Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b01ce2b9-d95b-325e-8c4d-65ad45617698.roa
File: b01ce2b9-d95b-325e-8c4d-65ad45617698.roa (raw, json)
Hash identifier: Ll2rj7cb9Pu8C5I/nnDh6i+pjrOU9AKk9q2x7GIiGNc=
Subject key identifier: 23:3D:C5:17:88:02:7B:10:07:95:CA:6A:7A:A0:BA:32:79:46:56:EA
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583CE12525334F8D3E74A6C0C400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b01ce2b9-d95b-325e-8c4d-65ad45617698.roa
Signing time: Thu 10 Feb 2022 05:00:00 +0000
ROA not before: Thu 10 Feb 2022 05:00:00 +0000
ROA not after: Thu 17 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 16.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e1:25:25:33:4f:8d:3e:74:a6:c0:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 10 05:00:00 2022 GMT
Not After : Mar 17 04:00:00 2022 GMT
Subject: CN=d65fd602-1a30-4945-a0b8-11b22c90c3c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:9d:46:2b:03:3f:91:76:9a:19:6c:8f:06:
b6:b5:ad:ff:ec:c3:cf:45:3b:9c:76:fc:c2:67:30:
85:60:ef:72:37:a5:89:99:fa:9e:74:87:c5:2a:5c:
9d:78:b1:49:a2:a3:9e:5a:34:3e:32:d6:77:15:70:
e9:21:e0:60:5c:45:c6:29:cd:92:6a:27:ae:7a:c1:
46:6f:26:79:81:d5:3f:08:e5:32:e1:8a:63:05:c3:
91:43:ee:ad:5b:75:5c:3b:71:55:a7:fe:17:d7:79:
c4:11:42:28:09:fb:a8:0e:6c:90:03:ba:87:6f:ed:
be:35:24:53:52:7c:0c:99:e4:7c:ae:a4:97:07:75:
8f:7d:d6:4d:c6:60:80:7d:6b:6a:aa:67:93:25:02:
75:c1:7a:01:2b:6f:51:1c:9e:a2:c1:c4:3c:33:e2:
b9:17:42:55:c8:d3:f2:cc:31:4e:9d:8e:3b:55:47:
ac:2c:86:a5:64:b5:59:52:92:de:cd:ea:b2:ee:33:
f6:0e:92:35:98:1c:4f:e8:cc:b3:79:28:f5:61:30:
df:8c:04:1f:7f:22:e2:1a:91:92:91:76:87:24:f0:
ba:0d:fd:9c:ab:69:ac:bf:dd:82:db:5c:a5:53:65:
69:2a:2c:8b:10:dd:11:fe:88:72:1a:9c:09:65:6f:
9d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:C5:17:88:02:7B:10:07:95:CA:6A:7A:A0:BA:32:79:46:56:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b01ce2b9-d95b-325e-8c4d-65ad45617698.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:2e:c9:a8:19:a4:56:ed:c0:df:7b:dd:40:54:f3:37:c3:a0:
c7:d4:88:ba:54:4e:40:88:1c:1f:d4:cd:da:03:15:4f:6c:0f:
2a:f7:cd:0e:ee:32:e9:46:d2:f9:10:43:78:61:dd:a1:59:a5:
24:db:24:21:32:29:7d:c0:b7:dd:06:a7:3c:77:d8:9e:b9:65:
81:95:b5:2f:6b:3d:c3:79:34:e5:93:0f:15:e5:38:0b:cd:16:
b3:71:9d:3c:77:18:eb:13:37:f8:0b:94:6a:da:87:7e:53:e3:
96:91:14:fc:ca:3e:39:cc:79:8d:7e:d1:ad:82:2f:31:de:a5:
ba:b7:33:c0:ee:3f:c7:28:89:81:b6:85:86:91:a4:4b:6e:59:
2f:e1:84:8d:fc:98:d2:1d:06:68:34:39:4a:98:91:58:00:6d:
aa:06:82:23:35:d0:a0:e7:c8:4b:fe:0a:25:58:75:c8:78:92:
7a:bd:22:b5:ab:90:8d:e1:67:60:a3:c0:45:76:a7:3a:bd:87:
9f:7f:a4:fb:3d:2e:e1:35:9f:fb:b3:17:a8:d3:80:98:d9:f1:
0c:fa:ea:fa:04:64:42:0b:1d:76:de:da:45:fb:d1:54:3b:61:
83:36:a8:be:06:06:4c:62:d8:8a:51:e2:c2:bd:4f:98:aa:be:
ef:26:94:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:46 2025 by rpki-client