70:56:35:c6:ee:2c:15:75:
4f:e5:9a:eb:c7:cf:40:f1:31:46:33:c2:bb:3a:1c:
64:fa:6e:4b:1a:d7:d6:6d:3f:fd:6f:14:51:af:a4:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:38:24:D7:19:65:6F:1A:83:E9:FF:1A:3A:B9:E7:0B:1D:22:08:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/44e2900e-990d-3cfd-a7d2-3c7b9870d66d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.52.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:61:e3:ea:ef:66:bb:f2:29:ec:e7:80:83:db:8a:aa:eb:81:
ea:7a:b0:3b:59:8c:36:68:d2:2e:be:47:90:88:8b:21:69:e5:
8a:0d:30:76:69:09:0a:a0:29:a2:a4:f0:f9:bf:de:e3:38:7c:
3f:4a:17:5a:22:24:7b:87:1a:ad:d9:1a:b6:56:11:e3:c2:06:
cd:0a:1e:84:7f:2b:ee:fc:4b:6c:a7:80:e3:b9:27:e7:d9:69:
c1:ad:aa:c6:be:ab:31:b2:05:c7:4b:e4:3f:07:e0:52:bc:d1:
c1:0a:5f:65:f5:63:f0:53:dd:73:f4:ca:b2:bf:5b:9f:6a:1e:
50:94:a1:40:48:c5:77:40:df:c9:a8:2b:7a:37:28:fc:15:8c:
1b:ce:7f:cf:51:eb:de:30:d8:a7:a3:84:bb:3e:5d:ee:0d:c0:
8b:83:7d:2c:77:d9:44:a6:c8:24:eb:1e:0f:62:6e:6e:cc:40:
17:06:c5:5e:d8:c1:21:1a:0c:70:2f:a4:6d:fa:0f:06:01:05:
70:b2:5a:3e:a5:1d:d7:58:e5:92:71:9f:79:25:90:f8:6e:a1:
07:f9:d3:1f:97:12:a2:36:49:b6:47:92:94:f2:64:ee:83:e7:
c6:de:41:85:5a:22:9b:ee:42:80:be:73:af:39:f9:15:c2:4b:
a2:da:16:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:43:26 2025 by rpki-client