Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8027a4b3-a97e-3d1b-a8e7-8ab338739b7a.roa
File: 8027a4b3-a97e-3d1b-a8e7-8ab338739b7a.roa (raw, json)
Hash identifier: U0IIL52aZa2Wv66R0KweYVikVSsGLR6j32VcakMoi6M=
Subject key identifier: CC:50:9D:16:AB:E8:90:2C:E8:5A:06:93:5E:3F:18:A6:ED:0A:B4:15
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584068886F264D6DBBAB1559B100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8027a4b3-a97e-3d1b-a8e7-8ab338739b7a.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:88:6f:26:4d:6d:bb:ab:15:59:b1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=c036b3ca-dc43-40b2-87d1-4a002295f8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a3:0b:ea:36:64:ef:c1:3b:17:52:e7:b6:1a:
e9:90:30:31:b9:1f:bf:76:22:07:2f:b2:52:9d:23:
46:19:cf:68:7a:90:d7:3b:aa:05:61:3a:02:da:e8:
74:0a:2f:d7:72:51:1d:16:df:af:ce:f3:1e:a1:80:
21:0c:5f:e3:25:1b:46:23:05:53:cb:22:34:d3:13:
23:7b:a5:51:f7:ef:dc:9e:12:3d:45:17:c1:4b:16:
8f:a1:9f:fb:29:23:19:af:69:1a:67:0b:bd:d3:ec:
19:6e:88:a4:20:63:56:84:50:be:81:3f:16:e7:57:
65:d7:a0:ca:9b:ba:c9:84:cd:e7:4e:fc:5d:60:95:
65:cb:09:da:bf:d0:09:0f:f1:68:f7:56:85:72:7a:
e0:fe:70:41:18:8e:2d:e4:7b:f3:7f:54:f3:ff:74:
c4:1f:c4:75:53:0b:d8:93:69:87:64:e0:d0:e8:b5:
12:20:a8:51:e5:ed:db:4c:0d:84:46:4d:24:a9:73:
0e:90:17:d4:30:49:44:9b:eb:5e:ac:74:f8:be:24:
4b:15:5c:b8:5a:a1:6c:b1:02:54:c4:10:7f:75:f2:
d9:b1:70:82:21:c7:15:1d:52:6d:5a:15:8b:bb:5b:
29:7c:e2:34:6b:06:ab:7d:2e:9f:0e:0f:93:4e:59:
9c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:50:9D:16:AB:E8:90:2C:E8:5A:06:93:5E:3F:18:A6:ED:0A:B4:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8027a4b3-a97e-3d1b-a8e7-8ab338739b7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:c4:60:ad:c9:92:6d:5f:d1:a4:e2:65:c5:3c:fb:a8:4c:46:
69:3c:2f:d7:f6:54:d6:56:dc:f0:07:9e:0d:ae:1b:51:1d:13:
7b:c2:d7:84:31:49:ea:f1:25:64:3e:e7:89:48:25:ff:68:5b:
02:d7:d7:96:d0:7b:ff:31:ce:77:4c:48:62:cb:ac:72:c5:09:
03:3b:0b:8d:bb:99:d6:d6:70:4b:15:5d:05:07:96:f7:49:17:
6c:dc:10:03:6e:6c:71:5f:ed:5b:e1:85:7d:1e:2b:67:39:13:
97:cd:6d:21:09:c2:c2:ce:89:25:ef:2e:0d:b3:cd:7b:e9:7c:
65:6c:29:fe:27:45:93:f8:f5:2c:83:44:88:d7:8c:be:8b:ef:
fc:6b:b5:66:00:6a:c3:59:f8:7b:84:e4:f1:37:ac:2e:ce:b3:
53:72:21:1e:e7:27:39:16:bf:be:06:5b:9d:ad:76:39:f8:16:
dd:e7:9c:fe:46:50:83:08:c1:7b:84:f9:8c:2f:42:0d:ab:2a:
79:3e:2e:57:c9:be:aa:cc:57:f2:51:13:92:72:6b:70:b5:8f:
40:79:63:b1:59:67:d6:25:dd:a9:cf:4f:66:e3:99:37:b8:df:
2a:3d:27:40:42:e1:97:91:c0:f4:36:ad:91:10:85:61:7e:77:
ac:2d:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:57:39 2025 by rpki-client