Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57581f39-1b65-3b7c-bdad-8de777d0474d.roa
File: 57581f39-1b65-3b7c-bdad-8de777d0474d.roa (raw, json)
Hash identifier: xYBLlAehErMTyTShjH88llEfHQ/LXapVKOeVstdy+So=
Subject key identifier: AC:60:FD:08:3A:02:48:7E:0D:9B:D3:B7:AA:8B:7A:A7:83:33:7B:B6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCCEC355F9D8787AFE9F0F920
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57581f39-1b65-3b7c-bdad-8de777d0474d.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.78.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cc:ec:35:5f:9d:87:87:af:e9:f0:f9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=2c963472-1157-48f6-9d21-7357488851be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bb:45:f1:95:a1:7f:6a:14:c7:28:e3:9f:24:
f4:2e:49:8e:80:0e:85:03:64:b9:2c:1f:76:ab:ea:
5f:0d:5c:67:b2:f5:bc:68:4a:8a:d6:70:db:11:c4:
d2:6b:4c:59:13:d9:25:cb:3c:8f:1a:28:be:f3:e2:
ec:2d:9f:6f:5b:85:e9:96:ce:a2:9a:be:ef:29:4d:
54:7d:7e:30:cd:d3:8a:8e:2b:e7:8f:04:4e:9b:6f:
c6:d3:26:4d:35:9e:59:f5:f5:ce:a7:8c:95:59:f5:
e8:f6:e2:4a:29:23:47:aa:56:77:00:c9:95:af:54:
37:10:bc:10:94:49:ab:62:b6:b4:e2:27:1a:6e:4b:
31:d3:fe:e8:9f:56:15:df:cd:ff:65:76:8a:08:c2:
be:f0:63:7c:56:14:46:12:9f:ad:e1:39:e8:88:19:
61:26:4b:65:4c:e6:63:f0:66:cf:90:f5:b0:9c:99:
88:1b:ea:ee:10:b0:b9:b3:a1:bb:4d:b8:e2:11:41:
c8:2e:d3:ec:04:8f:da:83:12:34:32:c0:5e:4f:e5:
a3:d5:73:e3:c3:0e:cf:a6:a3:6e:66:4e:a5:32:eb:
7c:52:66:a7:35:b9:24:9e:d1:cf:e4:f1:21:21:2a:
5d:21:97:e9:b5:46:8f:50:b5:c5:47:34:d9:43:d8:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:60:FD:08:3A:02:48:7E:0D:9B:D3:B7:AA:8B:7A:A7:83:33:7B:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/57581f39-1b65-3b7c-bdad-8de777d0474d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.78.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:12:fd:3a:28:50:e0:f1:e4:27:6c:5c:d3:67:1a:68:aa:3f:
ca:b8:75:12:5e:ff:3a:96:87:39:0a:b4:fa:62:3c:83:82:50:
06:42:02:2e:9a:68:1e:f3:0c:ff:38:23:99:3a:44:e7:85:e5:
29:bf:ed:41:86:2a:15:d7:b4:17:83:8a:28:4e:73:c2:86:ff:
e3:5c:40:3b:ee:04:c0:9f:5e:0c:43:63:25:6b:cf:d4:67:ce:
bb:27:09:86:10:51:ca:50:23:39:b1:01:5a:98:ea:5c:a5:7d:
22:cc:81:b2:45:b5:89:87:83:76:94:ad:fc:2e:38:32:b3:54:
7a:84:b2:41:7d:f3:17:ec:a0:87:b7:80:22:b9:da:7a:1a:7d:
f1:a8:76:ce:6b:d3:82:49:b8:f2:a9:99:de:db:66:d5:df:f8:
4a:54:4d:b5:dc:51:3d:ca:44:bd:8c:76:02:32:d1:57:e0:28:
0f:82:f6:72:e2:48:e1:bf:81:35:fa:20:d1:25:b9:1d:47:f9:
cc:95:fa:84:1f:e8:8a:6b:cd:8a:73:42:2a:4c:34:ee:75:d4:
52:c9:90:1e:55:10:0a:80:ca:4e:81:b3:74:c2:6a:a9:18:2b:
cd:59:db:25:da:c8:e1:c1:a9:6b:db:5c:18:af:c0:fb:6e:ff:
1a:1c:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:42:59 2025 by rpki-client