Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca3468a7-ac5b-314d-8e34-38a2c0132015.roa
File: ca3468a7-ac5b-314d-8e34-38a2c0132015.roa (raw, json)
Hash identifier: YvH7zxiwpbqBAtmsJ1UQr919n8PivPXFDzHvPkgNzx8=
Subject key identifier: D7:12:BF:88:3F:AC:9E:2B:68:DC:DB:4F:DC:DE:7B:DF:BC:5F:B2:DB
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FF7DF9DC8A0D6B1CA376C0C80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca3468a7-ac5b-314d-8e34-38a2c0132015.roa
Signing time: Sat 19 Nov 2022 12:00:00 +0000
ROA not before: Sat 19 Nov 2022 12:00:00 +0000
ROA not after: Sun 25 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 16.168.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f7:df:9d:c8:a0:d6:b1:ca:37:6c:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 19 12:00:00 2022 GMT
Not After : Dec 25 05:00:00 2022 GMT
Subject: CN=44c64b54-4c1a-4e64-8a37-60d0eadd32b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:53:ba:37:1c:25:2b:9b:ec:62:2b:e3:49:d8:
3b:c1:e6:9a:ba:d6:24:10:c1:b5:b8:4c:f1:53:4a:
a3:a1:8c:8b:76:95:10:cf:c7:ae:b8:63:fe:a4:43:
c2:ee:f4:ba:d4:97:6d:72:8b:23:1e:6b:f4:42:12:
56:33:0a:d9:b6:3d:57:d8:55:36:d4:9d:d5:c1:97:
3a:46:05:09:12:13:84:08:0d:2b:e6:55:fa:a7:12:
05:f8:91:ab:d5:d1:a6:64:aa:36:72:32:db:44:19:
5c:9a:11:5b:ec:cb:cb:71:89:54:3a:a7:3c:84:2b:
b3:62:02:ff:52:25:9c:0b:8d:ee:5d:be:74:a8:e9:
0e:f1:df:4d:f2:ba:dd:ed:dc:b7:bc:1b:fb:ab:a8:
e3:d7:c9:3e:e9:ff:20:72:8b:b9:71:c1:50:22:59:
01:33:78:b5:06:db:30:e9:07:07:1d:b5:16:9e:64:
8d:a1:14:c5:25:1d:c1:7e:e0:5d:6f:c6:72:6f:7f:
8b:b6:67:48:e4:35:70:16:0f:fc:a8:3c:2b:87:9f:
b3:bb:bb:d2:dd:84:de:8c:9b:39:b9:32:0d:ee:97:
c6:57:4e:eb:3e:ef:87:63:18:e9:7b:7b:4d:ee:ac:
01:3d:8e:d2:d8:6c:39:30:e4:a2:ca:ed:4d:c3:ef:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:12:BF:88:3F:AC:9E:2B:68:DC:DB:4F:DC:DE:7B:DF:BC:5F:B2:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ca3468a7-ac5b-314d-8e34-38a2c0132015.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.168.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:96:87:e0:ab:84:ac:b6:07:70:a4:bb:3e:7b:22:e3:07:ea:
ae:5a:13:c8:4b:c2:51:93:61:b3:92:98:11:28:94:ea:5b:e1:
cc:d7:ba:76:4e:41:91:42:d8:ab:b7:36:5b:9b:83:da:18:07:
0c:e3:44:4b:b9:c5:0f:3f:f3:cc:e8:e8:14:6e:65:ec:f9:43:
82:c6:28:43:1e:95:c9:e9:0a:a3:39:5b:65:4e:46:0f:e6:13:
2d:fc:7b:99:d3:87:2c:35:f4:f4:72:aa:41:de:40:53:61:59:
5d:95:8c:60:98:53:4f:5c:48:05:57:61:6f:4d:69:09:93:82:
ca:55:7f:9f:f8:c3:22:8d:8a:fb:0c:9a:28:1d:bb:d9:de:59:
e8:dd:d4:b1:7b:05:f0:58:70:05:64:e3:d6:2f:c3:23:e0:ca:
eb:e8:2b:b9:97:b8:e1:93:e4:1c:5c:06:a1:5c:fc:c3:b7:d5:
49:62:f1:a7:fb:0d:26:cd:ce:c0:04:7b:a2:b9:51:fd:37:1a:
b7:55:ff:36:c6:2c:5d:e2:9e:73:89:36:f1:84:05:4b:70:e8:
3f:b1:a4:d1:18:ce:29:c6:32:d8:5f:4e:44:a4:3f:9c:2b:49:
ac:0f:95:bb:d5:b4:18:4f:10:99:bb:07:41:8a:d9:6a:12:30:
80:b1:26:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:17:28 2025 by rpki-client