Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bde735b5-fa73-3368-aec3-8a3e6a7dde66.roa
File: bde735b5-fa73-3368-aec3-8a3e6a7dde66.roa (raw, json)
Hash identifier: 2CNlL8okb0UmcZJVmkpQyS+BsD+H0EH/aOkTYMSzXu0=
Subject key identifier: 52:93:F0:AD:BA:97:7A:39:D4:2A:1A:FB:11:3C:9C:10:89:4D:79:27
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C0FECCDFA16E2FDEA79B07A0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bde735b5-fa73-3368-aec3-8a3e6a7dde66.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c0:fe:cc:df:a1:6e:2f:de:a7:9b:07:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=8368aaee-28d4-4d38-9caf-21a5aa1ef06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:3d:fd:2d:88:5c:ab:f6:15:00:fd:66:0c:
d8:29:69:9f:68:3a:14:db:d4:8a:c0:72:76:47:60:
dd:2c:de:fa:09:a1:0d:c9:5e:ee:26:5a:a1:fb:ff:
2d:c4:8d:10:77:c5:51:6e:b6:f2:7f:cb:80:6b:f0:
8e:da:6d:1f:7c:9c:10:54:d2:fd:25:51:84:70:f3:
42:f6:ca:a5:04:9c:d2:d4:a4:7e:db:60:1a:0e:82:
52:1a:77:25:e3:6e:a0:a0:b9:eb:68:f5:45:87:24:
5d:0e:32:0f:32:b4:ac:a6:30:06:de:79:e1:e2:17:
bb:1f:56:e7:c5:83:a4:b1:fc:31:6b:e2:5c:31:00:
93:4d:99:d3:ec:1e:ae:1d:34:b9:7f:a1:f4:df:ee:
5e:44:fc:6d:53:9b:27:20:ce:d9:06:dc:b5:63:25:
87:0e:32:37:6a:1d:89:c1:67:46:84:b6:5d:8a:0b:
6c:5c:a3:08:d1:1c:28:10:94:3a:09:44:06:82:53:
60:de:52:89:60:0a:0c:9f:5b:c8:20:65:85:17:ef:
26:af:05:b5:e0:eb:16:75:01:83:d6:9e:64:e0:51:
08:76:13:d2:4b:10:7a:46:1a:93:1a:24:b8:33:8e:
d6:4f:50:e1:d6:c5:b3:87:f0:f9:a0:52:f9:0c:6e:
d9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:93:F0:AD:BA:97:7A:39:D4:2A:1A:FB:11:3C:9C:10:89:4D:79:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/bde735b5-fa73-3368-aec3-8a3e6a7dde66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:46:4e:ea:a6:92:b3:ba:f4:3b:fe:1a:be:0a:3d:7c:42:24:
b7:3e:7a:7e:0b:dd:01:9a:9b:ea:d0:9c:fb:de:29:05:93:5e:
e0:ee:bf:44:44:fe:0d:c1:00:4c:17:52:34:7c:83:3c:ee:0d:
4b:eb:b9:06:91:33:aa:fa:e3:b7:e8:45:c9:71:b1:5e:21:f7:
58:28:40:84:a7:3d:29:38:45:4b:4f:29:a2:f7:a5:b6:d0:26:
fd:4d:1d:8a:83:97:a4:df:86:6b:cd:41:b6:53:d6:62:b7:2e:
24:03:10:b9:50:22:51:e3:3b:b6:a2:48:0c:ed:02:6e:8a:e7:
0a:e8:0e:19:51:57:e0:af:e6:17:5a:c0:47:63:57:4e:62:84:
44:c1:40:81:77:b4:1a:f9:8a:bb:87:44:d6:92:e1:be:eb:8d:
90:85:d6:0b:1d:1c:a7:9b:fb:f8:55:24:36:5b:9a:eb:30:18:
3a:a9:6b:0a:dd:b4:36:d2:1d:7d:11:5b:a2:61:11:7f:5a:75:
37:d5:68:35:18:14:d0:dd:9c:fd:fb:b8:4d:de:dd:e5:a6:68:
ab:21:53:f5:c6:c6:7d:0d:eb:77:10:cb:85:95:ea:8c:98:82:
94:68:49:76:9a:27:95:db:fc:78:f7:8d:a6:22:fa:ea:83:67:
fe:f5:a4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:34 2025 by rpki-client