Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae0f6ec1-6118-340e-8845-053670a0b1b9.roa
File: ae0f6ec1-6118-340e-8845-053670a0b1b9.roa (raw, json)
Hash identifier: arrWzYKT+lMIWUQwwD3UkPf72dYrDga7TXaAJ1k6WJ4=
Subject key identifier: E5:BD:79:B9:A6:E7:31:CC:62:C9:B7:08:1D:B4:B0:57:4E:36:08:1D
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840D1BEBCD7B489713AB0405600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae0f6ec1-6118-340e-8845-053670a0b1b9.roa
Signing time: Sun 05 Feb 2023 12:00:00 +0000
ROA not before: Sun 05 Feb 2023 12:00:00 +0000
ROA not after: Mon 13 Mar 2023 04:00:00 +0000
asID: 14618
IP address blocks: 16.154.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:d1:be:bc:d7:b4:89:71:3a:b0:40:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 5 12:00:00 2023 GMT
Not After : Mar 13 04:00:00 2023 GMT
Subject: CN=348aa9e1-9784-483f-89c2-65e99592aa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:2e:af:68:73:28:f7:0c:f9:e2:01:0a:7d:15:
7e:45:d3:38:f8:9a:3e:8e:89:5b:28:30:3f:73:04:
b9:a4:45:eb:8a:a6:71:54:53:35:cd:42:b5:dc:82:
98:9d:24:7d:48:a7:dd:5c:13:41:34:6a:bd:e1:17:
41:03:dd:6c:d1:7f:67:92:97:58:b6:d6:19:33:fb:
84:5f:82:04:12:03:81:19:c9:0c:27:8f:e8:73:09:
0d:06:21:69:35:49:b0:e1:a8:d0:8d:b1:5b:14:ca:
98:27:c7:0d:b0:56:2f:09:b1:38:21:17:01:64:c9:
0e:c2:d8:70:ce:6d:d7:55:7c:c9:5e:06:23:69:8b:
74:18:00:4b:fa:cb:e1:60:83:12:30:c7:aa:b5:0d:
fd:f4:5d:94:a3:1f:b9:e5:8b:b0:e9:00:3f:5d:90:
38:a8:0b:c4:0c:07:00:d9:8e:07:81:25:2c:4c:32:
81:32:27:b8:0e:33:b6:64:07:5f:49:8a:cd:b1:eb:
08:6c:56:6e:98:cc:ba:a9:0d:63:74:2b:ed:a9:ed:
e4:49:fd:b4:08:e7:b9:ca:04:94:43:ff:1c:f0:5f:
1d:e1:dc:d0:45:64:ba:1b:36:12:67:10:24:ca:dd:
d6:35:f6:3c:8c:f5:5c:7e:9b:19:20:e2:12:59:1e:
1a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:79:B9:A6:E7:31:CC:62:C9:B7:08:1D:B4:B0:57:4E:36:08:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ae0f6ec1-6118-340e-8845-053670a0b1b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.154.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:cc:50:04:f8:80:fc:b3:e0:54:66:78:87:8a:1d:20:7a:e7:
1f:c5:05:ec:39:20:18:e5:e4:16:19:88:ce:48:32:3d:d3:52:
f7:a4:f2:95:c7:c2:1d:dd:7a:ee:fb:0a:7f:08:0c:54:8f:67:
99:c6:30:c7:92:85:a9:4a:39:fd:9b:5b:cb:2e:14:45:87:b2:
f5:df:f5:a3:24:db:d4:34:b3:67:07:ac:d2:7b:4e:dc:73:1c:
da:64:6a:7f:68:67:22:3f:ca:e4:b8:43:70:11:bc:5e:ea:f9:
f5:e5:74:4c:6f:9a:01:14:4d:14:d4:43:42:bf:b5:6b:6a:06:
97:1b:4e:c9:f4:c1:ab:de:12:7e:d7:d8:b5:79:17:df:08:b0:
15:8a:a0:b3:b9:71:37:7c:6b:3d:a4:6c:4b:90:4f:ca:08:85:
7a:4a:94:b0:05:00:06:3d:17:22:e7:ef:33:cd:ba:f9:13:39:
68:6b:64:0e:ef:ea:c3:3e:ee:b8:da:10:02:f3:94:23:e5:bc:
44:ad:fa:88:79:0d:36:c3:20:34:dc:38:88:b3:da:d1:95:74:
12:ee:e7:8d:3a:c5:b9:c4:2f:80:d4:19:52:35:d0:e9:13:35:
48:97:2c:ec:47:09:2b:a6:f5:da:40:45:bc:af:83:b8:2b:97:
8c:ad:95:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:44:07 2025 by rpki-client