Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb28bab3-5a2f-333c-b08f-09a8b6a4ca75.roa
File: cb28bab3-5a2f-333c-b08f-09a8b6a4ca75.roa (raw, json)
Hash identifier: NTudwXuAbEXjaQDFxrgJfj4xzXnhoxzoRaWg6BFq6jQ=
Subject key identifier: 30:AA:E8:59:F2:0F:96:4F:C1:19:67:71:62:62:0B:E5:B3:0E:3F:67
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FBA052C68702B28D52106C680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb28bab3-5a2f-333c-b08f-09a8b6a4ca75.roa
Signing time: Fri 28 Oct 2022 12:00:00 +0000
ROA not before: Fri 28 Oct 2022 12:00:00 +0000
ROA not after: Sat 03 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.15.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ba:05:2c:68:70:2b:28:d5:21:06:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Oct 28 12:00:00 2022 GMT
Not After : Dec 3 05:00:00 2022 GMT
Subject: CN=857aea85-53b0-47d2-a720-5bb9c853ac58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:95:2a:f9:99:59:14:93:42:e3:df:bd:2c:92:
42:b2:98:ec:29:d0:37:e3:4d:bb:f9:90:80:f2:83:
f9:03:46:c0:7d:af:43:24:c0:91:84:bf:7c:7b:c9:
0a:d1:3d:18:97:75:98:54:37:dc:bd:6b:d4:9d:92:
58:71:b6:ba:b7:6d:0a:5a:e1:3e:f8:5d:88:0a:32:
d0:53:8e:b4:ec:0f:b6:14:de:e3:bd:b6:7c:0e:80:
93:b8:f7:d5:d9:1f:e3:c8:77:0f:6d:31:70:a1:b1:
9c:67:a2:92:c4:3a:37:3c:65:2b:b1:4e:eb:5c:e6:
8f:74:6d:dc:95:c7:5e:1c:01:ab:cb:67:d7:c5:45:
ed:fe:83:ec:50:3a:5f:ae:53:c6:a1:b5:aa:b8:5f:
ae:f1:ec:db:22:3d:e1:bd:70:5a:ae:99:54:27:94:
cf:43:92:b7:1c:8c:7f:8c:8b:d9:d3:fc:61:86:07:
c4:86:a8:95:33:aa:5d:bf:12:a1:63:3e:ac:db:06:
f3:c8:b9:c1:65:a5:6b:58:d8:88:77:8b:8b:ad:7c:
4a:b3:13:c6:b5:1b:35:f0:84:f5:2e:c3:8b:3f:55:
85:f0:fd:dc:f9:69:5c:4d:9b:1d:b4:ab:22:7f:40:
80:80:1c:44:8c:71:74:70:08:9a:ef:4f:1f:cd:38:
87:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AA:E8:59:F2:0F:96:4F:C1:19:67:71:62:62:0B:E5:B3:0E:3F:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cb28bab3-5a2f-333c-b08f-09a8b6a4ca75.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.15.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:ae:a5:fb:a3:e2:65:9c:5b:7f:0b:d8:bc:07:a4:ad:d7:eb:
bd:6f:71:85:75:a1:bd:b1:ef:e6:d6:73:62:0f:66:16:19:d8:
b3:99:62:f5:d7:a7:08:cb:9d:7a:37:7e:5e:50:a1:82:27:0d:
3e:e3:10:81:a7:54:5e:87:99:83:2c:d5:f1:47:36:44:1c:01:
1a:90:0f:a1:9b:b2:4c:9f:34:6c:f7:c3:9e:97:b6:40:12:8e:
a3:96:02:49:9b:6a:8b:1a:e2:88:58:38:1f:1f:2f:f9:56:8b:
60:89:9c:47:a6:8e:bc:46:38:e0:eb:a5:1d:57:92:ee:87:75:
2a:05:d0:a5:61:ec:6a:21:00:65:9e:c5:62:31:ff:80:76:8c:
3e:58:39:84:73:6f:17:ba:4d:44:dd:2a:22:f6:90:20:8f:ae:
4a:32:26:04:b4:39:6b:8b:eb:cb:8d:f9:82:36:12:81:32:df:
a8:fa:0a:33:76:9a:ab:c8:0e:20:1a:a6:85:d9:59:6c:33:dd:
79:39:c2:15:0a:f3:7c:14:c9:bc:ee:47:3c:22:dc:9f:93:14:
f3:d2:34:b3:5a:53:3d:b3:91:b0:ce:4b:fb:8d:52:1f:a8:b3:
60:03:58:84:94:c2:8d:b1:cd:ae:35:bc:5e:ea:15:9f:d5:e3:
9d:b4:a1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:24 2025 by rpki-client