Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b43de174-48c9-391e-be1f-671c393fff86.roa
File: b43de174-48c9-391e-be1f-671c393fff86.roa (raw, json)
Hash identifier: 19Jl2inQGbSsqNSjlsUO5MY7OeLCdV5Uq8l5x/mEDrg=
Subject key identifier: B6:A3:FE:F1:05:13:56:32:24:EB:B0:81:47:93:33:33:3C:69:2A:27
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858408BFB4A245F9FAF317DC32600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b43de174-48c9-391e-be1f-671c393fff86.roa
Signing time: Wed 11 Jan 2023 12:00:00 +0000
ROA not before: Wed 11 Jan 2023 12:00:00 +0000
ROA not after: Thu 16 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.101.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:8b:fb:4a:24:5f:9f:af:31:7d:c3:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 11 12:00:00 2023 GMT
Not After : Feb 16 05:00:00 2023 GMT
Subject: CN=a66a70a4-da82-4eb3-a0ca-f86286d9315a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:54:41:b0:c4:b7:17:d2:b7:e9:66:29:09:91:
80:f3:64:7e:40:0c:08:2a:fd:7a:34:d6:ea:69:8a:
da:a3:6c:40:32:1d:ca:bb:e2:81:da:ad:70:41:f6:
97:2b:34:8c:ee:ba:94:1a:cf:f0:97:9f:fd:a8:b2:
b9:64:a0:ed:9b:7f:50:25:d3:5c:e4:9f:91:cc:30:
a9:42:4f:82:5d:ca:ac:c3:ac:84:59:7c:dc:6e:c9:
64:f4:c7:00:ad:f6:2b:f0:f7:32:d3:7a:9d:ec:54:
13:2d:d8:8c:cf:22:9a:93:78:bc:c8:50:11:3d:7a:
e4:19:28:03:7c:7f:4c:bf:69:bc:5b:84:6d:6f:6c:
17:34:5d:38:a2:ec:bd:aa:e5:7a:2d:67:99:f0:af:
47:a3:2e:0f:28:55:48:84:e6:86:fd:a8:10:d4:d2:
66:4f:f0:ae:19:1c:0f:de:86:1a:49:3d:8f:aa:c2:
3b:6b:bd:f7:0a:c6:33:25:5c:1f:d1:d1:db:19:d0:
e5:9c:d8:aa:58:f4:68:a3:ce:22:b5:33:b3:fe:e7:
21:bb:bb:c7:a3:4b:e0:6f:03:02:49:61:59:96:f3:
96:aa:df:a3:ae:db:56:84:15:30:18:79:70:7a:24:
ca:79:f4:d7:09:54:79:a6:cf:28:f5:33:f6:7e:17:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A3:FE:F1:05:13:56:32:24:EB:B0:81:47:93:33:33:3C:69:2A:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b43de174-48c9-391e-be1f-671c393fff86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.101.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:ef:6b:24:f3:fb:6b:b5:a1:05:1f:79:5a:63:bf:d1:42:7c:
33:66:4b:c8:bf:9e:76:0d:de:f5:fc:10:fb:5c:d2:83:21:f2:
c5:b0:70:1f:d5:be:2e:d1:ec:07:68:af:bd:58:7d:99:bc:45:
13:6a:0f:5c:30:9c:75:f4:ef:f7:31:de:be:06:72:8b:89:0b:
1a:af:69:bf:db:90:17:ff:fb:73:d8:44:1f:39:58:cf:7f:e7:
71:63:52:6a:b0:74:73:d4:91:2a:59:f1:5d:2f:cf:85:22:4b:
72:c9:85:49:7f:c0:0f:f1:cf:f7:b8:51:01:0b:86:44:42:f7:
7c:48:e6:48:3e:53:d4:7e:9f:76:86:79:03:8d:a1:15:64:da:
d1:0e:2d:e4:57:89:75:0b:7e:05:65:db:21:2e:3f:50:c3:16:
2f:f9:70:cb:5d:03:58:a7:0d:68:4c:c9:dc:a8:c9:d9:f7:84:
83:7d:b8:17:5e:d3:57:c5:7e:32:67:a7:96:d8:b1:0e:bb:93:
a7:cf:a4:55:3b:d9:69:6a:42:af:92:c6:4e:d2:6e:5e:23:f4:
ff:95:aa:e7:5f:ae:e7:a9:8b:b1:ed:af:d0:bc:36:4d:5a:70:
7f:fa:90:76:45:a3:41:e9:b9:f2:39:92:dd:09:29:99:24:0f:
11:8d:e9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:18 2025 by rpki-client