Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b21451ef-0d0e-3cb0-a426-9facaa3e84e2.roa
File: b21451ef-0d0e-3cb0-a426-9facaa3e84e2.roa (raw, json)
Hash identifier: WoUdI2jYdQ6kpEpeKSqEB4dJkuq3753yGuOWkkAULrw=
Subject key identifier: 1C:CD:AF:F1:6D:96:17:D0:F8:C6:94:8A:9F:FC:E7:04:75:69:3E:45
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840BCA96AF4951F1E0A14AE4400
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b21451ef-0d0e-3cb0-a426-9facaa3e84e2.roa
Signing time: Sat 28 Jan 2023 12:00:00 +0000
ROA not before: Sat 28 Jan 2023 12:00:00 +0000
ROA not after: Sun 05 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.177.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bc:a9:6a:f4:95:1f:1e:0a:14:ae:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 28 12:00:00 2023 GMT
Not After : Mar 5 05:00:00 2023 GMT
Subject: CN=3d53ac25-dbd0-45cd-8ee7-57df043c2495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:04:3a:7d:05:11:f8:86:1f:8c:7f:1e:e7:ba:
9e:30:3a:0f:21:f8:3d:9f:83:e8:f3:2e:c8:48:9e:
a3:f7:4e:27:db:b4:79:49:54:ad:6e:5e:8b:61:e9:
5e:ca:f7:46:d6:2b:59:83:8a:65:c3:f0:65:2d:4d:
db:b4:99:c6:be:6f:37:84:03:3b:e3:46:10:a4:44:
d8:b2:8b:d5:15:b3:7a:5f:34:8f:ea:01:22:6b:30:
78:a8:b4:66:be:a5:2d:25:e8:54:64:ff:10:25:ad:
e9:2f:16:b8:54:d4:bf:c7:ae:5e:79:fb:7f:17:51:
ad:44:a1:ae:a0:ca:6a:33:1b:4c:65:3b:5f:d0:cf:
14:c7:3a:5b:98:ec:01:ae:7f:c5:76:55:2d:77:37:
da:8a:a9:84:4a:48:2e:44:c1:24:67:02:67:60:ca:
01:a2:e7:9c:1e:15:0a:45:68:4b:fb:42:ec:ee:5e:
e1:df:72:22:62:29:18:dc:58:fa:e9:de:8c:22:c6:
fc:56:70:7a:54:30:0f:76:bd:b8:91:17:2b:30:fc:
f9:af:c5:6f:bb:74:88:14:9e:e5:e5:3b:3b:e0:d8:
19:64:02:6c:ac:3a:53:d5:3f:42:a2:07:b3:22:41:
be:c2:e6:07:71:86:32:76:84:d6:55:49:a2:26:63:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CD:AF:F1:6D:96:17:D0:F8:C6:94:8A:9F:FC:E7:04:75:69:3E:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b21451ef-0d0e-3cb0-a426-9facaa3e84e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.177.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:8d:42:b5:60:74:f5:5e:ca:25:f0:a5:ce:ba:a0:99:47:99:
09:f4:c0:f4:69:ee:03:ed:f3:2e:f4:07:83:06:97:e4:56:78:
e3:5d:84:3e:28:dd:a0:bb:54:dc:c6:27:5f:21:fe:99:4a:4a:
f3:0b:21:16:32:19:1d:95:af:44:f8:32:c9:a7:02:7a:9d:2a:
c4:cd:06:40:35:d4:79:76:0b:a1:18:35:5e:83:ca:56:36:0c:
27:66:82:57:73:14:42:6f:ca:70:f3:39:05:8c:40:7f:d9:88:
99:f5:31:0a:98:d5:00:9a:ed:1e:6e:eb:34:4e:e9:b6:a9:61:
c2:83:cd:92:de:5e:c2:ce:0b:3a:54:a3:94:48:80:44:96:2d:
55:82:b4:f8:c7:b9:62:53:0f:34:d5:f8:e2:d3:79:c9:43:72:
cc:96:ed:60:60:29:b2:92:33:2b:88:fa:a2:96:3f:65:28:5c:
65:a9:20:2b:bd:98:bf:da:85:9b:02:24:1a:54:03:a5:91:24:
3a:14:eb:94:44:58:31:e6:33:4a:e9:88:c8:94:e7:34:0b:9d:
fc:d8:1f:02:3b:58:d3:d5:b0:1d:4e:6b:74:b0:e9:7f:e3:11:
c8:da:1b:64:94:13:88:8e:9a:d9:4a:5c:39:f6:57:a9:22:cd:
19:72:21:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 00:27:25 2025 by rpki-client