Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf472ccf-88a7-3453-81c2-241b51d6d908.roa
File: cf472ccf-88a7-3453-81c2-241b51d6d908.roa (raw, json)
Hash identifier: 59fkF0nMyhunxUMZmnDpjji3V+ssogZ51G8pTgxqIVI=
Subject key identifier: B8:D5:49:6E:06:39:6B:73:44:95:C7:98:EF:E6:1B:F3:A3:E1:43:ED
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584065EA66C26DFCBAF6E9652ACC
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf472ccf-88a7-3453-81c2-241b51d6d908.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.18.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:ea:66:c2:6d:fc:ba:f6:e9:65:2a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=1d0ac118-66a9-4117-8031-43786a41f550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:09:a0:03:f8:39:9b:07:0f:9f:13:ca:fc:27:
be:31:e3:ee:c8:0f:a1:09:3a:0d:63:d9:0b:d9:3a:
99:5c:4b:f2:ea:fe:50:41:50:79:0a:d2:3a:24:c9:
e6:54:38:25:05:84:54:b1:38:2e:0a:0f:64:fc:f6:
79:25:bd:1f:72:32:01:08:ee:2b:37:2a:54:35:5f:
f1:37:56:d6:a2:89:0e:2a:49:61:61:ce:d7:32:39:
0c:aa:4d:1c:4c:9d:d7:34:8b:1c:6e:ce:a6:58:02:
a8:79:bd:bc:ae:93:8c:c3:eb:3d:89:1f:8a:18:89:
16:49:b1:81:c2:dc:aa:cf:58:07:ff:60:8a:37:bc:
2f:dd:c6:6f:f5:5e:19:73:78:7f:cb:17:f6:05:3b:
62:c6:e9:08:74:66:79:ce:ef:40:04:fb:34:b5:08:
d4:1d:08:88:06:be:cc:8c:75:55:fb:5c:8b:94:e9:
00:f9:87:e0:e4:3b:37:87:17:73:38:59:86:9d:94:
58:16:3e:df:e4:f7:ac:20:d6:bb:3c:aa:b5:d2:60:
0a:3e:46:d8:37:b6:4f:8a:f4:ae:7b:71:d4:44:0c:
f0:97:d6:e9:bf:55:3a:14:dd:71:d9:ad:17:45:b5:
d1:9d:c3:cb:c8:cf:5d:6b:52:f6:e8:5d:25:17:f8:
3d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D5:49:6E:06:39:6B:73:44:95:C7:98:EF:E6:1B:F3:A3:E1:43:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf472ccf-88a7-3453-81c2-241b51d6d908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.18.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:65:24:cf:69:8f:b8:3e:80:d8:83:ec:87:ef:aa:50:62:06:
fa:54:f5:41:83:a0:19:f7:8f:e4:64:a6:36:5d:ab:a0:a8:32:
f6:11:b6:ce:aa:31:0f:b3:83:e8:31:19:b2:96:3f:ff:98:6e:
75:77:65:92:a6:19:99:c9:f9:a6:69:8a:c8:45:20:19:9d:c1:
62:dd:f9:fb:28:3b:03:14:5e:db:44:92:10:d1:31:e5:1b:ca:
3f:5f:73:be:7c:2b:06:e2:c0:8e:54:bb:bd:e4:d6:a2:28:1d:
8c:2e:dc:2d:fa:32:40:7a:3b:40:9f:85:78:67:88:da:de:d8:
42:1e:3f:a7:f1:e4:99:61:a2:a9:42:33:b6:01:60:2f:89:5f:
a1:b4:e3:e8:76:48:7c:4f:f7:c3:e3:84:4a:8a:c1:79:a0:5c:
bb:e3:e5:b8:55:3a:33:9f:c8:25:10:b7:85:bc:f1:30:3e:ef:
88:8c:d4:ce:4c:49:d9:e5:aa:62:08:11:8e:97:27:68:53:df:
30:24:1a:de:a4:5e:24:bb:87:ff:80:0c:54:45:81:fd:2f:90:
43:ba:ca:cb:e0:73:f3:34:72:f9:a3:ed:98:61:85:b5:69:be:
0e:b7:45:a7:72:66:0d:3c:8a:b6:7b:0b:27:a1:4a:b0:02:de:
ab:e9:b9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:36:52 2025 by rpki-client