Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5d2c3cf9-8624-3c99-a0b9-b85d1e115e32.roa
File: 5d2c3cf9-8624-3c99-a0b9-b85d1e115e32.roa (raw, json)
Hash identifier: Vcz0aqKMZEVT27NBH5gg96QmWJ9I8gL/VAx2Dlz3yc8=
Subject key identifier: 10:8E:AF:62:2F:03:01:03:70:54:35:97:8E:78:FC:98:CD:17:CC:F1
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583E76619E09F7CBA472CCCDA480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5d2c3cf9-8624-3c99-a0b9-b85d1e115e32.roa
Signing time: Mon 04 Jul 2022 12:00:00 +0000
ROA not before: Mon 04 Jul 2022 12:00:00 +0000
ROA not after: Tue 09 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.176.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:76:61:9e:09:f7:cb:a4:72:cc:cd:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jul 4 12:00:00 2022 GMT
Not After : Aug 9 04:00:00 2022 GMT
Subject: CN=995f0ebd-fe1b-45af-b77c-bfb885e85db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:24:01:37:dd:5d:51:7d:49:a5:bc:30:9d:8a:
7d:87:57:7b:3a:a4:39:a4:51:1b:07:37:28:11:4c:
77:88:c0:83:51:c4:c4:1a:34:6c:0f:ee:1d:a4:f6:
b1:01:8d:e2:ca:cb:ea:03:c5:79:e8:21:af:be:22:
ff:ef:ba:9c:aa:7a:91:2a:73:8f:bf:a7:f6:bf:bd:
06:51:54:21:ee:e6:c0:97:e1:8f:2c:31:95:60:18:
c9:75:78:65:f1:2f:90:4e:8d:d6:c7:63:e6:ce:fe:
f1:d7:ee:17:4e:aa:79:36:24:2b:93:fc:01:9e:46:
29:85:95:ad:f9:be:a2:07:70:e8:f9:9b:60:b3:c8:
ab:41:2c:a0:c2:8f:18:e5:9c:1f:23:99:c3:52:55:
26:6e:32:04:34:ab:c7:b2:a9:55:25:ac:27:fc:f3:
59:3f:7d:b1:fe:98:cd:63:c3:04:c5:53:13:ca:8c:
25:90:a8:ac:21:9c:9f:cb:65:b2:84:86:7d:57:f9:
29:bc:af:b4:02:24:5d:44:94:5d:1e:53:91:9c:77:
5d:f9:94:23:00:55:ed:4d:5a:f3:af:11:1d:cb:46:
2c:eb:84:db:51:2a:8c:0d:b5:2b:5f:90:ee:1a:f2:
ab:bc:5b:99:24:51:8a:0c:e2:6a:74:ae:58:8e:fa:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8E:AF:62:2F:03:01:03:70:54:35:97:8E:78:FC:98:CD:17:CC:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/5d2c3cf9-8624-3c99-a0b9-b85d1e115e32.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.176.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:ad:0a:71:0d:fa:b5:aa:18:7f:1d:91:f6:eb:d4:61:76:7b:
82:69:c5:8f:d4:3e:09:e8:f4:45:88:ec:a6:4f:71:c1:44:c3:
3f:f3:25:0c:ac:56:88:b7:f6:4c:f8:a9:b3:27:7f:6a:4e:3c:
a6:db:7d:ab:dc:5e:67:eb:9f:bd:29:3a:51:8c:34:d0:61:1f:
fe:db:97:12:7e:fc:c5:89:22:07:7f:c1:71:ba:29:df:5e:c1:
4f:dd:78:73:df:9b:bc:c4:88:56:ac:c3:27:51:af:d4:47:46:
a3:79:50:81:ee:1e:f1:66:55:0b:8b:92:83:8a:b8:8d:03:88:
89:3d:d9:9d:4f:74:bf:08:b6:b8:05:d6:29:2c:0e:be:62:89:
2b:6f:68:0f:92:da:74:fd:1a:ea:38:9c:df:49:5a:1b:10:6b:
04:58:b2:33:c4:76:e2:73:48:fe:e6:12:33:0c:dc:35:ec:1b:
56:b1:9b:3a:ff:7d:bf:83:e6:a3:b4:05:0d:6f:c5:d9:ee:14:
30:ce:f4:82:ef:a0:69:b0:63:58:4f:fa:7a:dd:0d:3c:16:a9:
c7:76:da:07:78:8c:ba:fd:f4:e4:27:41:fd:ac:02:14:83:61:
47:f1:8f:0e:3f:c5:a1:c5:26:39:4c:85:f6:77:32:db:66:a9:
73:8b:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:02 2025 by rpki-client