Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aeabc781-1b77-3793-a3aa-ad91d504b7d2.roa
File: aeabc781-1b77-3793-a3aa-ad91d504b7d2.roa (raw, json)
Hash identifier: 8ZdwXQ4r711dIaA+ZWNIAmqAfkxHDrN9CmChjKaw7Ys=
Subject key identifier: 11:EA:DF:4A:07:8D:8A:A8:D4:3E:8A:79:84:4D:BE:3A:EE:17:BD:D5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE0CBD8B4565F6D601AC77300
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aeabc781-1b77-3793-a3aa-ad91d504b7d2.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e0:cb:d8:b4:56:5f:6d:60:1a:c7:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=d970c251-f696-492a-b0db-8bc5cc55e131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:49:7b:d0:23:84:9a:28:66:93:f9:b4:ab:
f1:f3:93:63:ea:fd:91:0b:86:04:40:e8:a0:a7:60:
bd:21:69:17:35:36:27:27:09:d6:c9:35:6b:c2:2b:
44:f9:7e:9d:d2:03:a1:ca:b1:78:2c:0d:f8:59:42:
12:f1:cc:44:cb:c8:e6:c6:62:1f:2c:38:a8:b4:0f:
0a:13:a6:d8:e4:f4:db:ab:22:a7:84:4c:a8:83:f1:
6d:f8:04:2a:45:52:1c:ed:f9:3d:e3:e7:81:a5:25:
77:0c:ca:7b:6f:06:4b:38:c0:e3:f1:57:89:68:fa:
5c:54:90:fe:1d:80:a3:7c:7a:da:6f:06:aa:34:7e:
c9:72:84:a3:c4:4c:7c:6c:76:80:a9:d1:78:56:da:
be:de:e0:5d:40:ad:0b:dc:60:e6:89:5c:a5:c4:8b:
0d:2a:0e:a7:63:f3:db:6e:6f:39:53:c1:79:f0:34:
59:fe:1e:c7:4d:11:8f:81:7d:48:e4:cc:b7:dc:6b:
d8:47:fe:cf:96:43:a4:40:c4:88:d2:ee:d7:71:da:
89:5a:c2:ca:7a:c0:f4:6a:49:3e:03:57:8a:f1:a3:
85:38:cc:d7:23:5a:94:3b:7d:73:5e:9e:92:a3:2f:
45:f6:4c:cc:08:a5:cf:59:ac:7d:f1:ba:f7:6c:9e:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EA:DF:4A:07:8D:8A:A8:D4:3E:8A:79:84:4D:BE:3A:EE:17:BD:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/aeabc781-1b77-3793-a3aa-ad91d504b7d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:18:8b:af:d3:a2:a7:db:ee:13:61:ab:6b:9c:8a:b7:38:14:
82:25:8b:c3:9e:a5:f3:42:35:c3:b0:0e:9a:68:b2:8e:91:a2:
d0:28:3a:a1:80:9a:a9:5c:58:f9:b4:ca:a2:08:df:de:c4:9e:
2f:85:68:c0:a8:d2:5c:9c:49:9b:ce:7f:2e:fa:3c:11:87:1c:
4b:b9:4f:48:32:0c:e2:49:f6:1f:82:c3:23:28:eb:0c:b1:47:
85:17:01:13:2e:44:97:24:22:45:1e:30:9c:7f:3f:b7:22:11:
16:98:6a:a7:17:71:13:01:f4:e9:c0:36:5c:47:5d:7b:4b:29:
1e:e3:a4:06:11:47:76:a6:21:c8:bd:f7:85:d4:6a:38:97:47:
50:44:94:bb:e8:0c:13:77:f4:ce:d5:5d:e8:ed:9d:12:de:8c:
7a:3b:df:e1:2a:de:98:73:69:e7:ef:f1:65:13:63:1f:b5:f8:
3e:4a:fc:0d:e6:28:93:b2:ef:40:95:00:91:ea:76:96:b9:74:
c0:f3:72:14:93:e8:73:40:0d:c7:cf:29:05:5c:16:62:fb:90:
47:4e:ce:da:f9:2d:a8:6b:0e:f0:5b:29:23:5e:b5:9f:93:39:
8e:68:79:dc:00:78:ea:b6:69:28:c7:3d:f7:d7:88:84:a2:9c:
1b:71:36:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:18:38 2025 by rpki-client