Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5529cd29-149a-35e7-afb6-7ab75cef20df.roa
File: 5529cd29-149a-35e7-afb6-7ab75cef20df.roa (raw, json)
Hash identifier: t2CQn8p/XTtzny6khYI3RrKbyrGMuYh3whn0f4RqqT4=
Subject key identifier: 32:50:C0:6D:18:08:D6:B1:21:F9:6A:71:51:30:52:02:DD:05:AF:0C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584068542CBAE774EEA7B00D69C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5529cd29-149a-35e7-afb6-7ab75cef20df.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.57.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:54:2c:ba:e7:74:ee:a7:b0:0d:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=5ecea5f4-b2e6-472e-93ca-340e6c5cccda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:82:0d:51:3d:72:02:67:ab:95:c7:4c:0e:
0b:ad:49:8f:98:d7:70:4d:f1:b9:cc:9a:7f:63:54:
5f:1a:51:c0:86:7a:85:d6:51:5a:b2:a2:52:d0:8d:
35:f0:b8:1e:4c:f9:52:ad:09:f6:62:53:1c:52:c4:
76:65:9c:3e:e6:af:2a:17:12:6a:d4:c5:3b:14:7e:
72:53:95:53:16:42:08:53:e3:90:e4:75:ae:92:82:
96:ba:54:61:9d:d3:fd:f8:b6:9c:ac:72:be:11:fc:
92:f6:c2:13:21:ad:ad:da:bc:5d:15:77:52:4c:aa:
af:ce:8c:bc:a3:08:af:98:76:5a:fa:06:73:0d:8f:
24:13:36:71:6a:51:89:86:cf:69:43:3d:72:b6:fb:
8c:47:41:b6:86:d0:2f:b2:9c:d6:7f:ab:31:f9:ea:
34:5b:e4:09:16:33:b6:3c:f1:c0:d2:ab:6e:aa:4f:
4f:f7:e7:60:2e:78:02:35:38:d4:58:c5:94:cd:86:
e6:07:ce:69:9a:d4:40:37:7e:c1:6c:5c:4d:d9:57:
d5:5d:24:b0:0e:fb:9c:e9:f4:67:2d:3e:e5:fc:e9:
f1:fa:08:b8:1a:0f:46:1d:fc:2b:6c:fa:e2:b1:2a:
af:1a:fd:52:c7:c4:2b:68:38:0a:80:a6:f1:66:f6:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:50:C0:6D:18:08:D6:B1:21:F9:6A:71:51:30:52:02:DD:05:AF:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5529cd29-149a-35e7-afb6-7ab75cef20df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.57.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:46:20:dd:fe:0b:9c:b2:87:09:8c:d2:60:e6:1e:e9:f0:01:
fa:8a:e9:78:43:51:6a:17:7c:ec:61:9a:5f:0e:54:54:36:79:
fc:7f:3f:8a:4a:fc:44:59:61:a9:61:31:0a:ec:8e:aa:ae:dd:
3e:26:b9:9f:92:ee:f8:7b:59:24:0a:3a:a7:13:9e:85:28:9a:
68:b9:26:ac:60:6b:2f:ac:db:9e:23:4f:71:ed:69:37:8d:d9:
7a:ae:4d:6a:2d:1f:e8:04:57:35:2f:1c:82:50:97:db:a7:0d:
b7:fc:cc:09:8a:8b:80:2d:4a:c9:c5:dc:9d:cd:c7:de:e6:ea:
66:2a:ee:76:02:48:d3:e6:c3:e0:66:46:27:a1:88:c9:f7:41:
bc:90:a9:b6:60:de:52:26:b0:b3:e0:c8:45:5a:a7:a1:d7:38:
d2:4d:7d:db:35:b7:ec:09:b2:de:bf:f5:5c:31:0a:57:b4:b6:
f2:f2:ac:be:09:54:53:e0:9b:f6:38:8e:af:1c:fc:8c:d9:35:
26:5d:40:5c:61:fa:d2:67:78:cf:08:fd:c2:a3:e5:ad:36:45:
35:87:f7:4a:6e:46:d3:93:55:06:dc:9f:47:04:58:74:31:03:
a1:34:9d:3a:0c:d0:a8:a7:c4:d9:54:7c:75:50:61:d8:e8:1e:
84:3e:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 11:29:41 2025 by rpki-client