Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/56fe9cb2-c864-3a79-900b-375da7b46d00.roa
File: 56fe9cb2-c864-3a79-900b-375da7b46d00.roa (raw, json)
Hash identifier: q+UV7reQV0nndLywce8bLJQyY3GZ7J6bT6pjayme95c=
Subject key identifier: 38:D5:69:40:DD:54:1E:97:D7:6C:B7:B9:23:FE:35:0D:3D:71:A9:80
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404768B1130323690B9C7D77C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/56fe9cb2-c864-3a79-900b-375da7b46d00.roa
Signing time: Sat 17 Dec 2022 12:00:00 +0000
ROA not before: Sat 17 Dec 2022 12:00:00 +0000
ROA not after: Sun 22 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.177.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:47:68:b1:13:03:23:69:0b:9c:7d:77:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 17 12:00:00 2022 GMT
Not After : Jan 22 05:00:00 2023 GMT
Subject: CN=69804eae-d267-4642-b6fa-6d9e900ca523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:61:d1:d4:a8:70:76:3c:e4:40:52:ba:36:
4d:e7:78:09:5c:97:ae:2f:af:79:58:7c:42:e5:00:
20:b9:b3:b8:a3:1c:a5:c0:06:d2:2f:d4:5c:3b:54:
ac:35:54:c3:6e:04:2b:ec:a0:30:4a:37:a2:39:60:
e8:e8:e0:4b:3a:8d:bf:68:b3:3a:33:de:98:c8:37:
cc:ff:e2:10:84:d1:03:b4:ef:ac:04:5d:03:0c:eb:
7b:de:92:4c:12:df:1d:c0:72:b8:ca:41:4f:2a:49:
ec:b1:60:a6:5e:a8:fc:f1:03:d0:e4:88:ed:93:98:
7b:a3:f8:e4:69:77:c1:dc:34:b7:0b:11:44:9b:05:
18:e3:94:c3:86:c7:5b:23:f4:67:85:90:df:cc:17:
53:f6:af:a8:c3:33:f0:91:98:c8:2d:b4:a5:ee:ff:
36:e1:57:6c:9a:d2:48:38:38:b6:40:99:6d:49:15:
bd:cd:cb:45:c7:1e:00:d2:d2:05:94:ac:e9:3b:f4:
23:d1:9d:fa:3b:30:fb:92:15:8c:f4:c8:d8:13:5a:
1b:17:93:6a:e1:7e:a8:e4:5e:9d:64:30:6f:af:03:
e4:9e:df:23:d6:cf:20:a0:ab:26:86:35:1a:31:9b:
fc:35:8a:c9:ff:a2:3d:ad:2b:cb:e5:99:ce:7a:e9:
35:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D5:69:40:DD:54:1E:97:D7:6C:B7:B9:23:FE:35:0D:3D:71:A9:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/56fe9cb2-c864-3a79-900b-375da7b46d00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:a3:8b:58:24:12:e0:0f:80:bc:c2:7b:5b:b6:45:f4:5b:f5:
4e:2c:74:bc:de:6f:98:71:da:47:4c:ee:89:d8:0c:b5:b2:12:
3c:12:84:35:b0:54:5a:a9:d1:a3:f5:f4:2b:be:a1:b8:94:87:
c5:3b:3b:d5:2a:d3:6c:57:72:56:f1:5b:6e:da:e3:81:d4:31:
9b:51:ba:36:03:28:5f:ff:56:8d:a5:04:36:a6:22:1a:69:2f:
c0:ee:49:f9:72:be:51:01:aa:88:e1:81:d7:06:9a:51:be:bf:
94:02:09:f2:83:a1:e0:7e:e5:5b:e3:e7:61:ef:57:ac:e8:ba:
16:f2:ea:32:3c:c6:a8:55:6f:d7:35:bd:2d:28:4b:54:dc:9f:
2a:0b:bf:96:82:a6:ea:3c:e1:81:56:d8:7e:c5:c9:35:b2:a5:
83:f7:66:64:15:b6:cd:c2:69:33:de:54:ac:58:35:3a:d0:81:
0e:8d:d9:f3:a0:26:b7:ec:12:6b:15:4a:d6:8d:6c:69:23:be:
0f:91:bb:cc:c0:e4:98:fc:c4:f7:0e:b9:b0:f9:21:d1:17:02:
9c:0a:8c:ea:58:15:13:9f:ef:ef:eb:d9:e5:dd:64:8d:41:03:
fe:c5:ab:42:98:0e:4c:81:9e:28:b1:78:07:a4:62:db:82:d6:
48:d6:9f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:15 2025 by rpki-client