Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68976d11-6132-338d-8de8-caff0d41b823.roa
File: 68976d11-6132-338d-8de8-caff0d41b823.roa (raw, json)
Hash identifier: Cb+Fs+ETCQS6nYITuCb1IBzcXhDORdilIRz4kV+eoZ0=
Subject key identifier: 95:10:45:E6:41:A0:EA:AF:A0:44:45:4D:8B:74:D0:EE:83:8C:DE:56
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583C95BD347D6661B83554F2AE00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68976d11-6132-338d-8de8-caff0d41b823.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.168.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:95:bd:34:7d:66:61:b8:35:54:f2:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=8f616542-a6d1-4548-b1c7-9bf3e21435cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:35:44:32:35:9f:bd:b1:63:5d:18:8d:e3:16:
fd:56:a0:2e:99:ec:06:4f:ba:a9:54:33:3e:03:00:
75:ee:8e:5f:ba:63:a0:a0:9e:97:47:07:f0:fd:89:
c6:93:32:95:41:bd:e4:87:9a:e7:e7:c4:6d:17:d9:
d4:f1:43:8c:d9:a7:c2:63:f6:f5:44:8d:25:9b:7f:
ba:1e:c1:78:c0:db:fd:a3:68:11:70:8c:94:37:a0:
a4:dc:c2:11:a3:76:21:b4:a0:0b:f5:e1:91:3f:69:
39:62:d1:aa:82:2f:0d:d6:bd:b7:86:6a:a3:87:7c:
32:6e:d9:95:96:69:10:10:0f:24:0e:fa:47:bc:71:
1b:a0:77:cd:4d:3e:99:75:05:e5:2f:81:d3:a3:16:
12:9e:85:67:72:df:a4:9a:7f:6a:18:9b:30:fa:f1:
01:21:d9:e4:34:68:f6:b0:d8:9e:60:44:a9:43:00:
ec:70:ec:42:98:ca:b9:db:7e:71:42:45:f4:66:a7:
aa:3f:ce:da:4f:7c:1e:5f:64:d9:42:f9:01:fa:a5:
3e:95:17:9f:d4:44:da:57:61:51:cf:30:a2:f6:71:
7a:af:32:b8:d3:f4:fc:9c:c7:80:77:b0:f2:68:49:
03:4d:f2:f3:6a:ac:61:a1:fc:36:d6:68:21:46:c6:
f1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:10:45:E6:41:A0:EA:AF:A0:44:45:4D:8B:74:D0:EE:83:8C:DE:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/68976d11-6132-338d-8de8-caff0d41b823.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.168.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:fe:10:02:71:1f:79:dd:a2:ca:77:7d:05:af:54:cc:80:29:
4c:af:d0:75:97:75:84:bc:de:77:cf:da:d1:fe:9e:76:39:63:
1c:51:5e:f4:06:0a:8c:eb:7e:ed:79:05:18:b1:d8:9d:c8:5d:
92:9c:5f:a0:c6:a1:1d:1f:92:38:bc:86:75:fd:c1:fd:e0:d5:
95:0a:7b:48:c1:3b:d9:5f:51:72:dc:0c:7e:a5:3f:a1:d3:88:
5c:2d:b2:ad:57:72:88:1b:c9:70:99:91:cb:44:c4:d9:c0:f7:
35:75:12:20:de:10:21:06:21:2f:07:6b:bd:f5:54:8c:8f:4c:
12:3f:4f:c3:85:34:a6:23:98:a5:90:52:e2:a4:36:15:cf:27:
f9:ab:46:bc:1e:bc:7a:a7:6f:0a:a0:70:36:93:f5:6d:e2:56:
98:86:b5:36:cc:e4:07:53:72:17:32:1f:32:b6:29:ad:10:e2:
15:b0:ea:28:b2:09:0c:be:57:c1:34:2c:9a:aa:8a:81:40:f2:
6d:40:e0:f8:4c:80:84:db:5c:be:5e:a2:a3:53:04:93:a4:fb:
5d:56:8f:24:39:28:f1:4a:b9:cb:45:de:cf:11:be:48:44:bc:
a1:1f:15:87:37:26:fc:b9:b1:90:12:54:e2:67:ec:df:94:fd:
d5:66:62:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:26:07 2025 by rpki-client