Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6a856885-7097-3e99-9fac-9f036be5c447.roa
File: 6a856885-7097-3e99-9fac-9f036be5c447.roa (raw, json)
Hash identifier: nMFDJ3xq9J6lHmvsiGcA2l53AYip+RdN7PKyZRgP+w4=
Subject key identifier: A6:78:35:40:A9:75:D2:81:83:F8:38:C7:5C:BA:9E:72:40:80:9B:BB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583D55E74D9DEE2648B3AEAD3660
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6a856885-7097-3e99-9fac-9f036be5c447.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 27 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.148.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:55:e7:4d:9d:ee:26:48:b3:ae:ad:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Apr 27 04:00:00 2022 GMT
Subject: CN=1ed660da-c0a1-44d7-97fc-dc944a8e0cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:8a:82:3f:72:03:7d:77:2f:ed:e0:f5:57:
1d:91:7f:ac:19:d0:2a:3a:bd:1f:5f:b6:8d:ef:b1:
38:0f:c7:78:59:c5:71:e0:5f:38:a2:42:69:cf:df:
09:24:52:f6:84:b3:62:c6:71:bc:bb:89:b7:53:4f:
f7:31:29:6e:cd:12:c6:ac:59:3e:87:aa:43:5b:3d:
84:e4:92:64:00:e2:6c:6a:fe:7e:de:80:c1:4d:fa:
8f:e0:50:72:d3:1e:20:b9:66:13:05:1e:06:7d:a2:
a6:0a:ed:21:13:98:e1:ce:da:83:f3:f2:65:7d:77:
bc:fe:cd:6e:4c:24:cb:82:54:4a:66:2a:8e:4e:ff:
2e:7f:4b:b3:f0:dc:2a:88:1d:29:68:41:de:a0:f8:
dd:d5:ca:ee:f6:93:9f:d8:2d:fa:8f:fb:14:d2:b5:
2b:d4:bd:9a:b7:8e:11:9e:82:51:76:06:8a:07:ab:
3f:b9:34:a9:9e:f6:fc:31:88:3e:fd:9d:aa:00:61:
83:b0:5f:ad:55:08:6d:8e:03:19:e9:30:43:95:08:
e0:94:06:df:de:12:39:fa:35:a2:ed:d3:50:34:d1:
47:37:8a:c3:57:16:a1:9e:4c:77:a4:f3:00:01:c4:
d0:bc:60:6c:b9:f1:ba:bc:69:21:02:fb:b0:60:f4:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:35:40:A9:75:D2:81:83:F8:38:C7:5C:BA:9E:72:40:80:9B:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6a856885-7097-3e99-9fac-9f036be5c447.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.148.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:ba:cf:24:72:76:2f:4b:43:66:9f:34:c0:92:ba:61:78:41:
6e:15:14:d8:47:ed:59:3c:72:aa:bb:f1:87:f9:6e:83:ea:8d:
49:f1:e0:1f:ce:37:6d:34:ff:1a:7b:25:4b:8c:71:bd:a3:82:
91:18:6e:d9:cc:ba:f3:5e:1e:1e:e3:f6:d3:15:ef:ae:bb:ec:
ee:8e:f8:4c:82:4c:97:35:99:53:35:f7:8f:20:e3:9e:87:62:
41:c1:33:d5:8c:ea:c6:20:e5:71:27:3d:61:e5:77:d5:51:64:
6a:e4:54:89:b3:e0:b8:10:e6:f0:74:06:0d:69:37:56:35:d1:
97:55:25:38:02:a7:3c:18:bc:39:5f:5b:27:ae:fe:97:5e:b6:
78:e1:dd:ed:bf:d7:fd:4f:33:70:b2:89:a5:27:35:25:6d:ec:
d6:6c:42:15:01:cb:3b:c4:91:00:3a:39:79:78:97:b9:00:8d:
d5:4d:e1:90:4e:98:42:b2:7b:4a:cc:0e:64:c4:34:31:6e:a8:
3d:1d:aa:e7:b3:76:b3:cf:72:21:1a:33:b4:a1:35:f7:4f:d6:
f3:81:52:0a:e2:c8:92:be:6b:a2:e2:aa:1e:f2:b5:73:8e:c1:
92:45:4d:44:ca:d9:be:69:3c:ce:ee:11:d4:ae:65:11:31:d3:
85:7e:74:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:50 2025 by rpki-client