Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/838bc29c-e953-30de-a97b-dddd2cf8156a.roa
File: 838bc29c-e953-30de-a97b-dddd2cf8156a.roa (raw, json)
Hash identifier: B3qC+Nz60NX2iFLMnx6cHNlFJ9izUMQ9hciH5b6nPJI=
Subject key identifier: FD:8F:4A:D4:91:57:3B:12:06:85:3E:22:FF:42:1A:1C:D4:56:A0:A4
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404B5D2471419C53A69559B2C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/838bc29c-e953-30de-a97b-dddd2cf8156a.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.112.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:5d:24:71:41:9c:53:a6:95:59:b2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=42f33755-ec03-40bc-9f89-42c40c99f3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:17:34:2a:c2:66:b6:43:6c:d5:e0:4a:d2:35:
4f:31:c7:1c:52:b3:98:b2:ec:5a:ca:88:c5:27:c3:
a6:f1:f1:ec:1a:2d:b4:63:d5:ee:07:b3:7f:47:ee:
5e:41:2e:cb:5a:34:a3:ff:c3:30:47:ea:31:67:57:
7e:19:92:db:b5:eb:99:11:92:b1:02:ce:93:67:3b:
65:21:d4:70:39:93:ce:da:13:14:ad:46:ff:b7:1d:
6c:85:75:24:76:29:ad:2f:b3:5e:d8:c0:0b:d5:53:
17:e4:5f:e0:01:45:62:2a:09:d9:33:e9:70:83:05:
09:a5:7a:78:2b:ad:3d:7a:fe:44:4b:fe:fd:65:13:
d4:54:b8:d2:9c:d3:03:92:a3:64:39:cc:14:62:f4:
f9:80:53:73:99:53:74:aa:5c:a5:f6:a8:35:48:ca:
e6:87:30:2f:18:30:5d:d6:0e:c5:52:14:32:93:d4:
c4:2a:26:ea:a8:18:0e:2b:85:da:91:62:3a:d0:40:
4a:1e:ea:a0:2d:00:d3:04:32:fb:9e:4b:09:5e:9e:
e9:5a:ec:fe:f8:b0:d3:3e:ae:0a:01:59:be:75:18:
3c:a0:a1:bc:45:46:78:81:82:23:af:8e:fd:b9:8f:
ef:e1:6e:cf:56:4d:d3:47:cc:55:1b:61:9c:00:e0:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8F:4A:D4:91:57:3B:12:06:85:3E:22:FF:42:1A:1C:D4:56:A0:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/838bc29c-e953-30de-a97b-dddd2cf8156a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.112.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:f6:e0:21:1e:5a:59:9e:6c:fe:19:44:9f:9b:14:e1:b8:fc:
4b:75:74:5c:0f:d1:bc:76:3d:e3:15:73:b2:fb:e9:cc:e8:fa:
55:f8:45:06:1c:dd:c0:25:39:bc:39:44:08:3d:f8:40:6f:bc:
f3:d0:7b:f0:89:df:1b:81:15:6a:0a:59:dd:45:dd:09:0b:2e:
65:f3:d7:bb:cb:bb:a9:d8:7c:b4:47:01:ca:65:12:3a:2b:2b:
97:9c:b7:70:ad:2f:32:f2:e2:a4:5c:2e:5a:56:39:79:97:ac:
73:02:64:a2:74:66:75:ef:96:29:36:75:67:19:8d:2f:5c:9c:
b6:4a:d2:3d:c7:bc:17:cd:70:76:9a:d1:fb:37:8a:82:ef:d5:
5b:8a:68:3e:54:c9:2d:8f:bd:47:2b:b5:a9:0a:f7:e0:73:92:
5b:ba:11:96:fb:1d:00:90:7b:2c:1f:05:46:aa:4a:68:f1:19:
9a:5d:66:44:af:9a:09:ab:4c:b3:8f:c7:18:9d:96:4f:40:83:
d9:90:8a:8b:69:9a:1e:87:35:d5:38:14:7c:69:7e:b3:4f:6e:
bb:ec:d0:fa:99:a7:9a:4b:cf:b5:ca:c8:03:85:23:aa:8b:61:
7b:86:0e:b2:f7:da:03:9b:ee:a5:71:e2:d5:51:6d:ad:d1:3b:
f9:5d:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:59 2025 by rpki-client