Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c315d94-83e3-3756-80ac-9e98a36c9e21.roa
File: 5c315d94-83e3-3756-80ac-9e98a36c9e21.roa (raw, json)
Hash identifier: 2UCVvLYrgpTUsg12O1d1UDbsipQyYcbbU0PugrDUgKs=
Subject key identifier: 85:72:EB:33:3B:1A:EA:4E:D7:19:BF:96:47:C0:45:5C:C2:EA:86:BB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF260EC787C9601C697773540
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c315d94-83e3-3756-80ac-9e98a36c9e21.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f2:60:ec:78:7c:96:01:c6:97:77:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=9898a320-f017-4473-ab65-6186bbf145b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ec:2b:28:32:62:37:aa:03:f1:02:0a:9e:fe:
55:40:0c:37:25:ca:82:18:62:b4:ba:b2:48:19:b2:
60:a4:9e:ad:47:f5:a6:2b:c3:56:e5:90:d7:f0:4f:
1d:a5:67:2f:2a:c2:0a:94:18:0d:45:92:cb:de:0e:
d5:56:0b:26:33:6d:4f:2a:97:42:3d:18:82:72:c1:
9b:bc:3a:2c:64:67:9f:b0:1e:57:08:f3:0d:64:62:
4c:e7:91:0a:c0:07:f6:62:e7:b5:b7:c6:fa:6e:97:
0c:f5:ef:2b:06:bb:c0:a9:f2:16:06:83:45:65:d9:
75:9b:03:d7:27:f3:26:fc:44:77:af:87:e8:32:52:
fb:f8:7c:cf:ec:69:65:f9:56:fa:f7:a8:47:3f:38:
f7:d6:6b:ac:69:06:53:e6:00:77:1b:3b:df:d6:cd:
89:fd:5a:31:e0:e0:c4:9b:7f:16:26:03:5d:56:97:
a1:fc:b5:f1:ea:18:f6:71:a4:3c:c4:e4:f8:b7:c0:
b7:a1:36:75:74:b2:c3:68:7e:5d:7e:eb:f9:ca:96:
88:0a:15:d9:1b:39:f2:5b:90:62:9c:66:63:83:a3:
59:1e:04:24:de:ee:20:9f:26:7a:34:8d:b9:db:d7:
64:68:28:88:13:b3:af:ad:a0:79:16:dc:fe:44:6b:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:EB:33:3B:1A:EA:4E:D7:19:BF:96:47:C0:45:5C:C2:EA:86:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5c315d94-83e3-3756-80ac-9e98a36c9e21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:a9:f4:ab:12:87:ab:39:ef:b3:b2:78:58:d6:98:da:05:34:
28:6a:b5:58:82:8e:65:94:af:f3:f3:64:b8:63:11:fb:00:06:
a4:65:b5:52:a1:1e:b3:45:48:d6:81:62:71:1b:f6:da:10:6b:
e2:1a:2d:69:69:1c:af:d0:43:ba:7a:79:04:86:d8:6d:2f:c4:
0c:3b:bd:1d:c5:5e:bc:6c:2a:15:ab:e4:7f:ab:af:e5:59:ca:
a6:d0:73:c4:ec:45:b4:32:0f:29:55:62:8a:87:35:84:64:d5:
61:e7:93:74:c4:eb:31:a2:d4:9e:7e:f7:e6:70:b6:63:90:5e:
44:bd:1d:35:50:cd:98:ef:e1:44:ed:56:16:b1:78:84:a4:fc:
6d:3f:09:59:fd:30:29:3c:59:d1:ef:7d:49:95:35:a1:70:50:
a2:4c:95:de:38:0d:e0:cc:78:e6:ae:69:2e:b6:cc:b0:4f:ef:
5c:8e:a1:2d:8b:61:2f:09:39:f4:e8:dc:d2:a1:e8:82:96:b0:
da:a3:b9:94:73:9e:e4:90:3e:1d:7b:98:f8:5b:2a:f4:8f:dc:
4f:78:e3:a4:47:f8:51:ce:5c:91:6f:f4:e8:13:77:5f:fd:44:
4d:bd:86:e8:2a:b4:75:0b:ef:c2:6c:7d:f2:e9:f6:41:56:f5:
c5:dc:6c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:19 2025 by rpki-client