Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4714feaa-e636-32a2-9f89-d70671c7b4b3.roa
File: 4714feaa-e636-32a2-9f89-d70671c7b4b3.roa (raw, json)
Hash identifier: ZnDU74OcCuzLT87SMbGuZPppgSRLN5VLFSjd6fRc0Yc=
Subject key identifier: 82:E2:93:4C:5E:C9:C1:C4:AC:37:DE:2A:69:87:65:72:B5:F6:85:28
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF865DA3C0AC9D94D13B11D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4714feaa-e636-32a2-9f89-d70671c7b4b3.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.206.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f8:65:da:3c:0a:c9:d9:4d:13:b1:1d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=64240b93-bed8-4819-ac2c-4b9a86335701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:19:c5:e9:9c:be:89:7c:ed:67:7a:ff:83:05:
1a:52:03:75:55:04:96:bd:60:28:2d:05:12:5c:39:
32:c1:e1:69:7b:99:ae:f3:dc:68:5e:cc:10:62:2b:
c1:69:fa:26:bb:6e:64:28:65:ea:28:b2:ae:d5:14:
3a:0b:59:4f:f1:90:c2:b9:cc:1f:d4:08:9f:9d:d0:
b3:72:1a:5c:51:bf:84:5b:92:d7:b1:08:f8:4a:cd:
a7:9c:b6:bd:b3:d3:c2:06:46:fe:56:d7:48:ab:09:
b0:b1:be:48:21:2c:93:28:e0:9a:67:ce:90:ad:ab:
18:7a:86:3d:a6:fb:30:da:60:5f:b3:35:15:e5:1d:
38:43:a6:0c:f3:19:ca:3a:6f:09:75:45:79:03:3f:
60:4f:aa:16:85:8d:b9:60:71:c8:98:17:3c:d6:5a:
60:93:c3:0f:d1:84:ac:7f:90:3d:ff:71:a6:ff:f5:
af:0a:b2:8b:4b:4d:44:ee:14:fe:1c:07:b8:43:a3:
2a:29:ea:79:1c:e0:f1:55:41:56:d9:34:0b:19:b9:
91:22:21:b6:22:41:c8:4a:06:e5:fd:89:c1:99:73:
90:f9:c0:63:7b:86:0b:6e:87:60:bc:5f:b1:8c:86:
d8:0a:d9:3f:34:2a:1d:7b:90:dd:c6:04:c9:36:7b:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E2:93:4C:5E:C9:C1:C4:AC:37:DE:2A:69:87:65:72:B5:F6:85:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4714feaa-e636-32a2-9f89-d70671c7b4b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.206.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:92:62:6b:0a:83:18:6f:74:85:71:e4:65:ec:60:c5:14:cf:
e0:c2:cd:e0:59:8e:c3:8e:15:78:2f:11:2c:de:46:00:73:bf:
f1:fb:45:3b:c2:84:c6:34:f8:42:b3:49:a0:50:cb:46:cb:61:
9c:42:75:46:7c:2a:f9:17:2e:b6:d7:78:dc:0a:8b:98:c3:88:
6c:d8:85:d1:af:04:b5:5f:13:de:0a:3d:70:b9:b6:19:81:75:
63:50:21:33:db:6b:e3:87:07:a6:30:75:eb:c3:94:44:0b:f9:
eb:1f:36:90:7e:be:91:77:14:03:94:b9:93:e7:c2:bc:ec:bd:
75:c9:b4:3a:93:4f:07:5d:51:43:8a:54:66:54:3f:c8:52:50:
b5:df:fc:ae:d4:55:2e:d1:d5:89:5b:8c:5d:83:cc:a4:b0:79:
bc:d5:a2:57:d3:73:62:8e:df:e0:75:5a:e6:73:78:f1:50:dd:
03:dc:ef:05:8f:e6:10:ce:30:40:5a:d7:fc:15:3e:41:7c:1f:
e2:d0:c3:19:bd:b4:c5:f7:44:e4:47:ab:fa:79:33:e5:1c:b9:
9b:e4:22:64:a3:29:97:10:3b:53:9e:08:ab:74:dd:28:59:fa:
c0:9f:e2:1e:b1:0f:2b:ec:08:0d:5d:f8:29:5d:4d:59:dc:56:
0b:31:e9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:19:51 2025 by rpki-client