Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/735d1e6f-ceff-3f02-8318-f0a71634a8ee.roa
File: 735d1e6f-ceff-3f02-8318-f0a71634a8ee.roa (raw, json)
Hash identifier: 0HEPQpwGUkD3mvIqpC1SaF+GenP+DYQ/fF9S5oDqFoc=
Subject key identifier: 6C:04:67:68:29:75:85:D2:9C:4A:0E:8B:1C:0B:4E:35:FC:BF:FA:E7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584067BF3BF2CF029EF6FE528BD0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/735d1e6f-ceff-3f02-8318-f0a71634a8ee.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.64.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:67:bf:3b:f2:cf:02:9e:f6:fe:52:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=974ff436-3afe-4400-bbd2-9a752a682db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c2:08:a5:62:5d:a6:01:ff:db:56:f7:95:ed:
b2:6d:87:ee:fd:02:54:42:c2:53:0c:9f:37:10:27:
5d:79:85:41:92:3f:7a:55:c6:f7:8e:c2:42:b6:75:
b2:43:63:56:46:61:f7:96:32:1e:71:bd:a0:b0:c1:
8c:0a:c2:5d:0b:92:52:2b:bb:db:21:de:c9:70:f1:
81:20:ee:0a:16:3c:c5:5e:42:da:c3:4d:52:02:ae:
15:52:d9:9b:46:dd:10:9c:27:94:33:16:d8:3f:3e:
e7:d3:3f:fd:63:12:be:0b:4f:d9:89:12:b5:14:e3:
fe:4a:e8:a6:b4:ad:c0:a2:7a:f1:9b:1d:a9:23:73:
bc:4d:87:6e:5a:fc:e5:e0:a2:5c:78:99:7f:43:41:
fa:86:72:81:0e:cd:c2:85:3e:7b:96:1f:30:a6:f4:
19:bd:42:58:32:45:26:31:7e:4d:7f:f0:1d:83:dc:
5c:a4:08:87:8f:60:14:e8:10:ea:89:fb:d8:0b:8b:
2e:3f:19:6e:05:64:65:da:53:3c:0a:dc:a7:53:01:
78:31:3c:9c:0a:9e:36:3e:a9:b8:ff:e0:59:dc:3d:
63:50:44:a5:32:db:48:f5:19:40:ed:f6:17:a2:a8:
68:5b:27:15:c4:18:79:be:25:ea:1b:67:f2:58:5a:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:04:67:68:29:75:85:D2:9C:4A:0E:8B:1C:0B:4E:35:FC:BF:FA:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/735d1e6f-ceff-3f02-8318-f0a71634a8ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.64.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:b8:64:6f:41:7b:ee:27:18:e2:0f:64:3c:4b:0d:a8:6b:1d:
af:be:73:1d:53:b3:8b:e9:50:c0:be:3c:ad:8e:b2:ac:fe:b9:
83:c6:0f:c9:ce:22:ce:75:b8:2c:d1:d5:19:18:ac:3c:d9:a9:
0c:f8:f5:8e:b7:f3:7f:32:09:ab:2b:fd:f9:d9:bd:99:1f:d7:
47:d1:fb:3d:06:df:23:42:f3:67:87:ce:cc:ea:27:8a:16:62:
cf:d9:b2:b1:59:71:e5:53:e8:a0:51:70:8d:66:c7:5f:8d:af:
37:51:f7:f3:a2:ee:0f:c0:3c:99:a5:5d:10:03:95:ed:8b:32:
ff:c2:51:8b:31:23:fb:c1:b9:49:33:48:e9:35:28:c0:ae:dc:
0b:e3:42:22:70:fd:9e:58:ed:64:93:cc:48:fb:ca:98:e4:e8:
7e:ab:46:b2:c6:59:b9:e3:4a:70:31:35:52:54:ba:7f:d7:c3:
9d:d1:0b:b7:de:a6:f5:91:df:3c:c6:31:8b:05:7f:b8:6b:73:
96:71:c8:5e:81:37:26:4d:29:1f:7a:13:cd:c2:b5:a9:c7:d4:
e5:26:61:2b:e5:15:94:bd:1b:81:46:93:1c:0e:5c:06:d3:f5:
d5:69:1b:ab:19:78:50:93:9e:73:78:ad:9c:1d:ab:a7:bf:2d:
e0:9b:03:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:35:41 2025 by rpki-client