Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7d83d53-4729-3b36-8ef5-a6f66cec2dd5.roa
File: c7d83d53-4729-3b36-8ef5-a6f66cec2dd5.roa (raw, json)
Hash identifier: YqE9Yt1xtfKs646WojmmQ8cTYiMURZJUVbW+vHt9QfM=
Subject key identifier: 2A:7F:A4:32:87:9C:46:7B:90:A9:B4:D7:5A:CB:EC:7A:2B:35:B8:06
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C0D21F1B2F35785ABA824E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7d83d53-4729-3b36-8ef5-a6f66cec2dd5.roa
Signing time: Mon 30 Jan 2023 22:42:07 +0000
ROA not before: Mon 30 Jan 2023 22:42:07 +0000
ROA not after: Tue 07 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.153.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c0:d2:1f:1b:2f:35:78:5a:ba:82:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 30 22:42:07 2023 GMT
Not After : Mar 7 05:00:00 2023 GMT
Subject: CN=ffb60214-ed5a-4a28-b8b0-cc96aacbd3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:25:e9:42:cb:82:c7:28:fc:df:ec:ea:26:
ea:22:92:af:31:5d:7c:01:e8:a4:48:96:5b:4e:a8:
a1:b7:5c:e6:88:35:af:b3:17:3f:af:6f:6d:e9:2e:
13:3f:9c:f6:52:47:bb:d4:31:53:42:ac:a3:da:c0:
eb:20:49:22:33:10:5f:ea:82:8d:ac:f6:05:a1:79:
f3:0a:f1:9b:0d:7d:e8:c4:f2:d1:01:29:ff:b3:4f:
9f:21:cc:f8:b3:67:5d:53:c2:67:ab:af:47:c3:d3:
87:9a:da:6d:7b:11:1c:ad:f0:8f:34:5f:49:15:7c:
aa:e7:8d:55:85:4a:c9:ef:3a:aa:01:f7:aa:a0:e6:
23:80:f6:cd:1f:40:46:e8:f7:1a:e0:31:9a:5e:a1:
9f:9d:3f:d7:08:8a:2a:3b:bd:ea:b1:ce:8f:98:de:
03:c3:90:ba:ab:28:c7:78:b8:53:d5:3c:36:53:15:
7e:98:c1:80:65:40:7d:89:6c:b6:bf:44:bb:b2:f8:
37:27:5d:fc:84:04:1a:20:69:99:9d:b4:9f:98:54:
12:54:e7:bb:e6:8e:16:99:f2:8b:ee:82:bd:b2:f1:
2a:30:59:4b:20:c8:6a:f0:7b:0c:75:de:c5:0e:34:
e5:96:4e:cb:e0:c8:94:70:8a:cd:fa:67:f1:a0:83:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7F:A4:32:87:9C:46:7B:90:A9:B4:D7:5A:CB:EC:7A:2B:35:B8:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c7d83d53-4729-3b36-8ef5-a6f66cec2dd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.153.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:35:63:9c:a7:7a:8c:d8:2f:d7:f3:37:02:7f:b1:44:ee:f0:
ac:f4:03:d6:33:cd:5a:ec:0c:f5:e3:9b:d3:9c:4b:1a:37:c0:
90:0c:00:68:d0:ca:54:76:14:40:3a:cb:b4:3f:6d:fb:fe:2c:
6f:b1:91:f8:c7:5f:e3:bf:b3:23:88:3a:d1:bc:09:a8:9c:46:
34:e6:14:d4:aa:4f:d6:c9:1c:8d:b4:76:4b:7b:4a:4c:29:da:
00:b5:56:cb:81:f3:36:8a:b9:32:4c:b7:cf:56:41:e7:42:9a:
c7:25:67:28:f0:27:b2:7f:42:76:e7:9e:eb:97:7f:c1:58:49:
f5:c4:bf:c5:7e:7a:c1:fa:8c:be:ac:c3:ce:11:8c:e4:65:0f:
00:5a:e3:3a:a4:b5:ea:aa:f4:e8:53:86:a0:85:2c:14:af:b6:
01:e7:d7:8a:f7:2b:2b:07:a1:8e:3a:17:59:a6:2e:ff:d8:1e:
cf:28:52:6a:e1:8e:4e:15:1e:ad:a7:5d:ae:da:62:ff:07:d6:
08:bc:5c:38:0b:44:ac:ff:14:6f:bc:01:4f:62:01:f8:66:aa:
be:01:ff:64:04:2f:ba:43:3b:9a:78:3e:d9:31:7d:00:6e:35:
73:20:b2:ce:5b:e1:f9:1e:e4:85:9b:02:c9:19:3f:51:61:96:
56:60:09:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:59:18 2025 by rpki-client