Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6e232203-af4e-3898-9f82-a36d091d7936.roa
File: 6e232203-af4e-3898-9f82-a36d091d7936.roa (raw, json)
Hash identifier: ix2qwKLW+Yq2Rq+lyVqEcbUSLb1kzkto2deE+mJd7Z0=
Subject key identifier: 5C:02:EC:CF:F3:35:1C:C9:A1:54:1D:35:74:AA:22:7E:22:D3:E6:9C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584068AD54F7FF15CB36FF9BDA84
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6e232203-af4e-3898-9f82-a36d091d7936.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:ad:54:f7:ff:15:cb:36:ff:9b:da:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=fcc671ad-bfb0-4f99-b7dd-a1f2fac47222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:7b:bb:ef:7c:96:53:45:9b:9a:cd:81:bb:69:
76:68:d3:c7:71:5a:64:cc:f2:93:47:fa:58:fc:d1:
5b:30:b3:16:3c:3c:90:08:fa:63:1a:9c:1e:78:47:
2f:f9:38:7b:53:c4:7f:93:0f:4d:92:28:7f:18:f0:
64:d8:43:e9:44:a7:d5:3c:34:15:67:4d:30:68:48:
ea:ff:65:9a:49:02:88:fb:09:ce:bc:40:2e:c6:63:
f3:3f:98:58:41:89:f6:9e:72:83:b9:98:a0:42:2d:
af:19:ef:46:97:97:1e:2e:a5:3a:78:53:e9:9c:a7:
a6:7a:fc:84:02:ea:f2:4b:d2:37:5f:bd:df:98:b0:
11:c5:44:27:a7:dd:de:30:4e:7f:2f:22:c0:23:14:
c4:97:72:3c:ab:ba:04:cb:72:33:32:43:0a:0c:4c:
bc:9b:1c:b7:2b:e3:cf:3b:2a:f5:07:1f:93:20:45:
7c:76:4a:f3:5f:d4:be:92:8e:d9:fb:5b:15:96:e7:
48:3f:79:84:c8:d7:40:00:4b:de:e4:cd:2c:6c:b0:
06:1e:39:c3:b7:12:51:a7:c6:79:68:00:31:d6:98:
46:23:b5:db:ab:0a:a1:6b:30:84:6b:59:17:10:9f:
6a:c1:39:36:b1:f0:04:96:1b:17:25:9d:21:e0:e0:
b6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:02:EC:CF:F3:35:1C:C9:A1:54:1D:35:74:AA:22:7E:22:D3:E6:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/6e232203-af4e-3898-9f82-a36d091d7936.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.108.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:b5:61:6b:23:e2:ea:33:0d:ca:50:df:d2:c3:d3:3d:f6:60:
4d:b5:b8:74:4b:99:2d:81:2b:2f:4b:a0:bb:ff:c2:f0:08:b8:
26:bf:23:66:c6:c3:1d:ce:f1:83:6b:bb:3e:6a:e7:e3:8b:e6:
54:f1:28:1f:d1:a9:11:d4:b9:18:9f:7c:0f:ec:77:ff:fb:fc:
4a:c4:e2:38:a3:71:7f:02:0e:8e:6c:48:09:55:ed:21:ff:6a:
92:55:4b:75:89:6f:cb:b6:d1:43:dd:27:6c:f1:d7:34:15:ec:
c6:45:8a:e1:ab:22:79:13:1f:9c:e7:75:85:6d:a6:ab:87:54:
1a:f9:1d:a3:57:02:e3:8c:ec:14:d0:ea:20:60:ba:20:1d:ec:
53:83:02:fb:76:4d:3b:dc:fb:6d:ac:1d:3f:0e:30:47:53:6a:
9a:09:e6:62:e0:3b:3a:cd:04:f2:ef:74:00:4d:c6:ac:a7:15:
10:d3:23:81:65:bf:6b:41:d9:eb:a6:97:12:8a:4f:de:14:54:
0c:5e:ea:8f:60:b0:ca:ff:cc:33:bd:bb:ac:a8:dc:04:c0:cc:
b3:0f:21:d4:61:49:6e:2a:a3:5f:3f:3f:89:89:23:be:a5:6d:
1e:60:08:98:b5:69:62:ab:37:c3:20:cc:c0:8f:87:a4:df:64:
4f:30:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:49:40 2025 by rpki-client