Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96ef672f-5c84-311e-87c3-bf57c1a9b070.roa
File: 96ef672f-5c84-311e-87c3-bf57c1a9b070.roa (raw, json)
Hash identifier: IE6UPkI3JCckjgQ26wQPk1jkR/JYBApw14+yOkezWy0=
Subject key identifier: 4A:F0:25:AC:14:C1:A9:C1:B7:04:C1:ED:3B:94:E2:E4:C7:88:19:52
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858406D3E24D330BD9BBFF745D480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96ef672f-5c84-311e-87c3-bf57c1a9b070.roa
Signing time: Sat 31 Dec 2022 12:00:00 +0000
ROA not before: Sat 31 Dec 2022 12:00:00 +0000
ROA not after: Sun 05 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.168.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6d:3e:24:d3:30:bd:9b:bf:f7:45:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 31 12:00:00 2022 GMT
Not After : Feb 5 05:00:00 2023 GMT
Subject: CN=5aa2c563-e725-4dc5-acb3-98f8c4440988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:6c:25:fc:ee:8b:03:f4:b1:f7:a6:a6:4e:
72:2f:4b:88:c0:fc:af:2c:e1:a1:2b:6e:cb:83:71:
c1:cf:05:e8:dd:96:b4:b8:f9:73:34:a9:c8:d3:b8:
0b:7b:23:17:5f:a6:db:e5:b2:b0:ec:a2:07:16:fb:
cb:a6:b6:c8:e3:26:ee:32:15:6e:21:f4:b9:0b:e0:
9d:5f:d3:34:83:d4:4d:78:5f:4c:52:41:7b:e9:e6:
9d:c6:96:e5:51:3e:8d:3a:60:df:77:ad:64:ff:9e:
8f:34:f0:ea:3a:fc:d6:a3:60:87:92:96:e3:a7:e9:
42:12:68:28:4d:ab:44:be:af:ba:b0:f2:90:be:6c:
65:47:11:ca:71:02:1d:9a:c0:06:c1:84:62:fc:2f:
2f:ce:3b:ba:a5:a2:d6:a4:6f:ac:d4:50:11:b5:95:
92:e7:fa:58:95:b1:36:22:46:5f:10:73:65:77:03:
58:c3:dc:7a:b7:0f:09:0d:3c:cc:72:20:b8:33:a8:
a5:d4:2d:dd:06:5f:9f:6c:a9:53:12:06:c1:17:63:
da:46:b1:3d:d2:c4:50:62:40:7d:ae:79:94:07:e7:
99:91:c5:7f:c9:bd:8b:0d:e6:6d:42:ba:8f:3e:cf:
bf:9d:ff:04:75:8b:5e:af:f9:4c:7f:53:44:01:01:
4d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F0:25:AC:14:C1:A9:C1:B7:04:C1:ED:3B:94:E2:E4:C7:88:19:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/96ef672f-5c84-311e-87c3-bf57c1a9b070.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.168.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:6d:e8:ec:39:4d:fa:3c:2f:1f:2e:ba:11:b9:25:2a:02:8d:
8e:b0:71:e9:2d:96:98:5c:70:ec:10:0d:bc:48:da:29:af:d6:
b3:4b:03:b9:6d:c9:aa:12:91:a6:d1:72:9b:20:d1:7f:a1:55:
4c:42:35:60:7b:b1:b8:f3:af:a1:c2:9f:33:53:ed:ac:db:57:
86:89:8b:68:9b:75:61:28:08:f7:1a:f4:17:88:84:55:6b:37:
c4:64:35:0a:6f:50:ac:ca:14:e1:40:bb:60:6f:83:2f:6b:2e:
d2:57:38:38:1d:88:5c:01:df:49:e7:8d:f0:36:93:e9:0a:11:
6b:31:b9:7a:9b:99:0f:75:72:7c:9c:71:d9:84:96:64:06:f4:
9a:10:8d:1d:d3:de:bc:f3:7e:29:41:1f:15:c2:0f:62:15:f5:
51:4b:48:62:30:08:58:8f:e2:20:e6:e8:00:d9:7a:b4:65:c4:
2a:18:28:71:76:62:cf:24:f9:87:f4:2e:f4:46:f7:22:0c:35:
8f:36:21:3f:01:bb:e2:df:bf:a8:8b:3f:a8:79:d6:db:2f:30:
6d:24:ee:49:29:e2:25:f8:be:23:8f:ef:e6:9c:eb:2b:cf:59:
f8:54:2a:aa:23:b9:f9:0b:7b:e7:09:7b:1a:6a:fd:05:fe:dd:
9f:35:b7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:36 2025 by rpki-client