Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cfa19a9-50c4-3721-ad6f-64ede133d100.roa
File: 8cfa19a9-50c4-3721-ad6f-64ede133d100.roa (raw, json)
Hash identifier: P13V2vqe+ZgkYF+1bRhWptixxNfhzmwxeQwpSZduAj0=
Subject key identifier: C2:66:75:06:CE:0B:A6:07:83:D9:F8:B9:99:5B:4F:BE:FF:AE:A0:68
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401F13270750302DC102BBA6C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cfa19a9-50c4-3721-ad6f-64ede133d100.roa
Signing time: Sat 03 Dec 2022 12:00:00 +0000
ROA not before: Sat 03 Dec 2022 12:00:00 +0000
ROA not after: Sun 08 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.168.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1f:13:27:07:50:30:2d:c1:02:bb:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 3 12:00:00 2022 GMT
Not After : Jan 8 05:00:00 2023 GMT
Subject: CN=d3560af9-e32f-465b-9e82-60c6fcbf4612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:ec:bd:61:b4:34:14:1e:ee:30:4a:ce:43:
57:a1:91:91:30:5f:30:68:05:b3:34:c3:fc:f7:54:
c8:f3:e6:1b:6c:e3:5e:09:b2:42:03:cf:6a:27:6f:
46:33:d2:0b:0e:a4:67:3d:ef:29:9b:8b:9e:df:d5:
08:25:6a:10:bb:35:19:65:44:52:82:4c:04:63:a6:
4c:2c:19:67:e1:7e:4c:62:69:db:4d:da:ff:05:08:
1b:6a:78:0e:e1:0a:6a:57:d9:88:08:40:92:e6:d5:
b5:7e:ab:a1:f5:94:a7:aa:bf:da:7f:2e:2a:4e:eb:
8f:6d:b1:02:48:da:57:5f:df:14:f8:0f:6b:13:81:
5f:11:92:84:45:ea:95:37:12:b3:a9:a4:41:cb:4e:
32:26:21:e6:ec:03:0d:3e:0f:3b:eb:74:37:3f:0f:
94:e7:4e:80:00:83:81:e0:0f:47:e0:d0:5e:fa:3c:
d2:c9:3b:27:92:b9:09:b0:76:5c:90:94:d6:97:89:
03:42:99:8b:b5:84:d0:53:d0:00:fc:72:3b:04:80:
74:27:87:a8:85:47:37:15:db:2b:0c:1a:4d:52:51:
70:6b:4c:3d:6f:e9:1f:8b:4d:b8:e8:81:53:9e:c2:
b4:2d:0b:b0:ea:b5:de:59:59:e3:78:f2:83:e4:e0:
6f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:66:75:06:CE:0B:A6:07:83:D9:F8:B9:99:5B:4F:BE:FF:AE:A0:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8cfa19a9-50c4-3721-ad6f-64ede133d100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.168.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:16:04:e3:73:72:6e:8e:20:24:13:56:ae:0f:b1:bd:4a:2e:
be:db:c8:b3:33:b4:93:e8:aa:02:d3:8a:3f:12:d8:b9:bd:7b:
68:78:7e:8a:56:03:61:b7:f6:85:30:ce:fc:a4:22:19:57:c1:
b3:42:00:bf:d4:dd:b5:98:d8:b3:83:97:d6:60:26:a6:e6:08:
f9:eb:ad:77:fb:d1:f3:c1:38:58:cf:91:cb:2e:f6:54:4a:53:
2f:5a:6f:43:07:60:d1:b6:73:e8:23:e7:60:9c:e0:3d:d0:c9:
f3:9e:5a:45:e6:6b:aa:b2:1a:01:12:b0:86:70:39:a8:4f:d9:
02:80:82:0d:fc:23:a4:41:f8:d6:69:52:c9:80:f8:0e:38:c2:
b9:9b:f5:13:7d:85:55:24:bb:67:6b:c7:52:3e:58:f7:68:31:
66:84:b0:6f:c2:fa:7b:09:94:d2:9d:a0:87:d5:6e:e5:e2:4f:
65:e8:77:8f:49:8f:85:62:bb:0a:ff:68:5b:91:1a:ea:05:55:
d1:c8:dd:c8:1a:a0:b0:f9:47:56:f0:ed:71:28:2d:70:27:03:
b0:b0:88:6d:23:4b:71:3d:e3:4a:64:4f:8d:0f:17:91:15:e6:
15:1f:c4:aa:bc:04:31:79:23:6e:2e:e5:38:87:30:a2:2b:39:
ef:37:bd:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:46:17 2025 by rpki-client