Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3155305-14e5-3f74-85d7-68e0c1dfd904.roa
File: c3155305-14e5-3f74-85d7-68e0c1dfd904.roa (raw, json)
Hash identifier: PnKQil7bzb8hWfEiJbXivnWhkBnqBFeudRjaFNJ9b+I=
Subject key identifier: 4F:52:75:0F:2B:27:44:09:EB:F3:5C:6A:FA:E2:13:3F:4D:0A:F5:47
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B3B4AFCEA9BE9A3BBF5D5AA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3155305-14e5-3f74-85d7-68e0c1dfd904.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b3:b4:af:ce:a9:be:9a:3b:bf:5d:5a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=44626a58-9fe3-4979-8284-9ea8160c6f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a2:1d:1c:d3:83:40:a7:1f:d1:30:35:13:5a:
31:fa:cb:8c:f9:54:67:cf:8c:e6:ae:cb:48:12:be:
12:d9:59:5a:1b:ec:4d:ea:0a:fe:4c:8a:83:8c:17:
ee:06:f5:d3:17:0f:74:c0:3b:53:a4:d7:76:77:6e:
a5:16:e1:9b:0f:06:80:21:b5:b2:bd:55:b9:a4:c6:
0e:a0:ea:92:b3:5c:57:ad:a4:e5:1e:7c:f0:57:4a:
a1:02:8b:a9:d2:30:f4:18:a4:d6:cb:60:93:89:d6:
bd:c2:7a:05:17:a8:93:d5:21:12:1b:be:54:d3:74:
b8:c0:63:d1:ff:48:1c:e4:ff:8c:d5:65:17:c8:e2:
63:b3:a0:ae:ee:37:80:6c:87:34:51:c0:f4:c6:95:
25:42:a9:ba:b6:61:aa:77:84:d1:f6:1d:f1:c4:06:
7a:91:2f:17:83:86:16:2d:24:34:f3:bc:ca:de:2c:
78:9d:fe:cb:93:f2:59:27:9d:ce:0d:fc:c8:2c:f3:
45:37:83:04:95:84:1a:df:20:0e:9e:7d:11:ca:f1:
a4:5c:16:69:6e:b0:1b:79:7a:9a:67:38:0d:7b:1c:
c8:bd:3c:4e:e2:25:29:80:81:11:dc:a1:e0:5a:e9:
6c:ae:bf:3e:94:07:95:32:bb:dd:10:ab:03:10:c6:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:52:75:0F:2B:27:44:09:EB:F3:5C:6A:FA:E2:13:3F:4D:0A:F5:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c3155305-14e5-3f74-85d7-68e0c1dfd904.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:6d:34:29:99:3b:d2:7c:ff:46:52:57:0b:61:da:fe:1b:ef:
ef:fc:3a:de:65:39:5c:ee:4a:be:5b:68:9c:a9:97:69:0d:a4:
5e:59:3b:ee:10:38:82:0e:85:25:6a:1c:09:2b:7e:89:d9:02:
8f:46:d4:f0:29:81:b7:8a:f2:36:53:21:0b:58:0c:06:61:47:
c2:8d:04:db:d5:1e:2c:46:c5:7c:fc:80:dd:04:c1:53:14:c7:
67:f5:61:b8:0b:c6:a3:e0:dd:f8:03:4b:6c:6c:fb:89:62:2f:
1d:46:c1:84:76:73:d2:31:44:8a:e0:c6:cd:48:71:31:8f:86:
2a:6b:6d:3a:55:7d:22:80:c9:fd:ef:e9:b7:b5:67:d5:d6:49:
be:41:6a:03:f5:ca:bb:bd:df:96:0a:4e:e4:25:0c:27:b0:c6:
05:63:5a:57:61:13:55:c3:19:51:80:5c:57:73:99:dd:76:0b:
68:d1:03:21:a9:7e:25:7f:45:1a:b6:98:88:96:7b:6d:22:8b:
66:b5:32:e5:52:12:05:3f:f1:47:1b:ea:26:18:0f:67:a6:3e:
58:e3:3b:ba:d2:71:9e:93:72:09:ac:ca:8b:dc:35:2d:a3:bf:
60:d4:20:4e:d2:f6:cf:b9:99:a8:76:aa:33:6f:61:ff:e9:04:
42:34:66:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:15:25 2025 by rpki-client