Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94c8ab39-baca-37e0-96c5-8a4afc0d6e2a.roa
File: 94c8ab39-baca-37e0-96c5-8a4afc0d6e2a.roa (raw, json)
Hash identifier: t0HMbud/sQJHDC3rbwqYo+WlBlhsmDOeGS9AXuXp5ug=
Subject key identifier: BA:2C:CA:2F:BB:86:BC:23:14:CC:C5:64:6D:08:1B:77:3E:AD:E3:59
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402F97C209E1437C623C22B2CC
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94c8ab39-baca-37e0-96c5-8a4afc0d6e2a.roa
Signing time: Fri 09 Dec 2022 18:45:08 +0000
ROA not before: Fri 09 Dec 2022 18:45:08 +0000
ROA not after: Sat 14 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.28.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2f:97:c2:09:e1:43:7c:62:3c:22:b2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 9 18:45:08 2022 GMT
Not After : Jan 14 05:00:00 2023 GMT
Subject: CN=48e87acc-afac-496d-a36c-a7fe3dc75637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:1b:c1:9d:7f:ff:0b:cf:da:1f:ee:ce:fe:
8a:f3:ae:e3:08:05:24:70:73:69:18:4e:1d:be:11:
cf:fb:ed:91:c2:d0:b1:27:9a:64:14:ff:a7:b1:ad:
a9:2c:78:2c:96:94:8c:7b:d9:62:c5:1a:a8:f4:14:
f2:85:bc:a5:34:3d:9a:ee:08:20:c7:f4:07:f0:b4:
9d:1b:91:82:46:8f:39:37:3c:73:9a:e3:58:f1:5f:
3b:0c:31:49:6a:19:fe:80:ca:fa:95:c0:56:ce:c6:
05:98:62:53:5d:53:fd:0a:23:df:ab:79:fc:02:5c:
96:23:02:b8:17:93:9f:ac:a8:2d:8a:9b:09:f7:1a:
69:8a:dd:ef:ce:a4:0c:39:70:fa:7c:8a:fe:da:86:
e5:16:03:e9:99:b6:21:5e:50:0e:70:93:f8:61:5f:
5d:93:70:90:65:43:1b:f4:52:5c:35:cb:01:b7:71:
c5:71:06:2d:b7:83:5e:c5:00:ff:df:34:ca:90:8e:
7c:66:a1:5a:06:ba:34:92:88:24:f2:9c:0d:9f:b1:
11:84:90:e6:fe:ee:23:c5:a1:75:78:15:ed:d7:42:
a7:74:4f:cc:3b:e1:2b:e1:47:7f:52:81:79:df:54:
44:a3:f1:4f:af:56:1b:f2:50:6d:4b:64:45:de:06:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:CA:2F:BB:86:BC:23:14:CC:C5:64:6D:08:1B:77:3E:AD:E3:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/94c8ab39-baca-37e0-96c5-8a4afc0d6e2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.28.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:ec:26:17:82:80:5f:19:4c:0d:df:3c:a5:90:82:70:c8:10:
e5:cc:f8:a0:a7:f8:87:80:65:1f:5e:fa:32:87:e2:1d:8d:61:
6b:79:55:f4:f9:2a:9b:85:25:de:78:ed:a0:45:46:2f:79:0d:
39:1b:62:87:09:d8:82:b4:a8:62:20:2b:c0:e0:d4:48:66:39:
7a:43:99:47:27:9e:28:85:f9:9c:ac:6d:17:9b:72:82:4c:14:
3a:55:fc:b4:f2:d7:57:93:d5:ca:0d:2b:7e:bd:bf:58:61:a5:
9f:0a:18:98:51:91:7a:59:5f:f0:78:fb:6c:42:27:0a:f9:89:
33:91:c2:ca:76:7b:ab:c6:2b:98:12:f6:ef:c4:2d:1e:a0:cc:
24:62:ba:5a:9b:03:18:3f:0b:86:a2:b6:d3:2c:b2:8f:4c:1b:
fe:63:78:79:d5:7b:65:28:4e:1b:45:6d:15:3e:e4:2c:dd:9c:
c6:b9:d7:96:f5:cb:ee:9c:97:3d:4a:bb:dd:8c:b1:ab:43:1a:
f9:2b:fa:4d:58:ab:9d:08:86:8d:1c:4d:08:29:4a:10:b6:dc:
76:4d:26:81:60:a3:41:74:ed:4e:d9:6e:75:d9:99:c3:73:d8:
2b:42:d3:48:f0:41:c3:78:8f:b7:35:73:a6:61:a1:21:dd:7c:
5b:cf:b5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:06 2025 by rpki-client