Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9caab617-5c80-344b-8c41-fa5940494512.roa
File: 9caab617-5c80-344b-8c41-fa5940494512.roa (raw, json)
Hash identifier: SzvjVsqPMKZjayLaClTMT2SDXlA7KQJDNQBSzbk/mn4=
Subject key identifier: 8B:B0:81:CA:8E:20:EB:D4:C2:AF:44:B0:C5:93:0C:0A:DC:80:06:88
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C66781A5824ED3F208D29000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9caab617-5c80-344b-8c41-fa5940494512.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.187.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c6:67:81:a5:82:4e:d3:f2:08:d2:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=8a2be63e-55f2-4eb2-9a7d-22935b55c9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:8b:19:f1:cc:91:6d:e2:f2:82:b3:0a:de:
71:e5:2f:ff:3b:cf:c1:37:00:54:df:b7:ef:2f:02:
b0:22:ef:76:03:9e:49:9a:a1:52:49:b0:d6:a1:eb:
d6:7e:b0:1f:10:ef:b9:80:bd:7f:c5:af:e3:16:fc:
64:f1:89:67:55:b2:30:55:01:b1:f6:44:b9:1a:37:
81:cc:8e:2d:e1:c0:89:26:cc:02:4a:97:7a:9e:39:
87:d7:df:cd:1e:c4:c2:2c:77:5c:8b:0e:46:2c:f1:
47:08:2f:0d:6b:29:4c:4b:3e:dd:86:7b:c1:1b:57:
69:c1:f1:d6:bf:35:80:b8:18:ed:82:e4:ae:67:2c:
9c:8e:a6:b5:32:cb:b3:e5:71:73:98:c3:c8:11:2c:
c4:be:b0:d2:69:24:33:67:3f:a4:e9:89:d9:26:a1:
fe:74:40:d7:ae:c2:ac:25:95:c2:22:ee:ba:14:e0:
c7:b5:1e:8a:00:dd:c4:9b:5a:ab:82:03:7f:d3:00:
25:de:5a:3f:0f:dd:c0:f9:22:53:52:d4:41:df:2f:
3d:81:98:86:d6:2a:21:a1:df:c4:1f:54:e2:5f:9b:
86:88:f2:ad:4d:93:41:77:ef:5b:f3:fa:02:c7:44:
cb:3a:17:d3:63:78:88:d8:87:a5:d7:b0:0f:5e:7a:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B0:81:CA:8E:20:EB:D4:C2:AF:44:B0:C5:93:0C:0A:DC:80:06:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/9caab617-5c80-344b-8c41-fa5940494512.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.187.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:35:91:d8:b0:82:5b:2c:fc:e1:bb:7c:90:08:c8:7d:1b:25:
7b:78:d8:f2:07:90:86:09:27:23:68:ac:c0:30:bc:12:aa:0d:
aa:0f:47:63:92:31:36:48:c4:e9:23:ce:bb:cc:67:32:90:68:
4e:9a:91:99:a9:c1:93:33:24:c3:f8:a1:bc:c1:01:09:ba:1f:
63:9e:e4:01:5f:82:87:72:bb:1e:a0:11:1b:52:5f:b1:dc:11:
d5:ab:3b:8f:84:bd:fb:50:67:85:0e:09:b5:eb:56:73:28:df:
be:60:eb:32:2e:b4:71:d4:a9:a4:95:ec:fb:9c:2e:d1:45:03:
7c:b3:d7:1a:f7:eb:87:bf:5f:37:27:bb:4b:fc:4d:e7:17:77:
a4:ee:dc:06:0b:99:ea:54:2e:ac:5d:0f:c9:68:c1:bd:e5:9e:
0e:8f:d0:44:b2:eb:22:55:a9:32:bc:0f:79:fa:f3:10:70:67:
7a:d7:8b:79:53:25:f1:b5:96:93:84:45:62:41:3e:04:ca:ca:
74:fe:4c:26:a9:e7:eb:a6:95:fd:a0:e9:0b:7e:0a:e6:f9:7a:
8a:59:86:8b:04:fd:f2:75:ac:4e:e2:40:1d:1f:38:e3:1a:0d:
43:cf:37:9a:ff:f9:f1:ae:07:70:ab:da:09:7d:8c:d8:1d:d2:
2c:df:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:17 2025 by rpki-client