Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac108f4b-a505-3dfc-8b8e-a9bc4043ddcb.roa
File: ac108f4b-a505-3dfc-8b8e-a9bc4043ddcb.roa (raw, json)
Hash identifier: QNIeW9/Hc2LLFSDQO1edGU3Tie8m5FQuQJOWm3SuvqY=
Subject key identifier: 30:F3:89:7F:DF:62:3B:7A:6D:67:8B:AA:C6:2C:C4:D8:E6:41:45:86
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840178B1E87537F6DF3ACF8D580
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac108f4b-a505-3dfc-8b8e-a9bc4043ddcb.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:8b:1e:87:53:7f:6d:f3:ac:f8:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=2bded9ca-1ccc-46ff-9d35-c22ef1085e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b7:fd:e0:f3:8f:80:0f:8f:e9:76:df:da:81:
4a:b2:67:04:b1:21:c7:6d:1c:ee:ab:86:85:46:bb:
20:cd:59:2e:1b:31:99:c7:bc:98:3b:1b:0b:ab:42:
86:2d:f9:38:a2:e6:f2:a4:ed:b1:00:e8:c3:44:0c:
36:4e:d5:b6:79:ee:58:d2:3a:55:b5:0a:00:3a:1b:
6a:f2:d3:39:6b:28:6a:9a:21:d0:6f:0d:fa:8f:79:
15:54:0e:df:8c:11:02:42:40:d5:5f:b4:b5:9a:4b:
4c:35:a5:c8:a9:48:1d:ac:47:ce:19:54:9c:b4:82:
80:8e:45:56:be:b5:03:d6:ec:ad:ab:07:b9:8e:4b:
57:c1:ba:d1:ba:b5:79:22:fa:0f:6f:6c:21:06:81:
fc:10:be:da:3c:a7:a7:87:8f:e9:01:fd:03:02:d9:
a0:c9:45:a0:6d:3a:b3:97:00:d0:80:20:be:16:8e:
1d:50:92:9a:a7:69:f6:bb:a8:2c:fe:ca:4c:a5:c4:
18:b2:e9:fb:12:f0:b1:ef:a1:bd:64:f4:07:4e:8f:
f7:7f:6f:dc:bd:7f:eb:22:0d:ec:48:c4:f0:d7:d7:
32:e0:90:09:99:43:c3:1a:4e:ee:4e:fa:78:99:18:
58:e6:35:bc:7a:a2:fe:89:cf:d5:be:27:ea:76:59:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F3:89:7F:DF:62:3B:7A:6D:67:8B:AA:C6:2C:C4:D8:E6:41:45:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ac108f4b-a505-3dfc-8b8e-a9bc4043ddcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:77:51:06:a3:28:33:c7:c5:19:de:a1:51:a2:91:b7:ad:8b:
2f:12:22:9f:b9:e3:42:af:e8:c4:76:52:94:d3:a3:f1:67:5b:
84:29:44:9d:8a:49:9b:20:e9:aa:b4:5a:c6:7d:af:0c:ed:1d:
23:e5:8a:e6:d4:76:cd:ad:67:db:99:04:ee:7e:7e:bd:74:16:
31:18:8f:20:e0:54:f6:ed:bb:c5:70:d7:f6:2a:f0:1d:c8:24:
bb:69:c0:a5:61:10:b0:85:be:f3:b8:95:54:a8:aa:22:08:ec:
49:b8:3a:78:14:f1:6d:f2:1a:5d:8f:18:33:91:af:9b:dd:a9:
34:d9:55:1a:cb:3a:92:f5:87:aa:ef:77:08:50:22:69:5f:3b:
e6:18:8c:13:ea:69:50:eb:a5:f1:5b:dd:9d:cd:3f:fa:fe:5e:
1e:7b:70:27:fa:1d:b5:47:19:37:3a:0f:78:cb:57:84:bf:9d:
b1:95:ae:c5:98:33:6f:6a:22:37:49:d9:03:5b:e3:a0:53:d4:
be:a4:97:5f:ee:31:25:1e:5e:56:6a:5d:c1:1a:29:16:73:1c:
76:6c:fc:6a:33:bf:f0:f4:bc:86:a3:04:3a:36:2d:55:81:6d:
43:bb:51:ca:2a:03:fd:30:66:34:44:f1:c5:59:ef:ef:b8:a7:
c3:d8:82:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:05:56 2025 by rpki-client