Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e3a1620-067e-38e9-8903-a9dd0efb5ccb.roa
File: 4e3a1620-067e-38e9-8903-a9dd0efb5ccb.roa (raw, json)
Hash identifier: AjYfnMJ9LHaUGv2VYQq2QvvvuAHE4Pdf4MITDMh/uwY=
Subject key identifier: D5:E2:E0:15:95:D5:86:07:56:0C:29:E4:7A:58:35:91:82:A1:42:76
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B3B4B62DE1C7924F034BE000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e3a1620-067e-38e9-8903-a9dd0efb5ccb.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b3:b4:b6:2d:e1:c7:92:4f:03:4b:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=af773879-9855-4f9c-b7ac-c21bc7e65c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:74:f7:1d:b0:af:43:19:e9:66:ca:22:ac:
9c:a1:31:93:a2:a0:4f:26:4c:ff:2f:84:72:b1:8e:
a5:e3:92:78:ba:ce:50:50:9f:a4:f2:29:1c:15:10:
90:dc:79:6a:35:73:03:92:50:45:24:a2:97:29:5b:
6c:b3:6c:20:66:d0:1f:75:a2:60:d0:be:95:a6:97:
c7:ea:4f:0b:dd:c3:ad:f7:13:7a:82:1b:de:5c:5a:
f7:7e:6c:c5:28:f5:1f:4c:ff:1e:44:4f:02:b5:64:
8e:ab:dc:f6:67:98:2e:0c:21:da:9d:78:ec:88:97:
f5:22:05:6f:9f:45:0e:f8:69:ae:9a:74:51:eb:19:
c8:25:e7:72:02:ac:d4:9b:5b:62:2b:cd:6f:cc:14:
9a:57:f0:28:b4:41:38:6d:da:7b:40:d7:09:ea:67:
38:1a:4c:17:3d:31:f8:4d:eb:51:8b:62:91:16:12:
d1:f5:e8:cc:28:a3:06:a5:c5:16:e6:2e:ae:17:03:
3e:f9:8d:ce:ec:d9:0d:ae:3e:15:87:9b:7e:51:9a:
2e:5a:7f:c3:de:1f:68:15:03:c3:a8:3c:62:9a:b9:
38:bd:c9:ad:1a:7f:7e:cc:63:86:6c:cc:6c:8a:ad:
ab:99:4a:8e:9c:bc:39:32:50:88:49:f5:57:0e:6a:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:E0:15:95:D5:86:07:56:0C:29:E4:7A:58:35:91:82:A1:42:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4e3a1620-067e-38e9-8903-a9dd0efb5ccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:d9:88:d8:ab:cf:3d:57:8b:21:c3:8f:7a:bf:c8:2a:93:85:
a5:50:34:a6:48:7a:6e:37:3e:c3:52:d4:74:01:78:27:ed:65:
18:77:66:ea:e4:cf:90:66:4e:0a:7b:37:1c:dd:c4:c7:26:55:
c5:de:b0:87:8a:30:3d:fa:81:8f:75:9e:a0:0e:68:59:0b:67:
ee:e7:8b:94:32:81:32:d5:91:f2:54:d4:c7:ca:64:3a:02:06:
ea:59:4e:5b:99:fc:da:78:a3:b2:20:42:7d:08:74:15:76:5e:
46:76:b5:70:24:32:b6:86:44:e8:98:bf:58:36:ad:28:da:d1:
06:de:1a:6a:83:4d:57:fd:07:5d:66:8d:d0:5c:20:0d:c5:21:
34:97:58:24:18:1b:5b:4a:3a:76:8b:2f:5c:e1:4c:ae:5f:4e:
62:3e:fb:b7:54:77:79:c6:b7:2c:56:af:03:48:d4:4d:c0:33:
4c:52:f9:95:a2:ac:d8:45:53:d5:17:f1:1a:ca:be:4c:47:43:
f8:3a:48:8e:85:e3:ee:cb:52:bb:da:1f:bf:42:7c:bf:5e:f9:
93:3e:b6:60:e1:fb:e0:c1:fe:13:de:cc:04:f2:24:3c:be:21:
2a:45:8a:0b:3e:4d:32:67:b8:16:d0:56:47:2b:72:17:ee:76:
7f:be:c7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:56:26 2025 by rpki-client