Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fab7992-89c5-3c7b-ae9a-01d1db94406f.roa
File: 4fab7992-89c5-3c7b-ae9a-01d1db94406f.roa (raw, json)
Hash identifier: 5YnMzIfYE4bTjslwml2O3RHeZ12XeGd607Q/hCrtFqA=
Subject key identifier: 94:65:D3:D1:B2:6B:6C:3C:68:F8:B9:37:C6:08:D7:0D:D5:62:B4:D6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840BBE7DE0B2857F8FA4D113D40
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fab7992-89c5-3c7b-ae9a-01d1db94406f.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.214.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bb:e7:de:0b:28:57:f8:fa:4d:11:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=606f168e-6a97-4327-9b73-8ecc0d059242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:3f:03:b8:c7:37:2d:28:87:94:52:2e:46:
01:80:86:7a:03:d2:4f:46:5a:2d:97:d3:00:61:96:
db:37:13:9e:2d:eb:e9:13:54:2c:ed:58:11:34:c1:
e8:8b:2e:46:2d:55:13:aa:53:51:15:fe:c4:55:c6:
2c:d1:15:a2:e1:f8:60:b8:55:ef:cf:b3:8c:25:02:
bc:ba:ea:62:72:99:8d:71:24:0f:23:3c:c0:e1:b6:
bc:bb:7d:e8:ad:7f:99:32:18:29:ea:a3:90:1f:2a:
e9:9e:22:12:1c:ce:f7:a3:ec:13:f3:c5:55:82:41:
a3:aa:f4:5c:30:cd:39:ce:f6:39:c2:3e:45:5e:f9:
c2:d5:7e:2a:e7:b9:c9:8c:a0:58:fa:45:a3:03:e1:
e3:3c:2e:a6:16:2f:88:37:0a:25:04:06:36:c3:b0:
f4:6f:77:8c:38:d4:a5:d7:8b:f3:74:de:52:fe:da:
0e:38:32:e2:71:0d:28:f8:90:7a:91:69:1c:5e:38:
fe:42:fa:13:2a:73:5e:0d:8b:78:db:19:6a:33:37:
f9:45:ae:6c:8c:3e:34:e1:7e:ad:7e:44:69:6b:97:
e8:ab:ca:17:b8:e0:66:d4:99:11:3a:da:fa:be:94:
db:cf:d3:5f:47:e8:b1:fc:b6:57:41:44:dc:68:82:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:65:D3:D1:B2:6B:6C:3C:68:F8:B9:37:C6:08:D7:0D:D5:62:B4:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/4fab7992-89c5-3c7b-ae9a-01d1db94406f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.214.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:40:5c:6c:86:a9:a6:06:bf:31:7e:44:60:7c:8e:92:00:bc:
e9:ab:fd:52:aa:fd:6a:4f:8f:75:f6:95:99:79:c6:82:7e:e5:
a4:32:1f:46:34:43:1a:60:3c:9f:eb:f0:53:b1:17:2c:d0:e2:
7e:1a:b2:71:f5:13:03:32:4f:18:a6:d5:59:3b:8b:80:98:d4:
26:8d:a4:dd:81:71:c8:5d:b5:e8:c4:1e:32:66:2c:d0:42:86:
cc:7a:3b:af:c8:d5:f0:4e:41:7d:86:9d:06:5d:bf:da:91:46:
58:a9:81:b1:b4:0f:f4:ea:33:6c:67:45:1c:b3:da:e6:95:f7:
ce:2c:73:25:97:ae:45:bb:0d:10:c1:b7:c1:fc:5a:1e:f9:15:
86:ff:30:5b:30:4d:0c:9b:8b:16:0c:27:4e:5e:b9:75:22:29:
87:d5:be:f0:fd:93:98:5c:f0:55:ca:68:03:b8:e7:86:91:47:
15:03:ef:aa:b4:b3:19:2c:e9:e4:53:c2:32:25:18:53:47:65:
ab:42:19:8e:17:70:91:24:70:d7:66:53:8e:38:b6:80:48:4e:
ed:b9:3b:3c:90:ba:3e:d1:c4:56:2c:b3:d4:fb:e7:10:30:5b:
60:08:42:aa:0c:07:c2:32:bb:fe:09:22:96:63:ab:04:44:39:
8c:77:23:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:50:34 2025 by rpki-client