Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6df1306d-d011-3966-a14b-34d987ab1e4a.roa
File: 6df1306d-d011-3966-a14b-34d987ab1e4a.roa (raw, json)
Hash identifier: prmQVEqlriC/wCPzr//ESIOAijdst+fzvZrJNXeVvPQ=
Subject key identifier: B1:80:92:78:A2:63:06:B5:CE:26:A6:28:FA:AF:BB:20:0D:B4:F5:DE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408D000132221D22F4913A8EE0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6df1306d-d011-3966-a14b-34d987ab1e4a.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.18.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8d:00:01:32:22:1d:22:f4:91:3a:8e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=0afb3ec5-3c87-4cfb-b502-ef968727113b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:c7:8a:9a:74:a7:7b:29:0a:be:29:e8:5d:
98:0b:92:00:0e:91:f6:2b:7d:c5:43:c4:28:2d:86:
2c:4e:89:48:7f:33:ab:0b:0c:75:a1:a0:34:36:14:
a4:95:06:aa:4b:53:a6:1d:e1:e5:ad:5a:83:a9:fe:
a9:3c:20:9a:df:93:8f:9c:c8:dd:47:ce:22:03:a6:
a7:07:c9:76:9d:e3:f6:06:69:9d:7a:ce:3d:39:ca:
55:5e:e4:45:9b:2b:88:c8:fd:a7:a5:41:3d:19:6f:
be:e0:1e:58:0d:84:89:05:94:68:f7:6f:a5:fe:74:
3a:c1:f6:50:98:b5:c2:bb:57:55:f6:4c:12:9e:97:
08:83:49:bc:7b:f1:08:6b:22:15:72:a5:29:1b:69:
b1:1a:e3:ae:92:3e:01:61:a4:62:de:0b:ac:ba:9b:
64:3a:98:cb:75:68:0a:97:d3:d4:28:52:d0:cc:1f:
71:18:70:5b:b3:b6:b3:a4:d4:51:4c:40:bf:fd:05:
14:9c:03:94:f7:64:ae:76:44:d1:f0:90:1c:3e:7d:
a4:bf:09:0c:13:35:05:78:4b:31:86:d9:63:cd:3a:
61:0f:ae:09:95:a8:83:c2:bd:d5:e6:4e:29:7c:cc:
50:7d:81:a2:5a:ca:69:48:b6:d9:1a:33:1f:b1:9d:
41:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:80:92:78:A2:63:06:B5:CE:26:A6:28:FA:AF:BB:20:0D:B4:F5:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6df1306d-d011-3966-a14b-34d987ab1e4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.18.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:09:c8:d4:03:b3:a9:d4:68:a7:a3:32:49:11:20:57:ab:43:
a0:d4:d5:3b:ac:52:06:99:3a:c9:66:3e:4d:6e:19:4d:67:7c:
5e:bf:18:5a:74:f5:6b:a6:ce:30:9f:98:b4:e3:76:21:d5:3c:
45:0b:19:d1:d4:ac:86:54:4b:06:0b:02:ef:27:75:21:c2:fc:
ad:b9:3a:61:17:eb:86:3b:a9:fd:90:77:8d:d3:43:13:0f:14:
32:20:80:94:fa:94:18:1f:9b:db:f2:df:6d:77:db:d2:8e:cc:
ef:96:11:30:7d:8b:03:be:5e:35:a5:c6:f1:6a:c8:b1:4e:32:
fe:d4:02:c2:3d:85:8e:0b:82:1b:0f:72:65:25:88:1a:aa:a3:
ea:d1:3e:58:87:3c:40:5a:fd:78:53:d9:2d:e3:8e:ba:a2:b3:
b3:19:42:af:f9:7b:5b:e5:10:6e:ea:9f:98:5d:0f:52:ba:60:
3d:95:c6:a6:a8:5a:0b:91:d1:55:dc:fc:73:11:6b:22:06:d6:
21:22:8c:85:da:07:e1:5c:89:3f:b6:41:e9:f2:2b:0b:ed:52:
e0:81:e3:9c:b9:62:55:7a:6e:7a:05:d4:07:4a:e8:d1:45:ec:
50:5f:3f:7b:ec:e1:bf:ea:1b:21:56:94:59:6f:ed:6b:10:09:
d7:25:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:19 2025 by rpki-client