Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ea43552-8343-3c47-8a10-0f071ed077fc.roa
File: 8ea43552-8343-3c47-8a10-0f071ed077fc.roa (raw, json)
Hash identifier: 2C3dDV0N6DiECzj3LS/pYQXFT35wQBaOc66ZT+oroQs=
Subject key identifier: 67:DC:F5:16:16:94:0A:92:22:AF:23:7D:93:58:D7:CE:CF:8E:D5:58
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FCB43C9C7E39005E6B7DA1E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ea43552-8343-3c47-8a10-0f071ed077fc.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.157.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:43:c9:c7:e3:90:05:e6:b7:da:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=44e1a0d6-b457-4936-8561-c21a8cefb6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:f5:46:a8:bd:f4:d0:9e:0e:e3:a0:d8:75:
e8:e7:5c:53:af:fc:02:ad:4c:90:5d:12:8f:57:d5:
c5:a2:3c:4f:7b:d5:7c:e0:32:78:c0:40:de:fe:df:
bd:d1:3f:a2:b5:df:76:62:13:fc:8f:15:ef:03:fa:
de:92:a7:0d:e7:60:89:16:fd:25:af:67:c6:c7:96:
65:3d:67:7f:9a:70:81:26:1e:c4:dc:f2:ad:f0:27:
d8:0d:2b:14:ee:d3:dc:76:39:da:02:33:37:d3:50:
5c:ac:b2:24:d8:1d:66:5f:a5:20:39:3d:fb:a2:67:
a8:80:51:91:92:b2:de:54:1b:69:1c:4b:21:4d:0b:
7e:21:a4:46:15:24:64:9c:8d:ca:9d:4e:bf:38:6b:
52:b8:cc:f1:08:f1:69:cc:e3:46:76:fc:2e:72:f0:
85:51:03:ea:b8:4d:c1:69:cd:de:2b:d4:95:c5:31:
18:ae:77:14:01:c1:bd:ba:5d:58:bd:e4:c2:17:32:
6e:8c:73:a1:08:cf:d6:ba:80:3b:20:bc:65:b5:40:
05:2c:ef:1a:ef:f8:c1:9c:2b:1f:b4:1b:f2:a7:2c:
a6:8d:d2:df:df:10:4c:61:e8:7d:66:82:79:9f:5b:
de:6f:ac:a6:47:aa:fd:4b:91:8e:83:28:1b:a3:53:
a4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DC:F5:16:16:94:0A:92:22:AF:23:7D:93:58:D7:CE:CF:8E:D5:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/8ea43552-8343-3c47-8a10-0f071ed077fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.157.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:01:63:0c:00:20:92:91:03:1e:ee:73:e6:25:54:d6:10:89:
c7:0c:79:8d:93:b7:03:9e:29:b9:5e:b3:45:8d:08:19:93:35:
6f:f6:f3:33:b1:ed:94:55:89:a7:4b:ca:38:7f:e0:0f:8c:96:
c2:5f:b1:e5:d0:d0:62:bb:1c:b9:1f:6e:c7:10:ee:d2:b0:79:
d2:e3:1c:cf:29:b3:dd:99:2c:73:52:0a:e6:d6:a5:3e:cd:2c:
dc:48:e0:de:af:07:25:b5:23:ea:5e:22:e6:f1:cb:85:07:df:
61:51:39:37:40:ac:e1:1f:22:78:28:d5:ff:7e:d0:e4:0f:a3:
e8:57:b3:72:a1:6e:7e:5c:40:da:3c:c6:28:53:ac:a3:2a:f0:
5e:b9:34:84:be:44:14:9e:cc:9a:56:b3:87:ec:b4:d6:b0:6f:
2c:9b:13:a3:fe:8b:b7:59:81:aa:cd:17:f7:eb:c1:d5:82:4c:
52:9c:78:76:b7:4d:72:dc:15:77:c3:fe:f7:e9:10:d9:30:04:
dd:19:25:d0:55:b0:b8:f9:8e:97:2e:2d:a2:a7:d4:1c:d2:b9:
55:a2:f7:d3:74:7f:c3:d2:d1:a8:a0:c1:89:9a:f1:eb:cc:e8:
9b:8f:34:e4:14:35:41:7d:c2:60:65:b6:4c:79:65:17:6c:f6:
3f:af:c0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:30 2025 by rpki-client