Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/964e55d7-bf78-31b0-8dc4-c6cde2516f1e.roa
File: 964e55d7-bf78-31b0-8dc4-c6cde2516f1e.roa (raw, json)
Hash identifier: RU98YovMG+VJ9ODxNgxf6EBoKIedbmqYZCkHp2Qk1Ww=
Subject key identifier: 2E:83:F3:AA:42:17:A9:A6:F5:AC:B7:9C:6D:BE:9C:39:09:8D:FF:F3
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CF4044DC981EF5E6A40E743C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/964e55d7-bf78-31b0-8dc4-c6cde2516f1e.roa
Signing time: Wed 16 Feb 2022 05:00:00 +0000
ROA not before: Wed 16 Feb 2022 05:00:00 +0000
ROA not after: Wed 23 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.165.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:f4:04:4d:c9:81:ef:5e:6a:40:e7:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 16 05:00:00 2022 GMT
Not After : Mar 23 04:00:00 2022 GMT
Subject: CN=0c8c69c4-ad9c-451e-ab87-4dda0fe7c3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:43:6d:92:9d:40:fd:8c:06:e8:43:f2:83:
d8:19:cb:30:28:b9:1a:f9:1a:09:89:1b:f9:92:e5:
b2:ee:97:7b:c5:f5:dd:2f:83:d8:c0:da:43:c3:30:
f5:17:3d:40:8b:cd:c4:53:aa:64:f8:3b:ce:07:e1:
43:83:a1:9f:ab:23:a5:d4:3c:8c:be:dc:51:60:fb:
6c:52:dc:e3:db:e5:67:ad:75:00:0a:e3:4b:8e:b7:
f0:a8:bd:00:54:62:88:fa:d0:4a:8e:f2:17:9a:93:
50:27:9b:83:d4:70:54:c0:25:38:07:d6:41:d7:b7:
1d:21:92:9d:85:28:bc:70:8f:23:6e:99:86:8f:f0:
30:2e:74:51:6c:21:64:37:e1:01:28:fa:36:1e:fc:
f9:57:43:24:d8:b5:61:a1:1a:81:a7:3f:79:3e:40:
f7:89:06:86:42:f6:b4:3f:ac:f9:7d:f1:af:c0:55:
b9:c5:e2:24:64:ed:54:1e:27:5d:61:ce:d3:8b:81:
3f:e3:71:30:4c:b0:e5:00:6a:15:88:b5:e7:1c:13:
17:ae:d7:d0:9e:e0:bd:3a:c4:f5:87:2e:97:4a:8a:
57:cc:fa:e0:46:48:9f:ea:fe:9d:8f:c7:90:c6:de:
25:fa:4a:bc:a6:ab:19:a4:95:78:4e:9d:d7:2a:10:
62:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:83:F3:AA:42:17:A9:A6:F5:AC:B7:9C:6D:BE:9C:39:09:8D:FF:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/964e55d7-bf78-31b0-8dc4-c6cde2516f1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.165.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:d1:20:38:4a:20:39:33:a9:2b:6c:75:7e:6e:db:2f:60:7b:
46:c3:79:18:a7:a0:3b:28:a2:9c:f9:fb:2e:9d:38:e2:33:8b:
e0:c7:fe:2e:11:41:56:ae:01:a8:5d:c5:47:50:7f:ad:ef:8f:
0a:a7:ed:52:67:42:5e:c4:95:1b:e9:e3:0d:5b:1d:94:27:2c:
40:7a:07:58:bb:51:81:89:95:b5:74:8c:be:8c:a3:b4:de:f1:
0d:a0:a3:10:08:2d:4b:8a:20:cb:2b:4c:74:0f:d5:f1:15:1e:
3e:b9:52:b8:5e:0e:72:8c:c8:8d:20:56:66:1d:ac:05:c5:da:
9b:16:f2:b9:a9:fa:d5:5d:32:b4:8d:70:a1:a6:af:10:ec:28:
67:f4:a6:67:28:99:fd:5b:80:6a:fe:44:c2:83:dc:2a:07:72:
19:2f:3a:1c:2c:38:9a:57:41:be:b6:86:55:57:06:5d:c9:e3:
4f:68:c1:07:1d:0a:d5:cf:4e:d3:a0:27:79:ec:1f:6f:ba:06:
ee:cb:22:51:03:6e:d7:ea:ec:65:bd:c9:37:d4:c7:fc:20:41:
66:74:43:24:fd:5e:fd:9c:fe:28:ab:75:e6:56:45:ac:c0:1d:
4e:04:22:95:8b:41:ed:fc:67:57:4e:0d:e1:8a:07:0d:b9:3b:
53:8f:d8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 15:59:09 2025 by rpki-client