Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba6daaf5-a103-3aaf-8bf7-de5e698164e8.roa
File: ba6daaf5-a103-3aaf-8bf7-de5e698164e8.roa (raw, json)
Hash identifier: FzRmm+iqvDRZVAeoljk1f/2aKIFvvHti+tBrfi0sci4=
Subject key identifier: DF:43:C2:EB:E3:73:E9:14:17:55:9D:10:DE:92:AC:30:2A:6E:8F:8A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584065EA3D48DF2ECE9DFAB9F500
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba6daaf5-a103-3aaf-8bf7-de5e698164e8.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.56.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:ea:3d:48:df:2e:ce:9d:fa:b9:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=1edf391e-4e1e-429d-b175-1805f7d271f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:c6:ca:17:d5:d4:ac:37:45:3c:50:58:cf:
d3:2b:de:2f:41:ba:1f:99:fb:76:cd:d4:38:61:ee:
eb:c6:e1:2f:78:aa:e2:dc:f1:44:a9:94:ee:8c:18:
6a:8b:37:6a:cf:83:90:34:15:30:ff:8a:f7:93:3d:
36:d9:fa:c9:f8:b5:08:6e:1d:5a:09:cf:55:27:5b:
ff:57:4d:6e:35:a0:89:8e:40:15:45:b5:42:f4:72:
32:c1:55:68:5d:cf:02:88:58:73:ca:d1:4c:0a:af:
75:d9:ff:01:9d:65:9f:7e:c5:13:ac:86:96:6c:bc:
f9:e6:72:da:da:87:3e:5e:74:25:89:59:4a:61:5c:
80:26:f3:54:bd:f7:be:e1:5e:da:6e:99:42:65:08:
a2:22:e7:da:0a:65:7e:c4:50:b0:ee:37:ed:83:82:
d4:0d:cc:26:ac:97:81:48:d2:49:da:90:fc:ae:4f:
96:d5:6e:19:e2:85:c0:d6:11:66:56:d0:f8:3e:d6:
e5:71:58:14:9d:cc:ba:6d:bb:2a:04:83:e4:ee:26:
0d:fa:f9:a2:99:2c:d8:8a:df:31:1c:f7:e5:1d:a7:
77:09:48:a8:45:99:6e:de:c7:fa:9e:2f:95:f6:dd:
19:ae:2b:a9:43:8e:7e:9c:78:23:8a:42:70:49:37:
6b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:43:C2:EB:E3:73:E9:14:17:55:9D:10:DE:92:AC:30:2A:6E:8F:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba6daaf5-a103-3aaf-8bf7-de5e698164e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.56.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:15:bb:4e:17:e8:cc:cc:3b:86:ee:b1:93:5a:1d:a9:17:27:
e9:d5:d0:db:d9:1b:2e:fc:c0:f4:08:c8:ee:5f:24:57:33:4b:
2b:9c:57:7f:72:65:b6:b2:3f:5c:a5:ec:12:51:37:7f:c9:f8:
7f:00:72:ee:42:19:5c:25:26:67:b5:c2:2a:c7:fd:e3:6e:f8:
9e:46:2a:cf:27:d6:af:fa:b1:0a:ca:0b:a3:80:62:29:3f:0b:
31:29:38:84:4a:18:b7:77:82:67:c7:c7:b2:8b:6a:e8:fa:55:
ba:35:f4:23:90:4f:ac:4e:1e:31:6b:c0:53:0b:cd:82:1e:98:
4f:a5:39:35:bb:b0:8c:d9:1e:a4:40:7d:c4:db:ca:07:81:b6:
8a:57:e9:3c:cb:71:00:72:88:49:0e:66:96:3f:94:ce:a8:3b:
da:c0:d2:5a:36:0e:14:e3:62:ce:ca:e4:08:b0:7b:88:5f:8b:
08:60:b8:10:92:eb:7d:69:98:df:c5:8a:08:9c:d6:d6:01:18:
6d:4d:de:fc:67:ff:85:be:88:21:e5:c8:7d:4a:78:e9:d5:83:
c8:49:bb:11:b6:56:0a:d7:56:cb:ce:5b:2e:c8:0e:c0:84:28:
7b:82:76:7b:e1:bf:c6:84:1c:b0:d5:73:29:77:1c:3f:19:d9:
2f:da:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:07 2025 by rpki-client