Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a71dce8a-b993-3f6b-91a2-a388afb92371.roa
File: a71dce8a-b993-3f6b-91a2-a388afb92371.roa (raw, json)
Hash identifier: ek/EuMeQS1HvUs19L2Vk/ZBUBt5N89rb/YRLVuDL1UY=
Subject key identifier: 3D:EA:8F:9D:8F:77:2B:06:6C:9E:01:0D:20:42:BF:48:3E:29:78:26
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B2DCC45403850B8626318E80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a71dce8a-b993-3f6b-91a2-a388afb92371.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b2:dc:c4:54:03:85:0b:86:26:31:8e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=a080fd4a-337e-4c28-9bb1-041f6bf7fba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ea:4d:0d:44:19:bb:fe:b9:35:b6:28:20:39:
d8:9b:fd:5b:0b:be:eb:7a:3a:35:25:bd:5f:9b:10:
3b:e5:e0:73:a6:0b:41:c8:eb:c2:bf:53:ba:22:7d:
65:6f:48:10:df:6b:14:95:6c:00:64:48:71:d1:dd:
07:74:26:ef:de:d1:7f:bb:79:39:92:e4:54:cd:44:
c4:17:58:5e:76:29:4a:10:1c:a5:fd:cb:29:b3:dc:
ea:1e:85:e1:0b:ee:f4:83:13:b3:69:f5:d1:3f:a7:
c9:3e:55:22:85:03:56:49:a0:11:53:95:f6:34:30:
58:83:45:62:b0:ba:ea:3b:5f:e4:76:85:fa:2c:da:
54:cd:d7:78:c7:17:4f:9f:21:cd:4e:aa:36:09:a0:
66:b1:c8:f5:11:7c:a3:9c:ff:6a:f1:97:40:e7:ec:
10:0a:8a:98:6a:18:2f:d6:68:98:54:2e:19:dd:c8:
01:49:b7:e2:8b:57:53:27:f3:4b:d2:84:28:88:3d:
eb:a1:ba:4f:c4:1e:8d:3f:a7:c2:27:a6:85:76:d3:
cf:cb:dc:e3:04:1f:d7:07:83:da:e1:ba:d5:b3:f8:
40:bf:09:20:87:41:ae:ad:bc:28:6c:5e:ab:b9:ff:
58:54:d3:e2:7f:a2:7d:50:bf:3f:c4:80:e4:18:be:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EA:8F:9D:8F:77:2B:06:6C:9E:01:0D:20:42:BF:48:3E:29:78:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a71dce8a-b993-3f6b-91a2-a388afb92371.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:d1:7b:7d:d5:47:a3:02:9f:29:78:6c:53:f6:7a:36:d9:c7:
dd:5d:b3:23:ee:26:9a:47:de:04:11:a5:3a:fc:29:05:56:2c:
60:af:e1:f2:a3:73:b6:d7:27:08:71:c7:0c:09:2f:f2:be:ba:
2e:a0:5e:4e:2a:2e:3b:2e:3f:b5:89:d1:49:3d:36:6a:09:b5:
f7:a5:d2:0e:ac:bb:f1:03:4d:6f:73:5d:5a:2b:64:22:aa:a2:
17:77:73:05:51:c3:07:28:1f:ae:97:75:48:8c:0b:eb:68:0e:
a5:61:ff:43:47:b0:38:8c:27:25:5a:13:99:f3:22:23:ae:1e:
e0:24:08:51:35:56:fb:37:7e:85:3b:ab:a9:2d:c6:90:41:ae:
0c:54:4f:f7:d7:6c:08:42:c9:99:e1:c8:a2:ad:6d:58:cc:5c:
57:a7:dc:56:c9:55:24:a0:79:a9:5a:83:e1:29:e9:11:16:7c:
e3:44:c2:0e:39:0e:fd:21:8d:96:09:8e:78:bf:9e:6c:ab:77:
24:e7:02:60:d7:40:54:81:b2:93:53:b8:69:3e:96:cb:84:cd:
b0:26:a0:e4:81:38:c9:f2:8d:3a:f0:48:0d:a0:d0:dd:89:c6:
b8:09:07:e0:b3:20:d6:a8:6e:37:5f:49:5c:83:6f:db:c8:f1:
ce:8e:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:30:24 2025 by rpki-client