Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad29614c-7953-3c0f-ac37-e7e345620944.roa
File: ad29614c-7953-3c0f-ac37-e7e345620944.roa (raw, json)
Hash identifier: W0QXyzS2TLOnfojXDwTPFkJjvyGxt6BmFXvJg73SZF4=
Subject key identifier: D2:44:48:74:29:04:8B:BF:E8:C3:4B:F6:A0:16:0E:57:77:38:50:50
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B3BC1B3EB3C00AC161343300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad29614c-7953-3c0f-ac37-e7e345620944.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.122.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b3:bc:1b:3e:b3:c0:0a:c1:61:34:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=1493adb0-1fd4-4595-8594-3ecacfa907ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fe:ea:bb:d4:98:3e:06:0b:9b:e7:76:0c:34:
10:84:8d:dd:f9:62:9b:f2:5f:1a:c7:40:67:ae:b1:
12:e5:75:5f:76:c5:e2:1d:8e:6d:dc:0e:9b:a8:47:
38:a7:88:10:ac:23:1a:5d:48:7f:1e:e6:05:c9:cc:
8a:73:71:46:bd:c3:bf:62:be:da:11:40:a1:bc:42:
20:93:05:5e:7b:fd:08:d0:21:be:2b:67:68:97:6f:
b6:9a:4a:8e:39:3a:a2:6f:35:f0:be:07:ba:5e:78:
81:d2:c7:ad:ad:b6:33:4f:d2:6e:4f:85:4b:58:bb:
ee:d4:78:82:ac:f6:fa:68:ad:b6:e5:d5:68:7d:ce:
8a:f0:b3:b7:cb:ac:e9:1d:cd:44:c5:ba:b0:d3:71:
c6:73:b2:cf:5e:a7:98:e6:ab:81:62:49:08:25:ad:
83:e7:18:16:e8:90:2f:54:75:a3:f1:4c:c5:f6:a5:
15:ef:18:77:ef:a5:78:bd:ae:51:ca:4d:d4:fe:6c:
66:c2:a5:08:d3:a6:3c:06:f0:25:38:f1:3a:0f:59:
65:a8:33:e2:6e:c0:c0:31:fc:af:09:02:a7:8d:03:
3e:89:5c:ce:32:38:0e:b5:49:f7:33:61:37:9b:78:
30:88:a6:9c:2a:17:12:e2:d9:16:3a:89:ad:99:9f:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:44:48:74:29:04:8B:BF:E8:C3:4B:F6:A0:16:0E:57:77:38:50:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ad29614c-7953-3c0f-ac37-e7e345620944.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.122.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:a5:cf:4e:8d:54:9c:5b:4d:c3:ff:00:6b:89:8f:fb:21:ec:
c4:bc:f7:be:3d:db:a7:06:54:02:eb:01:da:ed:3a:b5:d4:a7:
f0:19:4a:f6:6b:65:c3:a3:31:d8:4b:a3:05:76:ff:04:e4:e1:
4b:2a:13:7e:5b:c0:ec:47:9d:47:ad:51:e4:03:6c:55:bd:c5:
78:f2:0a:d3:33:56:b6:34:46:9f:5c:e5:56:0c:42:8e:2c:e9:
1e:89:b0:35:3c:2b:84:3c:fe:d1:73:de:84:f7:7b:51:8f:6b:
eb:43:f5:80:1f:45:5f:66:aa:75:51:39:a3:46:18:0c:0e:6b:
0b:74:f1:46:1a:4c:50:d5:f5:4b:59:b8:8e:c2:e4:40:78:cb:
ce:c5:ee:f2:72:17:2a:61:34:8f:e2:50:11:49:fd:e7:50:ab:
3f:86:90:4d:a7:a2:41:5e:d5:c8:75:f8:b5:1b:13:cf:8d:27:
2f:62:4c:85:75:6a:85:c5:62:e2:38:a8:26:d6:f0:2c:44:6a:
16:bf:b9:0d:35:6e:18:a5:fe:28:c7:03:e6:f0:aa:26:e6:65:
bc:0c:56:e6:c1:cb:3b:5f:02:0b:08:e1:5b:aa:de:56:4a:f5:
80:e5:a4:ac:f7:61:19:a6:14:06:b2:08:cd:4b:c8:d8:b5:05:
02:04:14:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:01:05 2025 by rpki-client