Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afa2f729-f29e-3e95-84f0-2302cd9339dd.roa
File: afa2f729-f29e-3e95-84f0-2302cd9339dd.roa (raw, json)
Hash identifier: /pZyFQ4OPjNgSZkiGd+FxttrTMnaGXbOEj7c8JsVRWI=
Subject key identifier: D2:7B:45:5D:77:50:F4:7E:38:B7:74:CF:FB:92:8A:63:3F:B5:49:BD
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584016866A2BA48F938F89B4DC30
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afa2f729-f29e-3e95-84f0-2302cd9339dd.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.95.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:86:6a:2b:a4:8f:93:8f:89:b4:dc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=219fa4f1-3316-40ac-b316-f0d319a721de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:1c:df:57:1f:75:f0:1f:a8:dc:98:ee:28:
6b:07:ca:89:13:e3:e6:b5:ad:e3:31:28:d5:37:b2:
b9:a5:77:9d:81:c8:97:3a:4a:f3:20:97:8d:80:29:
a2:74:e1:95:a7:ec:55:76:95:17:06:1b:80:f7:ee:
fe:9c:73:d0:75:4f:26:2a:72:4e:29:d0:84:02:49:
ef:c4:9e:ed:cf:96:b7:2c:d7:d2:84:91:72:04:64:
ee:f0:df:4a:cf:dd:8d:ca:30:46:22:e0:ff:23:5d:
4e:7d:ec:f9:7d:50:8e:c6:ad:7f:d0:73:85:59:88:
23:ad:c8:70:1f:b1:24:4a:3d:51:41:31:1d:27:6d:
97:de:5d:6a:c3:d8:e7:e7:0d:7b:f1:3b:27:c9:c6:
23:35:01:d2:0f:5f:b2:fe:11:aa:be:b2:38:ad:26:
02:90:32:79:a6:ff:08:62:c5:09:4f:b3:87:73:ef:
45:19:9e:f8:82:6b:eb:50:eb:b1:f2:d3:08:93:41:
27:bf:5d:a4:8c:79:e7:a9:49:56:8c:4a:45:46:ef:
6d:c8:12:65:99:aa:97:a9:22:7d:ff:cb:c4:67:67:
ea:7a:db:09:fa:6a:be:c0:c5:f2:58:99:aa:c7:74:
0c:ff:89:22:e3:52:b6:b4:7d:d3:78:ee:f0:4c:38:
7c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:45:5D:77:50:F4:7E:38:B7:74:CF:FB:92:8A:63:3F:B5:49:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afa2f729-f29e-3e95-84f0-2302cd9339dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.95.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:f0:78:54:db:65:81:71:ce:92:13:ce:44:b8:14:78:60:47:
87:b1:e4:a3:f5:e9:62:1e:22:b7:9a:ac:d7:4d:8d:d1:30:64:
bb:1a:c0:36:b3:0c:4d:5a:d5:b2:fc:4b:5b:ce:32:0a:d6:fc:
0d:9d:e1:5e:8a:55:d1:7d:85:7b:af:64:e6:07:64:d2:64:96:
f7:89:a4:14:6a:5c:46:d2:84:56:00:92:61:04:05:2e:3b:17:
0b:33:75:24:d1:cf:f4:c5:08:a2:aa:1d:ae:77:43:6b:45:1d:
3c:ba:f3:05:88:78:c4:86:0b:43:3c:2f:c8:28:9e:57:ee:38:
32:98:01:5c:a1:15:7f:7b:c4:43:b7:92:7b:56:a4:7c:b2:aa:
bd:61:93:dd:1d:cd:dc:be:a7:32:23:4f:bc:1e:26:d3:6d:7d:
a4:73:05:e3:fb:a2:e1:f1:b9:2c:86:30:44:ff:95:d8:c2:2c:
67:36:61:0c:7e:d0:07:7b:1c:5b:b7:d3:5a:a2:f1:5e:79:da:
46:56:77:bb:bd:58:a2:6d:94:17:dd:b8:27:a7:f5:60:b1:fd:
6d:ef:6b:e7:c5:45:ad:26:4b:44:02:b1:7b:8b:b5:a9:56:14:
14:dc:45:f6:32:4c:36:c1:32:92:46:f4:d3:a7:ce:69:fd:5e:
41:6b:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:26 2025 by rpki-client