Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2fb4639-48a3-3b8e-9a87-d50fc7d730ca.roa
File: a2fb4639-48a3-3b8e-9a87-d50fc7d730ca.roa (raw, json)
Hash identifier: Xc6QATvxZQfwBjyGElJqVVGvaw/VP+gCGIt4tWJYNTg=
Subject key identifier: EB:3A:D5:2A:98:1B:2D:D9:A7:A8:07:2F:E6:6F:B8:8D:7B:64:C9:F7
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F89DCC7E6EAD7147A682D08C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2fb4639-48a3-3b8e-9a87-d50fc7d730ca.roa
Signing time: Tue 11 Oct 2022 18:48:07 +0000
ROA not before: Tue 11 Oct 2022 18:48:07 +0000
ROA not after: Tue 15 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.154.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:89:dc:c7:e6:ea:d7:14:7a:68:2d:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 11 18:48:07 2022 GMT
Not After : Nov 15 05:00:00 2022 GMT
Subject: CN=3b45e0e6-3580-4d31-9a26-5cd8f76bca49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:2e:dc:7a:66:4a:e9:f0:e5:0b:30:83:7c:
15:eb:a6:0f:fb:cc:49:4a:15:53:47:0e:a5:d4:a7:
c1:60:cb:57:26:92:be:9d:c5:2c:f5:56:ef:e8:5b:
4b:52:d5:e9:66:4b:6b:ae:81:32:2c:34:d5:f8:14:
9b:50:ea:13:8e:89:dc:ca:68:8c:61:18:1b:ec:9a:
3f:46:e0:86:20:9d:54:a6:11:93:e8:ce:31:41:ee:
a3:f6:33:b4:b6:a2:b6:da:bc:56:8c:e1:04:a6:72:
0e:09:7b:d7:99:c9:8c:ef:d3:7d:f5:80:7d:d1:1a:
f5:4f:52:62:73:e7:dc:5e:34:51:67:c2:ad:47:50:
21:4b:93:bf:bf:26:31:a2:5e:4e:fd:34:93:aa:82:
90:72:eb:a3:19:e6:23:93:40:e0:42:d5:7e:b2:de:
0c:0d:f4:ac:61:e2:1a:06:81:28:93:a6:52:98:87:
12:50:5c:39:1b:96:cd:e1:87:da:5c:30:af:fc:05:
3b:f6:f4:d5:a7:1d:2e:d7:da:b0:36:af:d6:cb:a2:
41:64:e3:dd:2e:f9:cf:ee:9d:dc:ff:73:71:de:ef:
2a:29:b3:65:af:1f:2c:c9:4e:d7:5a:ad:f9:67:81:
e1:88:99:89:44:1d:26:85:8d:05:3d:71:b2:59:0d:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3A:D5:2A:98:1B:2D:D9:A7:A8:07:2F:E6:6F:B8:8D:7B:64:C9:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a2fb4639-48a3-3b8e-9a87-d50fc7d730ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.154.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:cf:09:92:80:97:22:48:d3:63:fe:2a:e3:c4:90:ec:f0:64:
0b:f1:d8:1b:f7:75:52:a8:16:5d:8b:af:05:68:fe:83:81:39:
8b:a6:26:a5:a4:71:76:45:90:9d:28:ee:f8:c9:00:2f:76:21:
06:1b:2e:43:e2:91:ae:b9:c0:25:d9:3f:b4:e8:ad:d3:b7:8c:
93:21:7c:5a:3e:a4:1a:56:1f:2d:1d:ce:76:e5:a4:5a:97:f6:
be:1c:e8:d5:64:d3:9a:3f:eb:83:e0:83:29:ca:12:cf:b4:54:
b2:38:5b:c8:55:ab:fc:86:c4:7a:24:b7:60:74:07:6f:6c:25:
4f:81:f9:9b:d2:88:f7:b3:e8:6b:5e:c5:9f:62:3c:3d:3d:aa:
16:8c:f2:93:ae:f5:41:12:eb:4c:d1:d0:7e:3c:dd:4a:bc:15:
13:9e:9a:d5:6b:4f:d0:bb:d6:0c:5b:64:0f:e6:aa:f8:79:63:
89:e6:6c:27:e3:1b:53:d7:1b:23:91:dd:73:4f:5b:08:80:da:
2e:34:e2:57:b4:50:ce:5d:f4:c2:8f:ab:d1:55:23:4a:3a:65:
a5:ef:0d:c1:3d:a4:6d:7a:95:7a:3f:b1:84:3c:14:17:46:b7:
a4:26:82:aa:42:91:94:11:07:9b:e5:e4:d9:eb:61:84:52:8c:
47:b8:5b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:19:19 2025 by rpki-client