Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9bd51dae-b70f-3ee1-b312-f85d702c66a6.roa
File: 9bd51dae-b70f-3ee1-b312-f85d702c66a6.roa (raw, json)
Hash identifier: 0hOtgaHD+7TYrS5nshkMKq3SGAfAfmkxJEWzzFJ9tKM=
Subject key identifier: FD:EC:2C:E2:CD:F9:C1:36:55:62:B8:61:C6:CA:E2:22:9B:46:BA:BE
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858407D8EB3813FABC6ECA776A7E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9bd51dae-b70f-3ee1-b312-f85d702c66a6.roa
Signing time: Fri 06 Jan 2023 12:00:00 +0000
ROA not before: Fri 06 Jan 2023 12:00:00 +0000
ROA not after: Sat 11 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.15.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7d:8e:b3:81:3f:ab:c6:ec:a7:76:a7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 6 12:00:00 2023 GMT
Not After : Feb 11 05:00:00 2023 GMT
Subject: CN=b91f062c-4b52-4f8a-a56d-46e09dd49de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:da:5f:12:38:f6:e0:9b:12:ee:ef:ee:d3:
ab:07:bc:57:fb:fd:8d:bf:c9:3e:5c:ef:24:8d:be:
64:6f:f4:1a:b7:b8:b0:77:45:19:67:94:85:b2:d5:
8c:ef:8e:7f:b6:f0:b9:04:a7:d9:22:65:c5:2d:9f:
5d:e0:35:bb:e1:f8:9c:20:71:60:cb:77:2a:d3:b3:
f9:8e:10:7f:ca:d8:78:06:88:d0:4b:ee:49:09:77:
3b:6f:f5:54:cf:9a:13:bb:65:1b:4a:dd:c7:83:fe:
cf:2b:c8:ff:bc:5e:a3:ff:9d:40:67:38:86:36:00:
93:7a:d7:ce:9c:3a:04:db:ed:c6:0f:cc:d0:46:74:
50:a5:e7:e7:45:e6:78:e6:a6:b2:c2:fb:9f:26:ae:
34:62:2c:b8:ab:30:0d:c1:c3:b2:90:bf:89:24:d8:
9f:3a:09:07:f6:42:38:5c:c7:72:ad:55:3c:c5:41:
64:0e:50:84:38:85:b0:2d:2f:26:4c:e9:eb:9d:fb:
a2:70:d2:54:78:2d:2d:51:fe:76:95:c0:67:66:b9:
6b:9c:33:6c:58:fd:9d:03:5b:9e:46:22:46:a6:8c:
20:71:b7:e1:72:9d:c6:6f:de:23:bc:a0:8f:75:7a:
6f:50:b5:e3:68:cc:0f:6c:7f:dc:ec:42:3c:ca:5b:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EC:2C:E2:CD:F9:C1:36:55:62:B8:61:C6:CA:E2:22:9B:46:BA:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9bd51dae-b70f-3ee1-b312-f85d702c66a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.15.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:c9:e0:ff:5e:b3:67:9f:be:3b:05:71:a4:6c:03:e0:5f:dd:
33:74:c2:04:2c:94:01:00:93:3a:cb:0f:c3:4a:70:05:08:44:
f0:1a:33:ff:2a:a4:4b:a8:de:16:7e:4f:6c:4e:15:ef:2b:c6:
ab:b9:90:21:af:81:d8:6c:8f:8b:45:b6:5d:20:21:51:70:46:
08:c3:fd:3d:7e:82:68:aa:e8:99:fa:3c:1a:6f:60:b0:4a:32:
e6:d4:07:4e:e2:6d:b9:4d:8f:79:04:1b:44:cb:de:ae:c6:ab:
61:bf:2f:53:79:2b:a3:7c:04:2e:82:f4:fe:f7:52:37:ae:25:
e7:fd:d7:be:2d:c2:96:8e:8e:fa:df:be:f9:44:ec:27:ce:74:
95:94:65:00:d0:cc:e9:fb:a7:bd:9b:d3:12:24:aa:9a:cb:aa:
a4:f6:dd:13:15:b0:bb:a7:06:e7:57:6a:03:27:0d:c5:5d:89:
58:b0:b5:d2:eb:64:7a:26:3d:48:0a:ea:8b:5d:86:d0:a3:86:
a9:7e:b6:11:ab:ae:fe:6e:bf:69:0d:de:36:cf:31:e2:3a:52:
51:7f:ea:77:13:29:db:d8:62:79:30:55:9d:26:84:6c:43:d2:
74:9a:9b:5d:4e:37:24:fd:93:2d:fc:3e:95:e6:7f:ee:c3:4f:
dc:10:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:54:12 2025 by rpki-client