Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce357cf4-1fe6-342f-90d2-8c4e55601a13.roa
File: ce357cf4-1fe6-342f-90d2-8c4e55601a13.roa (raw, json)
Hash identifier: H2IxHCr4OBeEL0xEHql8VF6pfGTISkWrAiIKrhGXsC0=
Subject key identifier: CE:93:4A:43:E7:82:0E:83:30:19:6B:5F:E4:FF:59:3F:2D:8E:66:F8
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583FEFE7F5651DD7ACDD35BEBD80
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce357cf4-1fe6-342f-90d2-8c4e55601a13.roa
Signing time: Wed 16 Nov 2022 12:00:00 +0000
ROA not before: Wed 16 Nov 2022 12:00:00 +0000
ROA not after: Thu 22 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 16.31.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ef:e7:f5:65:1d:d7:ac:dd:35:be:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 16 12:00:00 2022 GMT
Not After : Dec 22 05:00:00 2022 GMT
Subject: CN=b2599bf3-da0e-41f7-b956-bb1462ade929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:2a:c9:0c:65:12:70:cc:01:6b:c2:13:d8:
6f:3b:96:81:81:48:6a:e2:fb:5f:d5:4a:07:dc:fe:
bf:44:3e:0d:d4:41:00:9a:1f:1d:4b:23:d4:ba:64:
98:d1:96:6f:a3:ac:88:b1:8e:5c:54:94:af:f8:db:
da:3c:42:02:d1:57:fa:40:cb:b2:86:6d:a1:3d:9b:
59:05:34:0b:86:4c:2b:04:5f:31:1f:2f:42:00:af:
f0:5c:7d:bd:7d:c1:48:8d:3d:f6:93:e5:9e:55:da:
75:9e:57:8a:e7:00:8c:13:8e:0a:1c:ac:9c:52:55:
c2:b5:84:06:80:c9:fa:cf:97:9c:66:92:07:23:52:
a5:00:ef:d9:49:30:af:23:b0:5c:3f:ff:b2:5d:26:
69:14:5c:e4:ca:85:57:4d:10:4d:f2:c5:e0:e3:33:
29:27:26:ce:d4:84:92:e5:16:24:d3:a0:20:ee:13:
62:88:2e:34:7e:a1:04:64:35:dc:7c:20:17:46:b9:
48:b0:57:78:ca:95:9f:24:c5:91:71:63:d8:6f:1c:
1a:8c:6d:74:db:dc:2f:49:6b:b6:c6:0e:12:19:af:
e9:b5:e7:7d:47:40:c5:e6:40:a5:18:1a:2e:c3:43:
84:fe:57:b5:44:af:2a:13:38:a0:bd:26:1b:9f:2b:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:93:4A:43:E7:82:0E:83:30:19:6B:5F:E4:FF:59:3F:2D:8E:66:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ce357cf4-1fe6-342f-90d2-8c4e55601a13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.31.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:c3:52:09:1b:7a:ed:d0:88:c5:f9:01:07:99:e8:d4:93:e0:
a4:06:3b:4f:5d:b3:dd:38:d4:67:f5:e0:dd:2d:72:e3:50:1a:
70:7e:d5:f5:74:74:ec:88:19:0a:fe:b5:34:5f:e0:fa:79:42:
83:56:99:39:3c:17:47:a1:57:fe:6d:03:52:25:2c:42:68:c1:
a6:7b:7a:6b:cc:cc:a5:aa:94:8b:00:8d:5c:f1:56:8f:9c:f3:
43:4a:1f:d9:2c:53:0f:c8:45:eb:11:f6:20:4f:98:5b:ee:fd:
a8:f1:bd:63:a7:0d:80:45:d7:de:15:70:04:dc:bb:9e:b4:60:
07:c0:2b:65:c0:3e:4d:99:9c:81:9e:3d:51:2a:50:ff:5c:a7:
a8:fb:12:07:91:f2:64:4f:70:8b:ac:b9:6a:70:9d:d3:0e:40:
04:8b:4c:43:b8:1d:b2:ef:f2:1f:9e:88:72:17:e5:c6:2e:a3:
e5:44:5f:bb:ff:3d:ee:cd:13:4e:c4:e9:5c:75:e6:bf:9e:d7:
91:1d:e2:e7:43:03:50:72:18:38:cd:6c:fb:98:ee:89:a7:18:
c8:57:c7:ff:f1:f2:61:00:4f:bd:3e:c0:da:4b:55:21:c5:31:
8c:99:fe:ef:b4:7d:cc:b7:6a:54:72:bc:a6:f9:b6:6f:80:1d:
2b:56:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:57:37 2025 by rpki-client