Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af058a82-aa5e-3684-b156-270a9ba1de66.roa
File: af058a82-aa5e-3684-b156-270a9ba1de66.roa (raw, json)
Hash identifier: Y9QOFKFFzrsGOfwPBmDvuZGvLH68u7gohtqZXaCIFVw=
Subject key identifier: 6C:DD:0B:27:0E:E2:D8:57:E6:81:2F:71:BE:C6:00:D4:17:3A:9B:7C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840944C84DD64FFAA10F4D39BC0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af058a82-aa5e-3684-b156-270a9ba1de66.roa
Signing time: Sat 14 Jan 2023 12:00:00 +0000
ROA not before: Sat 14 Jan 2023 12:00:00 +0000
ROA not after: Sun 19 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.182.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:94:4c:84:dd:64:ff:aa:10:f4:d3:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 14 12:00:00 2023 GMT
Not After : Feb 19 05:00:00 2023 GMT
Subject: CN=03d68e48-fe03-42d5-9297-4abfe12f3e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:82:18:59:f2:b1:e7:85:f5:78:2c:85:a7:
9d:dc:e2:7b:7d:7b:c4:67:66:a1:97:f5:bd:94:1a:
19:f8:dd:bc:9d:de:5a:d1:a4:c1:4e:2c:5e:c5:ff:
80:fc:c6:af:e4:1d:0b:77:a6:0b:1b:69:f4:c7:64:
1a:79:c4:fc:64:d3:16:37:db:88:46:2d:6c:7e:e0:
e6:66:a3:7a:aa:dc:74:16:c5:1a:df:30:3b:54:b0:
6c:fd:99:13:55:39:7e:8f:f1:ff:b0:ca:c1:f2:3e:
4e:77:a1:e0:d1:72:d6:6a:fc:46:e5:b2:be:26:1c:
85:97:a7:3e:c0:3f:01:44:26:e9:61:8b:79:ef:ed:
cc:bf:59:c6:79:10:54:02:60:5c:d7:47:11:ac:c0:
2b:86:8b:e4:26:1e:86:e8:93:e9:2f:56:69:33:ca:
82:e7:db:22:4f:c5:20:8e:cf:70:63:48:0d:3f:c5:
a0:62:0d:5f:a1:da:5d:ab:86:c9:dc:5b:57:bf:bc:
2b:87:9f:48:c3:c2:e0:34:96:24:e0:27:60:f7:8a:
85:e9:cc:7e:69:74:ca:fa:b0:ab:3f:58:46:4d:ee:
06:95:95:b1:69:f6:1a:68:e1:8d:ea:9f:d1:6c:b0:
a2:32:b5:1b:2f:b1:55:06:a5:e0:46:31:da:df:3c:
86:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DD:0B:27:0E:E2:D8:57:E6:81:2F:71:BE:C6:00:D4:17:3A:9B:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/af058a82-aa5e-3684-b156-270a9ba1de66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.182.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:64:20:7b:92:e9:c9:49:54:32:fe:85:57:d3:4e:28:c9:8a:
30:1c:ab:6e:c1:8a:93:44:a7:c0:6c:80:c1:30:e9:51:e9:92:
a9:31:5c:5d:15:09:93:bb:8d:93:4f:90:68:c9:b2:1f:f1:ac:
97:37:7b:f2:b2:df:e9:c8:82:0d:f2:3b:01:0f:35:26:89:24:
4d:71:d7:72:c0:32:db:bf:94:a8:3a:65:c3:c6:81:50:c3:f6:
94:97:dd:be:10:f9:66:9d:f3:0f:75:ba:63:db:11:11:41:9e:
44:54:26:01:cb:6a:d3:02:08:22:5e:27:da:a6:fa:2e:32:96:
ad:c3:53:21:e7:4b:da:65:31:1e:9b:e1:15:ca:1d:08:ef:50:
29:49:ea:44:ff:17:8f:b4:8b:10:03:6f:26:64:4f:a8:e5:92:
3b:18:26:42:9d:dd:37:43:f4:c1:b8:5a:53:04:86:93:aa:81:
b6:ff:67:5e:b6:b0:eb:52:1f:58:73:74:94:04:0e:b6:d0:0c:
0f:42:4e:0e:75:3c:31:bf:c3:e8:4b:56:8d:6d:c5:fe:53:dc:
6c:e3:22:48:2f:4e:83:7e:51:f6:f8:06:af:31:c4:b5:93:66:
72:c8:c1:7b:72:39:26:2e:5a:48:b4:40:52:e8:b8:18:1b:36:
08:80:cc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:43:09 2025 by rpki-client