Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80fa2a89-1ebd-3b61-b004-c549dc1718da.roa
File: 80fa2a89-1ebd-3b61-b004-c549dc1718da.roa (raw, json)
Hash identifier: QA6gIDQiHtzBYj5LW+rL7lhqD3/0d8pq/8jQEPv7aEc=
Subject key identifier: 4B:15:14:90:F2:2A:C9:AA:99:60:B8:28:6C:F4:C2:1C:75:07:E9:E9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840197653CB7F2593518A1A2200
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80fa2a89-1ebd-3b61-b004-c549dc1718da.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.17.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:76:53:cb:7f:25:93:51:8a:1a:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=868c3b81-46b8-4359-ad54-0ff5471aa578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:e0:91:c7:94:f4:85:b9:49:a1:33:a1:ad:
47:a5:02:7b:32:76:03:7c:af:e1:64:51:19:03:9e:
78:7a:5b:b8:d6:95:e1:72:c3:1b:8c:c7:7b:6d:25:
a8:b3:2a:d5:c0:cb:2b:11:24:79:81:a3:17:4e:b2:
a4:93:bf:81:29:ea:df:3c:5e:ce:b7:96:de:ad:99:
b4:c8:14:33:04:08:43:fa:a7:d9:00:a0:59:b9:c2:
e8:e2:ba:25:a8:fd:8b:9f:d7:0d:bc:a8:23:cd:57:
d7:e9:f3:dd:7a:6c:4e:89:df:de:11:a3:21:ab:ea:
16:bb:11:2f:e9:7c:e6:92:95:3d:ac:d7:38:82:84:
8e:5e:88:66:5e:a1:f7:da:8a:33:42:01:52:15:66:
35:2a:f8:b4:cf:6d:67:90:b1:d9:1c:1f:4b:fd:dc:
27:f8:38:a1:10:85:52:4a:f1:70:0d:f3:45:6b:57:
2d:d9:f2:19:a2:ab:fc:b2:a1:d6:39:92:f1:97:cd:
e9:81:a2:02:5e:aa:0c:a0:da:e5:38:85:af:78:16:
91:a5:49:2b:27:3f:06:ee:e7:d9:37:6d:8a:82:e9:
5f:68:1b:ce:d9:ff:5f:25:cf:81:d9:6c:72:c9:7f:
e7:b3:eb:fa:1c:12:a8:01:ac:9b:73:bc:90:71:19:
af:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:15:14:90:F2:2A:C9:AA:99:60:B8:28:6C:F4:C2:1C:75:07:E9:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/80fa2a89-1ebd-3b61-b004-c549dc1718da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:f5:ba:c7:ba:01:da:b0:e4:68:87:6e:13:08:cb:c5:fe:f8:
80:40:e1:30:69:43:87:63:96:b1:38:e8:ce:56:aa:1e:c0:fc:
f8:17:bb:c3:a0:66:d4:b1:8c:e8:56:c7:6f:d7:b6:57:fc:40:
81:59:89:ad:67:31:50:f6:b2:e2:4d:2d:ea:da:68:11:4c:f0:
21:80:ab:73:59:57:88:f2:5c:b4:bd:27:9a:ca:74:47:5e:cd:
f7:35:dd:64:3d:84:eb:12:9e:9b:bf:b0:89:3e:17:c0:a9:88:
36:a9:b2:0b:da:a6:ff:45:6c:23:de:ec:fc:ae:37:1d:ec:5e:
82:a9:a6:ed:79:8d:38:f8:60:85:b0:4f:52:0f:f1:69:f9:b3:
12:2d:0c:bd:ff:34:82:71:5a:5f:30:f7:86:5e:39:0f:6b:4f:
a9:fa:d4:78:9c:0e:96:0e:b4:d3:91:20:9e:4b:aa:33:9d:b3:
a0:85:b0:7f:e8:3a:fb:17:5d:b1:44:fc:25:9b:df:b2:1d:62:
3c:e3:35:c8:17:1d:49:f0:da:83:cf:7e:0f:12:ff:6d:ab:61:
70:bf:5d:7c:ef:d2:15:37:23:64:18:16:7c:3b:e8:98:af:11:
57:f0:b9:11:ab:8c:af:c3:11:5c:43:8a:32:26:39:04:77:8e:
ac:68:f2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:57 2025 by rpki-client