Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afd3ff7f-704c-3cb0-af48-a2becec5c6e4.roa
File: afd3ff7f-704c-3cb0-af48-a2becec5c6e4.roa (raw, json)
Hash identifier: ZCmPmSRUcLsHmPu6sifWSCtkC+m9BNIQtg8dxB9/8VU=
Subject key identifier: CF:18:F8:9A:B1:D3:EB:B0:A3:F1:E8:0C:76:1C:AB:F9:A2:36:2D:1C
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FAF51635C3F989F7F7921B1C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afd3ff7f-704c-3cb0-af48-a2becec5c6e4.roa
Signing time: Mon 24 Oct 2022 12:00:00 +0000
ROA not before: Mon 24 Oct 2022 12:00:00 +0000
ROA not after: Tue 29 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 16.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:af:51:63:5c:3f:98:9f:7f:79:21:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 24 12:00:00 2022 GMT
Not After : Nov 29 05:00:00 2022 GMT
Subject: CN=a4a62739-ca9b-4323-a968-1560f340f623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f6:6a:ec:9f:04:fb:47:0a:8e:20:d5:24:50:
a4:de:6d:37:8f:9c:1e:91:82:6a:83:5f:70:d9:40:
f6:d6:b8:38:26:91:fa:cf:26:5d:40:2f:d8:ef:fc:
f2:e2:17:31:31:fa:0b:3e:05:7a:dd:4e:6c:23:3e:
ef:7f:db:71:6f:70:08:5a:dc:dd:d1:52:60:32:cc:
5f:e6:15:cc:03:d2:65:4c:fc:58:87:f4:52:2d:7c:
14:8c:14:70:92:0f:71:a8:d5:d8:63:5b:3f:84:06:
05:5e:9f:33:8d:37:6d:a3:2f:5e:9d:3f:0d:8e:20:
4e:53:62:bf:6f:0f:48:14:cf:6a:4b:96:74:85:8b:
75:40:ce:41:3a:87:7b:64:4c:10:b2:e6:74:07:49:
4f:a1:33:e6:92:02:dd:63:d3:7f:7f:41:f1:8c:4b:
7c:26:65:21:21:29:7f:ba:01:39:11:53:77:a1:d8:
a8:42:fa:b3:15:c1:bc:ef:d5:78:f5:cb:ef:ec:b0:
e1:f6:6b:05:9d:b5:dd:ce:75:09:db:9f:a7:e8:aa:
65:31:44:41:30:4b:ff:ab:ab:3d:2e:fb:32:b9:02:
d5:ec:b8:07:9c:45:49:15:77:0b:35:81:34:f8:3b:
22:10:36:39:33:73:65:ce:08:7c:ae:a9:b2:fe:8a:
9d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:18:F8:9A:B1:D3:EB:B0:A3:F1:E8:0C:76:1C:AB:F9:A2:36:2D:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/afd3ff7f-704c-3cb0-af48-a2becec5c6e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:bb:af:ed:a5:6d:38:2c:41:0e:85:f8:db:18:07:8f:a9:86:
80:b8:99:e5:38:b3:5a:c8:8c:c6:ef:aa:61:bf:d2:4a:4c:88:
42:44:f7:28:70:d0:9c:2a:55:92:40:e3:de:c6:84:d2:28:cc:
50:45:87:bc:74:be:80:6c:8b:c5:92:06:e8:01:14:91:38:81:
3e:78:db:7e:75:63:5d:9e:2d:0a:52:88:1c:15:85:49:5c:90:
67:f3:96:c1:a7:fd:b7:cf:f4:07:44:33:e8:fe:45:e5:b5:89:
41:84:0c:1e:79:fc:4d:9f:20:5a:be:6b:10:49:ab:97:1b:31:
c5:9e:b4:1c:74:80:4e:9b:e0:f1:cc:9e:0f:ec:d8:70:f0:5b:
04:8c:01:f2:3e:c6:09:f0:0c:7b:80:84:1d:2c:0d:21:10:e3:
2e:20:43:9e:1f:7c:56:2e:c0:ec:32:df:24:1b:31:dd:0e:41:
83:ce:17:8c:eb:14:39:c4:58:36:d1:7e:46:93:ce:28:28:00:
1a:a2:29:34:56:37:56:3f:a2:e2:c3:a4:74:8d:2a:00:59:98:
74:ed:15:57:c7:78:00:fa:e0:1e:94:42:e2:b2:8f:b6:19:a0:
07:76:c7:11:24:5c:c5:8f:45:bf:45:f3:74:9a:18:5a:94:df:
5e:69:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:41 2025 by rpki-client