Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6f3c674-45a2-3e10-8981-384fe315c24a.roa
File: c6f3c674-45a2-3e10-8981-384fe315c24a.roa (raw, json)
Hash identifier: Vu+7tbqW7nTmDfTlGonWSZtKPHHmqsFfd/8D+agtG7A=
Subject key identifier: 3E:72:AA:9F:17:71:C5:0F:D5:DB:92:A4:E0:5A:60:74:09:A3:F9:7B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F54103528D3ED9BD81D70B680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6f3c674-45a2-3e10-8981-384fe315c24a.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 16.48.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:54:10:35:28:d3:ed:9b:d8:1d:70:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=e9786c1e-6b13-45c4-91b5-41f28e59e967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8e:44:08:c6:82:23:f5:c6:1b:22:d3:4c:18:
2b:1f:6f:f6:59:54:88:96:dc:72:83:0b:3b:ff:5d:
52:de:bf:70:06:ae:cd:43:1b:61:59:7c:aa:33:72:
d5:67:c7:c7:82:2b:c6:af:d0:9c:94:22:a3:c2:05:
57:15:bc:08:4a:0e:06:ec:b9:17:1d:73:7f:9e:38:
f2:eb:08:23:e2:78:ee:02:41:fe:7b:57:c2:cf:6c:
eb:fe:33:6d:cd:eb:ef:7c:a1:77:78:e8:51:05:23:
1a:5a:89:a4:fd:15:54:ba:97:b2:21:dc:ef:f4:b9:
f6:bd:7e:79:c3:a9:11:4a:99:c4:84:93:40:13:ee:
04:e7:ba:b9:9a:81:0e:02:44:ce:29:ac:d9:95:ce:
bf:ce:6a:5c:4f:92:a3:1e:e4:e0:1a:aa:da:bd:bb:
3c:18:89:0a:d3:f0:2c:5c:50:a6:49:89:a3:15:6f:
de:10:75:4f:26:bb:db:86:fa:26:da:0d:02:66:7a:
95:29:b9:b3:56:fc:aa:3a:b9:0f:55:54:ff:0b:0d:
57:5b:24:c6:6c:aa:02:7a:52:c2:9e:53:d3:a9:a2:
cd:e5:40:a5:c8:95:a7:3a:4c:b3:70:32:b0:62:8c:
6e:36:17:83:9e:56:8b:b4:90:13:b8:5f:57:77:c8:
31:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:72:AA:9F:17:71:C5:0F:D5:DB:92:A4:E0:5A:60:74:09:A3:F9:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c6f3c674-45a2-3e10-8981-384fe315c24a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.48.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:7c:8f:fe:b8:9d:a3:08:c6:7a:6f:91:78:c8:38:7d:a4:5b:
1e:6b:2d:fe:c0:bb:bc:d3:09:60:e9:07:7c:7a:8b:c3:0f:06:
b4:af:c2:bd:ad:26:61:de:3e:77:47:6f:5f:b4:1d:8f:9e:59:
4f:63:37:d6:ad:03:63:4b:9d:6d:cf:8e:b9:40:36:f4:ed:7b:
97:b9:20:ca:d3:bb:1d:e8:73:67:d3:4e:49:db:ca:b9:48:48:
f4:d5:85:62:5a:e3:dc:35:78:35:88:80:40:10:42:51:49:5a:
b5:a7:06:13:b0:88:1b:36:18:e2:78:b5:4c:1d:cc:82:52:a1:
2c:0c:d1:d6:f2:09:9a:55:1b:19:d1:61:62:7e:b6:e5:96:1d:
92:a0:72:2c:42:f6:67:ed:fc:fa:c2:5c:ec:0b:8b:9d:19:a1:
68:94:0a:b4:84:11:a7:b8:31:15:83:c0:aa:40:21:f4:4c:cc:
b3:4e:28:be:5c:ef:5f:04:98:57:c7:18:38:bc:da:02:17:5c:
7b:9b:c2:e6:6c:ea:11:aa:74:35:67:8a:ad:52:e9:07:8c:95:
66:1e:41:4e:0f:7f:f6:aa:5b:5d:cb:f8:c5:a7:0b:ad:4d:8d:
7d:0f:45:b0:9e:78:58:38:21:54:09:02:09:b6:80:df:ca:18:
55:13:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:40:45 2025 by rpki-client