Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba96de62-ca53-3390-8603-f79c9f27f8ec.roa
File: ba96de62-ca53-3390-8603-f79c9f27f8ec.roa (raw, json)
Hash identifier: 6ZG84YYJK/ge9xGF81hUV3X/DbZYi5T8gqIVnnCoJlo=
Subject key identifier: D4:4A:76:8D:51:C5:2E:5E:F2:41:BE:9B:CC:7F:8C:10:61:E6:FD:B8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404BBDE4027A2C76F8B0997A10
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba96de62-ca53-3390-8603-f79c9f27f8ec.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.88.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:bd:e4:02:7a:2c:76:f8:b0:99:7a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=486a490a-209b-4fcb-af6a-512e632deb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:37:94:89:35:14:44:4c:07:a6:3f:42:03:
68:9a:3c:c2:fc:fa:89:4f:73:09:63:fc:02:89:fb:
4c:3d:5a:af:cc:9c:56:29:1b:8f:11:d6:74:ce:23:
87:bb:61:2d:cf:ab:fc:f1:d4:41:1f:74:67:78:aa:
7f:6f:99:67:96:1f:32:4e:b5:f8:91:39:d0:10:62:
0f:87:9d:14:8f:8e:79:d9:5b:29:ad:a7:08:fd:4d:
d7:2e:d4:5f:31:1e:f3:b0:79:36:8f:21:b5:47:e8:
dc:98:e8:4d:89:03:26:81:ec:a0:0b:48:2b:70:cb:
a9:5a:13:f5:12:f6:e5:a5:13:b1:29:af:84:25:88:
86:46:61:3d:fe:4a:27:c2:4c:6d:d3:0c:cb:45:40:
e4:2f:04:94:c9:f1:b6:36:75:9d:b0:e6:4e:0f:29:
0f:6a:fe:d6:36:55:f8:ca:bb:f7:26:64:e4:a7:50:
0e:50:b2:6d:73:70:89:98:ed:b5:c3:2d:fd:3c:e5:
4e:06:e6:75:04:69:95:6e:e8:bf:74:de:ab:62:ad:
bb:c2:7d:66:a7:cf:57:0b:1c:c8:34:4c:43:08:86:
ec:1e:6b:02:7d:69:ba:3e:d8:63:33:9c:ab:ef:36:
3c:0d:8d:32:cd:25:87:3f:4d:e1:f8:a5:cb:1d:cf:
b2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4A:76:8D:51:C5:2E:5E:F2:41:BE:9B:CC:7F:8C:10:61:E6:FD:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ba96de62-ca53-3390-8603-f79c9f27f8ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.88.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:14:bd:d3:72:65:0d:bf:4a:a0:d5:2e:8c:2c:25:23:06:b5:
50:3c:a7:4c:77:36:4d:0b:77:9e:68:c7:4e:8d:35:d5:06:1f:
6b:81:d3:89:55:79:d0:89:a6:ba:0b:f9:b0:23:3a:8c:7b:e2:
77:55:68:31:86:67:79:67:51:fa:64:78:e2:b4:86:59:f3:45:
eb:8b:b9:f6:8b:93:6f:52:3c:36:c2:ea:8d:d2:c1:0e:ec:16:
67:26:dd:43:0f:23:05:4e:9d:d1:b6:c4:88:b8:38:55:26:c5:
6d:18:e2:4d:ab:ae:4f:8b:7b:41:30:75:f9:c0:71:e1:76:37:
46:9a:02:d9:de:0f:2e:73:17:89:2d:d9:d7:9d:b3:95:cb:29:
b9:b2:73:13:53:84:b7:09:2b:fa:15:b2:61:9e:53:4c:d0:ca:
49:99:c8:04:aa:e6:9b:8a:6c:30:5c:0f:27:fd:1e:56:ad:d2:
1b:a0:d6:88:b0:a6:6f:03:4d:95:72:0b:07:af:07:f1:fe:dd:
fc:c3:f4:bf:67:08:fe:de:bd:a0:d9:dc:62:77:30:5f:87:e2:
e3:39:58:17:06:9c:a4:eb:9d:9a:62:5e:ba:35:fa:f5:77:28:
b5:7c:f2:8a:4f:15:44:87:a4:bc:0d:69:06:53:8e:7c:90:ba:
b9:6e:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:00:29 2025 by rpki-client