Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a505a8f5-47ea-3178-9823-0cdb4a0276a6.roa
File: a505a8f5-47ea-3178-9823-0cdb4a0276a6.roa (raw, json)
Hash identifier: Gk5T0Cb4BeQorGE27uVCTk7GhLSEEQCJeTE4KmEiIus=
Subject key identifier: 69:A0:5F:62:10:D6:76:2F:87:DC:9F:08:EA:57:F8:4E:90:81:C1:3D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858409444D61AEC380BE4B4E9E000
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a505a8f5-47ea-3178-9823-0cdb4a0276a6.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.159.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:44:d6:1a:ec:38:0b:e4:b4:e9:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=477e0ef7-1a63-4b08-b26c-cd359663363c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6c:a8:1b:9b:09:27:c1:0d:9a:01:97:dc:0b:
ca:93:39:ad:bb:05:99:88:eb:0d:1c:3b:eb:f9:3c:
20:16:ed:9e:8b:59:58:75:70:59:2b:8a:7c:63:35:
89:e0:f3:7e:83:6f:15:a7:7a:54:5e:fd:27:8e:19:
c8:f7:11:aa:c9:ef:b1:bc:fd:eb:85:21:fb:95:11:
45:b4:be:e2:7a:15:24:30:0d:44:40:76:24:59:05:
82:6e:6b:c4:2e:77:ef:41:ca:56:94:d7:54:6e:09:
1f:b6:85:fb:e4:c4:ef:0b:b6:3a:31:0c:6c:a1:47:
01:4a:10:ed:99:dc:61:91:24:ee:71:ca:b2:3a:80:
0f:91:0a:e4:ee:aa:34:56:5c:86:53:1a:a2:5e:54:
58:c3:85:d0:92:d7:bd:02:3b:22:4e:cc:4b:da:79:
fe:d9:96:24:f4:05:48:01:a9:2c:ec:7e:45:b8:e4:
9c:ee:b6:45:6d:52:8b:cb:c9:60:c0:31:4c:26:ef:
e1:68:4f:bd:45:9c:91:7d:74:62:b3:f9:f2:c8:63:
18:f0:b1:35:2c:90:f6:00:9e:8a:d6:2f:2e:4e:99:
61:b6:3a:84:d3:1f:80:cd:cc:92:19:f1:0e:e8:2b:
1b:ab:84:8f:e1:e4:3a:55:f1:d9:0d:a6:5d:21:74:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A0:5F:62:10:D6:76:2F:87:DC:9F:08:EA:57:F8:4E:90:81:C1:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a505a8f5-47ea-3178-9823-0cdb4a0276a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.159.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:bd:74:84:34:4b:a7:78:5e:dc:d7:94:86:ab:7f:d3:c7:62:
60:03:16:d6:41:80:bd:c2:b6:08:02:33:8a:5c:6e:44:ba:9a:
59:f5:1c:20:ed:d9:91:9f:76:fb:5e:23:83:91:da:3f:cf:2f:
61:c4:f2:be:bc:c0:96:03:fa:6c:3f:e6:4b:a3:2a:9c:6c:b5:
ab:9f:10:7e:14:34:be:05:3b:da:f2:5e:3f:ab:0c:b9:fa:f4:
a4:e4:06:6d:f6:84:fd:18:c2:f8:80:03:dd:ea:5c:d4:51:2b:
58:07:0d:37:3d:47:20:19:68:a4:9e:d7:3f:c5:ac:fa:ea:f7:
07:56:c5:0f:34:af:4e:3f:49:0f:65:01:13:46:08:d5:5f:73:
70:5e:7d:15:bc:b4:1d:e4:22:2a:6a:10:55:d9:9f:41:61:53:
6d:9c:a9:65:18:c2:c1:10:3f:f2:a3:85:74:3a:20:86:f6:22:
0d:37:ca:a2:98:ff:65:28:b1:53:11:f1:2d:5d:d3:13:85:67:
de:ff:46:1d:5d:56:13:1c:79:f1:fc:4a:41:a3:a9:43:e8:89:
65:0c:35:f3:32:fa:34:e2:64:92:49:7c:41:bd:86:7b:c9:b2:
da:18:f6:1f:1e:52:c9:b1:bb:7b:97:e3:a8:56:a4:fe:6b:1b:
51:36:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:47:03 2025 by rpki-client