Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94125dfc-70ec-3739-a998-493238db0dac.roa
File: 94125dfc-70ec-3739-a998-493238db0dac.roa (raw, json)
Hash identifier: tU/MwBUHE5+B8kFoURdXnQYpCd1GknBzV6WqTeDa4ak=
Subject key identifier: 3E:10:09:1A:BC:26:2B:EC:E0:F3:B6:04:90:F4:7A:E3:87:E5:3D:F3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858407281B209CAE41EC9707B1AC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94125dfc-70ec-3739-a998-493238db0dac.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:72:81:b2:09:ca:e4:1e:c9:70:7b:1a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=b9bf7955-e790-419c-bc49-0cc30d0101c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7e:d7:89:ed:55:b7:17:0f:c5:77:11:86:61:
42:e8:2c:05:92:50:ba:cd:55:b4:8d:cf:f0:0a:97:
99:a7:26:d9:1d:0b:af:de:73:cb:d5:c0:2e:4d:7f:
40:b6:65:ac:ce:9a:83:18:c1:5e:7e:42:95:3e:3c:
bc:1e:e2:08:50:20:f1:42:62:71:ab:99:69:84:bc:
d5:45:db:8e:e3:74:99:43:e6:f8:b7:fe:4e:18:68:
57:51:e5:76:d2:2e:cd:c5:c5:95:98:28:24:b8:79:
53:56:a2:0d:78:a5:d6:59:29:82:9e:8c:24:7c:7a:
0f:2c:6c:62:90:50:81:1d:f5:fe:d1:68:df:5b:4c:
0a:2f:44:55:ea:3e:4a:10:7f:f9:a6:55:27:45:58:
35:9a:c8:eb:76:8c:81:79:c3:27:cc:fb:ff:17:c3:
b2:e1:c3:5b:1c:f0:bc:0a:a0:91:06:31:36:ff:02:
08:41:7b:53:f9:57:d6:17:48:18:b2:a0:6f:18:e8:
6f:6b:da:5d:8b:fb:4b:d5:cf:22:77:27:87:a2:90:
34:2b:64:f2:3b:da:81:e3:61:8f:fd:7d:f0:88:2b:
7d:d5:86:44:4a:69:5c:27:38:0f:42:02:1d:f0:e5:
07:96:99:5d:a4:72:7e:cc:b9:2b:0b:fe:7a:c2:fb:
81:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:09:1A:BC:26:2B:EC:E0:F3:B6:04:90:F4:7A:E3:87:E5:3D:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94125dfc-70ec-3739-a998-493238db0dac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:ff:97:47:e7:76:8a:e1:fb:51:c9:a2:2c:f9:51:c6:de:6d:
4b:55:99:c4:67:92:3e:f6:79:28:b8:87:7e:93:14:6d:6b:c3:
93:d7:7d:2e:4a:13:93:2f:f4:07:ed:e1:7a:d5:b4:17:51:b1:
58:0b:ad:cf:62:b2:ac:cf:6d:28:8b:12:b5:62:53:59:1b:f4:
af:33:0d:01:1d:1e:ef:66:6e:39:35:6d:48:69:e8:3b:f4:78:
2e:81:d7:1a:c8:9a:c4:ca:b3:a6:11:25:ca:d5:5a:5e:af:a3:
5d:be:d1:f6:d0:2b:0f:af:9b:32:ba:f8:0b:e1:7c:41:d9:6a:
97:e1:64:29:b1:06:83:93:47:f6:f6:af:57:af:a9:ad:b4:27:
b1:6d:fe:3b:23:be:56:30:78:ac:a5:32:45:f7:08:52:8d:a8:
03:a2:dd:bd:8e:af:ca:e1:d8:75:d8:da:fa:f9:54:d4:05:20:
24:6c:cd:8e:34:12:dd:20:a0:4e:49:d8:cd:47:cb:ea:f6:5a:
f6:ef:83:bd:57:91:d8:16:90:05:4f:01:6b:53:0a:b4:45:16:
85:9b:8c:9e:a4:bb:b0:44:f9:2b:92:d4:a0:d3:cf:84:28:c9:
81:93:48:f9:12:05:66:71:ca:63:ab:89:d3:f2:59:95:79:6c:
67:6d:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:25:24 2025 by rpki-client