Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b85b5a8f-8bc3-32c7-8811-e4a0e0439de4.roa
File: b85b5a8f-8bc3-32c7-8811-e4a0e0439de4.roa (raw, json)
Hash identifier: 2xx5OV0FfaWCMqDmCnr5pIQyp1Dd5VG6WSCbbj9pMcQ=
Subject key identifier: 42:B6:E9:25:0C:FC:84:F8:EA:E6:9B:E5:E4:9A:5A:3A:55:B7:35:78
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404BCCCEC7848FC963ABF1C008
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b85b5a8f-8bc3-32c7-8811-e4a0e0439de4.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:cc:ce:c7:84:8f:c9:63:ab:f1:c0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=efe178d8-55c0-4609-a623-db8b08b218c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:85:08:eb:63:10:a8:04:01:36:99:8b:18:
3b:79:74:41:6f:d0:28:e3:6a:a0:04:f7:7a:4c:6a:
43:06:66:18:95:5a:2e:c0:37:32:f4:fd:8d:df:7b:
36:83:2f:c9:f8:bd:92:f6:13:06:1d:45:0e:90:ce:
53:50:f3:27:e4:3e:8a:55:cd:bb:67:5e:87:23:4a:
1c:7e:be:d2:b9:a7:34:36:5e:b0:db:16:c6:47:f8:
85:e5:42:46:99:53:a5:aa:e0:3c:7a:e6:bc:e1:f3:
c7:f3:7c:0d:67:53:2f:74:f2:0e:32:e8:e2:da:92:
df:33:cd:b2:36:fa:f9:0c:9b:c4:f5:17:9f:77:2d:
18:09:d6:e1:13:f4:70:be:9c:ef:78:41:b5:0b:aa:
a1:e8:76:90:87:ad:1b:c1:e5:ab:3c:14:25:6f:1a:
49:dc:5a:c4:9f:e1:05:3a:31:cf:fb:b4:94:12:1f:
19:9b:09:13:87:51:04:54:68:63:aa:ca:67:88:7f:
39:7f:78:9d:14:ef:b7:d9:be:bb:1d:ab:56:a1:4c:
3a:b2:5c:15:5c:19:03:f8:14:0d:df:e8:e1:4a:f4:
af:9a:11:ea:b0:ad:eb:7d:47:00:71:78:38:f9:19:
9d:e4:d6:90:7d:a3:2d:36:a4:00:80:e3:09:49:ce:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B6:E9:25:0C:FC:84:F8:EA:E6:9B:E5:E4:9A:5A:3A:55:B7:35:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/b85b5a8f-8bc3-32c7-8811-e4a0e0439de4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:b3:8f:57:e6:7c:5b:8e:a2:7f:6f:63:13:a1:5a:18:90:08:
cf:26:b7:6a:63:71:7d:02:10:e7:1c:6f:24:44:f2:7d:94:5c:
2f:6e:dc:81:95:f2:83:5d:c4:7b:3e:08:db:fe:49:27:a1:c3:
5d:3c:fc:45:01:17:af:e7:88:ca:64:e8:2d:06:74:23:06:6d:
ae:6b:5f:eb:30:dd:04:8d:20:62:a0:43:30:25:12:cf:d6:c8:
8c:67:d9:cf:28:4f:80:82:be:fb:68:ff:04:a2:ce:91:bf:45:
ed:72:14:70:38:3c:5d:74:1c:13:ff:03:23:03:51:73:ef:60:
df:2b:89:ba:7a:09:e9:7b:62:79:ef:07:6e:40:8f:d3:f4:86:
62:72:22:b0:a5:e8:9f:67:7e:cb:91:6c:f6:46:b4:cb:23:01:
44:73:5c:df:9d:75:bb:b4:cb:67:cd:95:39:29:a2:45:11:cc:
78:43:15:01:6e:c3:6c:ad:9e:a9:ca:19:51:af:39:5d:62:08:
e1:b7:ef:f0:86:bc:6b:fd:75:a6:76:65:14:de:c6:b5:8f:bb:
59:1e:db:16:f0:ea:6d:54:ff:d2:c7:f1:c0:02:66:53:c3:d1:
0a:a6:a8:da:4c:39:9b:d1:97:39:69:ab:9d:62:15:83:7c:c7:
d5:31:8a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:56 2025 by rpki-client