Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9547d27a-2c10-3ab5-aac0-f4ea96b7f3a6.roa
File: 9547d27a-2c10-3ab5-aac0-f4ea96b7f3a6.roa (raw, json)
Hash identifier: ZPrgmL6JaV+3Jqe6/XSjq6sbA9z/Fya3Fb6YWAMFvgI=
Subject key identifier: D3:FA:0B:A1:07:79:40:EC:B9:4A:9B:AD:BE:F8:C1:F0:71:7E:EF:13
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F56BD1F747975E35C85C840C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9547d27a-2c10-3ab5-aac0-f4ea96b7f3a6.roa
Signing time: Thu 22 Sep 2022 12:00:00 +0000
ROA not before: Thu 22 Sep 2022 12:00:00 +0000
ROA not after: Fri 28 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.189.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:56:bd:1f:74:79:75:e3:5c:85:c8:40:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 22 12:00:00 2022 GMT
Not After : Oct 28 04:00:00 2022 GMT
Subject: CN=6864c775-4bfd-4140-b1dc-d3cce1b9b83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:eb:f4:9b:ad:34:f3:78:34:c1:d2:c6:24:13:
6c:ea:17:9b:14:b1:9c:a4:73:5a:47:05:62:4d:52:
4d:25:b7:0a:b5:4f:11:4e:56:af:52:aa:b9:c7:c8:
44:c9:db:a5:63:34:57:08:a3:3f:4e:b3:43:2b:a7:
00:1a:a7:55:e3:37:6b:4e:a1:e4:b6:29:e7:c4:9c:
95:e3:4c:4f:89:0a:8e:de:fc:18:81:7e:7c:3e:20:
82:9a:d2:7f:05:07:31:be:b0:60:07:05:4d:84:84:
33:a2:9f:83:5e:7a:b2:df:d0:3d:8e:c0:24:08:87:
02:ad:ff:ac:57:0a:85:de:0c:22:06:9c:85:1f:a5:
ca:82:f7:11:f5:ff:37:8b:74:8c:da:53:b0:2b:65:
ae:a1:51:fe:1d:2c:0c:73:32:4b:3e:e8:15:08:e5:
0c:05:90:52:4a:14:d2:81:44:d7:13:16:e0:c1:0c:
78:4d:5e:2e:52:6c:20:65:fe:0d:5a:17:9b:10:16:
11:29:8d:09:52:a1:bd:55:da:ca:47:b0:14:3d:1f:
a7:76:0d:da:9d:2c:21:19:66:85:6c:ef:b4:6b:66:
a7:63:03:db:63:f0:33:2f:f8:49:e9:f5:a3:5d:35:
cc:86:2c:98:80:b7:06:87:57:79:79:2d:99:69:61:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FA:0B:A1:07:79:40:EC:B9:4A:9B:AD:BE:F8:C1:F0:71:7E:EF:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9547d27a-2c10-3ab5-aac0-f4ea96b7f3a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.189.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:11:e4:1c:69:1e:2a:dc:d1:f7:97:c2:d3:98:b4:a4:10:ea:
17:bc:c6:31:8f:17:e1:46:6e:74:6e:59:f2:30:d1:78:9f:85:
80:c8:70:67:0c:4a:6a:f8:ee:5e:72:13:29:a3:29:93:5f:5e:
49:89:fb:b4:67:96:30:1a:cd:4b:c1:54:95:20:de:02:13:c7:
ec:44:fd:54:3e:db:74:4e:bd:8d:b5:a1:24:ba:fe:d2:0c:63:
67:fa:20:b8:24:81:3c:49:5b:6b:35:97:fb:64:e0:30:22:98:
be:7c:5c:ad:27:c5:f6:1d:c9:37:33:ef:05:3f:47:fd:e2:e1:
2e:74:cb:c4:37:4e:25:5d:d9:08:8b:21:09:bf:7a:83:3b:56:
a8:83:1d:6d:de:1b:05:29:03:48:2e:b7:82:32:d9:fd:72:25:
9c:6e:a6:2b:d0:c6:4f:28:16:0c:75:b5:fe:3f:02:54:0f:70:
6d:4a:00:36:03:13:c3:33:12:88:32:71:72:c4:15:2a:aa:c2:
c1:c8:f5:5c:0e:df:bf:ac:dd:7c:96:80:e1:36:20:5e:fc:e3:
4c:8b:b5:28:a9:4c:01:d7:c5:b5:df:e4:b3:07:56:a1:d5:f5:
9f:ac:e8:ed:cd:d0:97:30:01:77:7a:f3:ab:f4:34:b1:da:12:
7d:00:28:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:21 2025 by rpki-client