Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b11733a3-961b-35de-9aae-9b99a042d439.roa
File: b11733a3-961b-35de-9aae-9b99a042d439.roa (raw, json)
Hash identifier: z1Ja0jHFnYQtqa0PiFtLvi2aDNlPnWwMWlm2ZC4Vma4=
Subject key identifier: 6B:14:5D:0E:BC:E1:79:EB:A2:9D:FB:D1:7F:1E:20:70:FA:81:32:76
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858405C857A0983E4E84275721BF0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b11733a3-961b-35de-9aae-9b99a042d439.roa
Signing time: Sun 25 Dec 2022 12:00:00 +0000
ROA not before: Sun 25 Dec 2022 12:00:00 +0000
ROA not after: Mon 30 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.154.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5c:85:7a:09:83:e4:e8:42:75:72:1b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 25 12:00:00 2022 GMT
Not After : Jan 30 05:00:00 2023 GMT
Subject: CN=5a5047cb-0cf1-4b48-99f1-32f51fdb8752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ca:21:5c:88:84:b6:f1:d9:61:51:4a:f3:59:
12:79:67:db:9d:cd:b8:d4:54:3e:95:45:4c:3b:29:
61:d8:d8:a5:09:fd:5c:30:22:e1:b6:a5:e4:2d:7a:
5d:36:cf:5e:d2:4d:ee:cc:4d:8e:1a:8e:21:42:07:
28:25:9c:a6:ec:83:2d:9c:5f:47:59:ad:5c:f3:e6:
f6:e0:fd:c3:90:ca:d6:6d:89:db:dd:86:0f:89:fc:
bf:06:54:18:0a:a0:b4:15:16:2f:8a:21:19:e3:3e:
95:03:af:77:06:46:f5:98:e0:f3:55:bc:5c:2e:23:
7f:a6:cd:8b:66:f2:bd:be:bb:ec:e7:61:3f:bf:33:
2c:6d:8f:a1:1a:90:28:e9:20:2a:dc:96:0e:0f:01:
73:d9:e3:bd:d8:49:2c:12:b1:b6:e7:b3:6c:c2:78:
9a:00:c3:47:5a:ba:50:60:74:00:03:e1:ad:52:12:
1b:97:9a:c5:f9:c2:84:3c:2a:40:ac:32:a7:30:a7:
42:79:b4:a4:f1:d3:01:9a:75:97:08:f7:fa:64:cb:
6b:32:f9:60:38:91:7f:8a:71:e5:ae:da:af:5f:84:
7d:d9:7a:80:70:f2:41:7a:86:e5:95:63:64:db:94:
00:51:ef:4c:b4:a0:a2:53:d8:9f:d8:5c:bd:6a:8a:
84:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:14:5D:0E:BC:E1:79:EB:A2:9D:FB:D1:7F:1E:20:70:FA:81:32:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b11733a3-961b-35de-9aae-9b99a042d439.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.154.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:0d:1f:94:3f:d2:59:91:ba:74:50:8a:cd:ea:77:05:69:f4:
2c:ef:ad:06:5b:5f:ea:26:76:8e:13:7f:af:a3:75:e4:2b:53:
4b:7e:9a:d4:d8:79:e4:93:ad:1b:56:2d:8c:08:27:e3:e7:6e:
61:21:7d:ab:c9:90:f6:df:7c:26:72:df:de:e3:22:c0:d0:c4:
25:11:71:1a:ce:aa:98:c9:c0:e8:ec:b0:91:f8:95:af:dc:eb:
ee:ab:35:3c:07:2d:63:1c:46:4b:e8:8d:78:55:01:e6:e0:9b:
e2:eb:30:fe:7b:c7:7b:93:f7:0d:43:eb:8b:03:5b:2d:d7:19:
12:9d:e6:ce:1b:49:94:e6:f4:96:ff:6c:13:cf:ac:5b:9c:53:
a8:1f:ae:9b:18:92:4c:4c:07:ad:21:41:d5:38:a4:c3:57:01:
84:35:d4:9d:e2:f7:b6:fc:42:72:50:f1:1f:a1:ac:a2:ba:49:
38:49:ed:ea:13:f4:85:d2:56:8b:f0:f5:34:78:95:37:0e:2e:
df:23:19:91:98:ff:98:34:8f:16:da:13:ca:00:67:b4:50:30:
5a:6c:3e:af:c4:22:c0:c8:0a:9a:8d:41:b5:39:46:36:f9:59:
eb:fe:58:a9:67:96:58:42:39:41:7c:0d:37:76:fb:db:ae:7e:
bd:3f:f3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:12 2025 by rpki-client