Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a434415-e4ab-3f65-b159-be01c70cae6f.roa
File: 8a434415-e4ab-3f65-b159-be01c70cae6f.roa (raw, json)
Hash identifier: as+i2CJ4KkFVjPH8TcvZdHxeDFbNJv+fS9iDJI7Qcks=
Subject key identifier: 2B:17:8D:A8:30:3C:D3:F7:6E:B3:1F:5D:2C:5A:73:E5:0C:F7:DC:89
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF34F02C5A3127B774BD2F980
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a434415-e4ab-3f65-b159-be01c70cae6f.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f3:4f:02:c5:a3:12:7b:77:4b:d2:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=196c2a1e-d7cb-4e8b-bd8b-db5bd88359e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:08:e2:a8:1c:da:96:0a:33:16:6d:72:ad:
6a:61:41:39:64:d0:32:b8:61:85:0f:8f:3b:81:cc:
b6:95:17:8c:9c:85:70:9e:1f:b6:09:9b:29:61:44:
35:bf:bf:d8:fb:e3:6e:3e:e5:56:aa:2e:a7:af:d0:
af:15:8e:d3:78:11:c0:67:ae:94:6c:4c:95:46:a6:
b0:07:a8:92:2f:c5:68:7a:8c:9f:9a:a2:2e:12:24:
9f:aa:86:1c:0f:3a:3c:9c:23:37:f6:71:ad:cf:71:
59:77:03:eb:a0:2b:24:ae:6e:ad:2f:a2:3e:2e:b0:
67:09:b2:a9:e5:74:8a:09:22:76:06:c3:20:09:a1:
98:2a:d5:b0:ea:19:48:7a:22:77:e1:56:09:3d:fc:
30:2c:e9:ca:63:6a:54:7b:ed:72:ca:4e:80:25:28:
bb:0c:8c:4b:46:49:a3:8e:f2:17:2c:27:6c:be:17:
69:ab:43:1d:4e:a0:91:06:3e:59:b0:58:2d:2e:cf:
90:d4:cc:e5:6d:ce:8d:90:ff:74:42:d4:d4:16:df:
24:00:61:8b:95:75:26:ab:d2:95:8f:0c:d0:f8:ed:
22:91:f1:78:2d:64:03:6d:af:4e:cb:8c:13:e5:ca:
2f:eb:b3:de:f8:a4:fa:be:d6:68:87:d0:6b:39:f3:
94:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:17:8D:A8:30:3C:D3:F7:6E:B3:1F:5D:2C:5A:73:E5:0C:F7:DC:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8a434415-e4ab-3f65-b159-be01c70cae6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.108.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:79:80:e8:62:a9:7a:f4:13:2d:41:f3:96:db:21:c4:7a:f9:
68:36:c6:a7:43:f0:f6:b7:21:23:a8:cd:70:2f:f1:0b:0f:8d:
a5:b4:7e:ce:08:bc:e5:11:c1:08:44:db:c6:b0:50:8b:5d:80:
ee:fc:4f:ad:36:5b:66:3f:bb:5b:89:a1:8d:5b:08:54:c5:48:
7a:68:46:4a:f1:3a:f4:62:6e:0e:94:86:78:ff:36:21:9b:29:
e5:79:5e:f1:c9:2e:76:46:34:0b:fc:5d:e5:02:e3:61:84:ea:
03:c1:42:8b:85:9d:a2:f9:bc:e8:cf:6d:89:c0:cc:3e:ad:08:
29:16:38:dd:c8:dd:4c:f9:79:d8:e2:9a:af:1d:b1:8e:01:ea:
c1:b8:14:3b:2a:09:b4:23:42:b0:d4:1c:97:c4:b0:47:82:7c:
95:08:85:f1:1f:ac:b7:e9:9e:61:e2:33:1d:ef:4d:82:05:a2:
4d:df:e8:8e:1f:13:14:9f:04:db:96:84:57:6d:8e:ba:25:0a:
63:f3:9f:be:01:6d:78:49:31:ec:ae:ba:7c:49:78:68:2c:2b:
29:b9:00:c8:37:41:59:5d:1f:59:f2:24:e9:aa:8c:b8:51:47:
1e:84:4e:07:90:55:ee:a7:ba:89:e2:b0:6d:1a:d6:2d:fc:2a:
4c:29:a6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:32:40 2025 by rpki-client