Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a867f142-8e69-32f4-93b1-febd5f7b87ab.roa
File: a867f142-8e69-32f4-93b1-febd5f7b87ab.roa (raw, json)
Hash identifier: KLuyiGC0OJLT4CF+ECG3IYwrcbqzsTJE5lm4eKC9L24=
Subject key identifier: D0:DA:D5:20:91:B4:6B:AF:C5:60:9E:B4:AC:98:BB:40:2E:20:E8:13
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408C2F71D5EBAD7CE6CA4FF100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a867f142-8e69-32f4-93b1-febd5f7b87ab.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.102.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8c:2f:71:d5:eb:ad:7c:e6:ca:4f:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=5e81e76d-47ef-40b5-88ae-1adec6b4b35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:1d:44:e6:77:45:30:6e:f3:9e:77:1c:2a:
8f:39:61:e1:09:97:fd:5e:ed:15:d5:7f:18:f7:4c:
20:fd:d4:47:15:0a:dc:57:57:21:c7:1e:47:c8:36:
8b:cc:79:9c:27:ba:86:68:0f:26:f8:d4:ab:56:a8:
d3:57:ec:1c:64:f1:3d:65:a0:50:73:3f:cf:b1:a8:
10:44:ce:ed:79:eb:8c:5e:17:5f:61:d5:90:87:2f:
01:29:fa:1a:9a:98:10:7b:a7:78:fb:89:99:0e:64:
de:55:cd:50:af:1b:7d:21:f8:1a:43:a6:c2:b4:7f:
8b:0a:40:dd:9b:9c:9e:31:1a:50:77:c7:0b:b2:d4:
7e:b1:f6:7c:a1:c8:79:bb:b2:95:03:6e:fb:38:cc:
f8:3a:42:f2:27:56:2e:8b:24:37:0d:83:36:f6:4a:
21:b7:cf:28:e7:8b:9b:27:62:0c:9c:a5:d7:be:90:
a6:f0:01:0f:7b:d8:88:4b:16:74:23:44:76:98:45:
7e:37:48:a8:b9:49:f0:f7:66:a7:c3:55:70:df:56:
49:26:49:81:16:6f:ce:a3:43:ad:42:dc:1a:5b:e8:
25:41:83:d6:3b:05:b7:7b:01:ef:e2:67:3e:ef:4e:
6c:71:49:f0:48:d3:f5:6d:67:53:a4:00:8d:c5:4c:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DA:D5:20:91:B4:6B:AF:C5:60:9E:B4:AC:98:BB:40:2E:20:E8:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/a867f142-8e69-32f4-93b1-febd5f7b87ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.102.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:b1:73:82:de:88:6a:a2:ff:17:0f:73:4f:de:1f:40:9d:3f:
1f:4f:9e:a3:76:83:5c:fc:cb:44:00:75:aa:60:15:1c:ca:15:
3a:0e:34:ca:11:11:65:67:af:64:ef:6d:8a:09:5c:ef:76:ae:
72:a1:80:e7:d3:51:2b:d5:8f:62:71:ea:62:db:e2:2c:ef:04:
ef:4a:d1:e0:9f:b4:87:df:b2:29:1b:58:20:74:fb:b3:5d:dd:
1c:6f:d3:99:15:3e:e2:dd:69:26:4f:0a:3e:8f:4b:6f:f7:a3:
86:7d:3c:5d:0f:7d:14:77:04:0d:e4:0c:19:a7:f9:32:2c:18:
66:85:9a:33:ae:26:06:ca:34:c3:83:7a:5c:f9:f3:16:2d:0d:
1a:38:7e:88:1e:04:3a:3d:98:e6:10:4b:ca:c6:7b:2e:59:d0:
b8:8c:83:f2:27:da:61:75:07:c9:06:5c:f7:db:ff:6e:1a:10:
a8:d4:ba:c2:e0:17:57:0f:1c:81:3b:22:1a:42:bc:98:73:58:
02:81:58:e3:62:bc:52:82:92:70:15:55:f1:75:56:7f:83:88:
04:02:9a:37:87:c2:f4:c6:d4:30:38:fc:87:8a:48:c5:ee:b0:
41:82:4e:5f:5f:db:cb:af:be:16:f3:e0:13:ab:bf:21:d9:85:
52:54:20:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:26 2025 by rpki-client