Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93ef1ad5-f4eb-3fee-935c-af7627e5d0e2.roa
File: 93ef1ad5-f4eb-3fee-935c-af7627e5d0e2.roa (raw, json)
Hash identifier: mJ8rJ0AHb9xXzlvDEWxp8iMm1YSwIB+BJLZMFTmbiUI=
Subject key identifier: 29:46:B3:5C:CB:84:1B:D1:EB:EB:E4:A1:21:82:76:C7:40:15:CD:58
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C1FBEC4BC36F4BDF42690D80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93ef1ad5-f4eb-3fee-935c-af7627e5d0e2.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.154.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c1:fb:ec:4b:c3:6f:4b:df:42:69:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=05072761-834a-402f-95c1-d3a9ca7d5851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7b:58:7d:4c:77:69:61:22:45:0d:5d:cd:42:
0b:66:b3:ba:4d:b5:f2:71:86:34:75:59:e2:8f:1a:
eb:27:94:4d:b5:2a:74:38:84:9f:c5:20:07:71:95:
06:17:00:6c:25:9e:4a:23:ba:66:f0:03:67:83:98:
b0:ff:63:72:ec:db:cc:8d:d2:47:a9:b1:7a:8d:3d:
24:2f:eb:2f:8d:e4:75:31:67:65:26:5f:07:16:c5:
8d:c0:dd:bd:82:8a:94:74:7d:80:37:e7:90:c9:8a:
7e:e0:9e:11:b7:96:70:5c:12:b2:88:e9:0a:0c:78:
b5:a9:ab:95:10:96:2b:eb:35:1d:39:04:52:0b:85:
fe:9e:d5:63:28:68:65:47:cf:79:36:b9:7e:34:ca:
8a:17:df:d6:81:12:4b:96:a9:f5:fc:2f:ab:09:aa:
f4:5e:e8:ba:ab:6e:3c:e4:de:fa:58:13:cf:42:3a:
28:15:14:79:ea:a1:71:41:b4:c0:93:fa:6f:53:f6:
93:ac:ec:10:43:d8:a7:69:de:83:b8:2d:79:9b:60:
ff:53:1c:3e:7f:db:dc:23:8e:5c:ac:37:4d:0f:97:
1b:60:c1:c4:9d:5e:12:38:d1:72:42:a4:56:d6:30:
28:2a:b2:51:63:8c:2e:70:01:21:f2:5f:df:bb:6d:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:46:B3:5C:CB:84:1B:D1:EB:EB:E4:A1:21:82:76:C7:40:15:CD:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/93ef1ad5-f4eb-3fee-935c-af7627e5d0e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.154.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:6b:78:cc:19:e1:4e:dc:0e:aa:da:5f:c6:35:54:18:e6:b5:
46:4a:80:a2:c9:76:e2:a6:08:85:37:90:d1:ef:7b:c6:fc:44:
9e:58:78:70:e4:2f:10:6d:45:3b:3b:37:f4:6e:a0:aa:1e:30:
9a:49:0d:96:cc:33:6b:71:1c:4d:b8:03:c7:62:ef:c3:ed:7d:
d2:10:d4:81:fe:14:ea:87:10:b8:44:ea:11:0d:a4:69:05:40:
40:10:de:17:9e:b9:c1:0c:61:d4:5b:09:39:e4:d0:06:73:e2:
2e:49:59:1f:c5:d2:00:b9:e0:d6:88:39:b5:cc:a6:67:5e:53:
84:8f:e7:14:ea:85:80:1c:b4:16:46:5b:ee:d3:05:b8:86:c8:
70:dd:30:34:19:47:87:4b:66:31:70:50:ca:29:fa:77:6e:9d:
c9:2c:76:93:d3:a3:1a:e4:0b:14:d9:4c:f2:4e:8e:37:01:dd:
a9:7b:0f:42:7e:91:bc:79:df:ac:7a:fd:0d:0c:b9:20:38:6b:
10:48:8f:45:f0:63:15:36:62:a2:75:38:3e:a2:a8:43:43:43:
3a:8a:8f:65:51:98:b2:eb:b1:f7:99:ed:7b:79:3c:e3:94:28:
84:cd:0c:5e:ab:cb:38:f8:66:a7:41:9c:e8:e7:9e:4b:bb:18:
cf:d9:47:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:08:19 2025 by rpki-client