Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9d0ae19-5c7e-3153-b61d-1b0a156ffba3.roa
File: c9d0ae19-5c7e-3153-b61d-1b0a156ffba3.roa (raw, json)
Hash identifier: rnp/o7jGlqcLgE/mEui2QRiwpud3OlFzR7mf89k4rMs=
Subject key identifier: FB:9D:8D:8A:9C:C4:84:5E:E4:A8:20:99:71:5E:14:F2:6B:F2:C0:2A
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F52E67D416724AC1F77D0BBA0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9d0ae19-5c7e-3153-b61d-1b0a156ffba3.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 16.156.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:52:e6:7d:41:67:24:ac:1f:77:d0:bb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=e42496d9-e221-4ac2-bfaa-890b0c3b250b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:4b:2c:4e:4e:7a:0b:b5:50:12:14:27:43:
fc:9e:72:23:cc:75:db:4f:1a:56:5c:af:54:c2:8f:
95:3d:14:a2:c3:39:12:2b:38:66:57:e5:c2:00:d7:
cb:b3:dc:69:64:f6:71:8d:69:81:81:e4:43:96:ad:
62:e4:ff:2e:25:12:7b:d7:08:e9:d6:97:72:be:b9:
3d:3c:97:dd:68:d0:20:a7:af:43:7e:49:1b:71:7b:
3f:5d:4e:3f:5a:79:eb:7d:cd:d6:9a:66:0b:74:b6:
f3:31:ff:09:7f:e1:19:38:e2:7f:d9:88:45:b4:73:
96:05:d6:0c:dc:46:9b:f3:a3:12:be:09:1c:1e:9f:
8b:a2:7f:04:2c:6c:be:07:07:32:08:09:d2:25:bc:
7a:a1:6f:88:06:23:9d:02:e2:27:5e:5e:7f:a0:2a:
15:9d:30:58:b9:3b:a9:57:d9:0d:9a:7d:22:6f:3e:
14:4a:c7:46:f1:61:3f:84:cb:36:33:fe:c9:42:01:
79:97:ea:c0:f9:40:00:bf:68:66:5d:00:6c:b8:58:
06:c6:59:05:80:78:8a:24:58:dd:7f:ab:36:75:44:
06:b5:b7:d6:b3:3c:e6:b0:72:12:e4:88:84:ed:7c:
1c:c8:d9:02:3c:6d:59:dd:1b:37:ac:fb:53:f7:b1:
69:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9D:8D:8A:9C:C4:84:5E:E4:A8:20:99:71:5E:14:F2:6B:F2:C0:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c9d0ae19-5c7e-3153-b61d-1b0a156ffba3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.156.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:0d:b5:cf:e0:6a:e4:7a:96:2a:ca:95:5a:f6:75:75:d6:bb:
61:2b:83:8d:5e:4c:3f:23:8b:1a:5d:dc:a0:1e:bb:19:da:a3:
c9:6c:be:24:6b:61:f6:28:c4:19:72:7e:d3:f9:40:53:d5:f0:
d8:0a:9a:18:c5:ac:cd:f7:9d:92:0c:5c:04:a6:6f:97:84:21:
fd:94:bf:21:48:9a:90:48:c9:35:1b:a7:3d:cd:ab:ab:b6:c3:
76:13:f7:f1:46:ad:78:a7:d7:8e:0a:a6:2a:5c:39:3e:61:81:
19:89:f9:11:aa:f7:e3:12:d3:29:54:3e:c7:8e:bb:10:0c:d6:
58:61:26:31:60:10:22:b3:07:00:08:a6:26:aa:08:a7:7a:51:
75:1d:d2:e5:c9:55:73:4d:bf:ba:8f:e4:f6:1f:f0:31:62:7b:
72:1f:71:1a:ae:2f:41:25:76:f4:7f:04:ff:4c:56:cd:2f:8f:
e5:2d:2c:18:04:c6:47:9d:7a:a9:b7:fa:b1:6e:a7:a4:ec:58:
9d:26:a3:74:8a:70:74:a2:cf:be:8f:04:0e:0f:b5:29:b4:b2:
fe:2a:25:26:91:45:38:d5:31:3b:b3:24:0f:cd:8a:f7:49:91:
a9:1c:0f:ca:89:55:1b:f1:42:9c:fc:ff:ad:42:c7:d9:32:3e:
16:8a:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:45:30 2025 by rpki-client