Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf6fbc18-508d-3495-aa0d-26c7a0b6b31b.roa
File: cf6fbc18-508d-3495-aa0d-26c7a0b6b31b.roa (raw, json)
Hash identifier: ol7sSpXFLZBOPWSQLnfrByURSu6VFom+BVTwyPlMRdo=
Subject key identifier: 31:34:DB:EA:AE:9E:B4:CE:34:1C:D6:65:BB:55:DA:A9:5A:89:0F:26
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840175E2E7C26C7758378A4DF00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf6fbc18-508d-3495-aa0d-26c7a0b6b31b.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.49.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:17:5e:2e:7c:26:c7:75:83:78:a4:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=06276bff-3c26-4354-832b-c8741d2e9037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a9:36:40:fa:db:0e:f8:1a:b5:48:9c:a3:54:
9a:96:44:dc:a9:91:7c:0c:18:ef:85:9c:de:51:7e:
b5:e4:8f:3a:9f:c5:c6:83:ed:12:47:22:f8:b3:31:
94:af:02:37:47:c5:52:56:02:93:0e:d9:84:ef:9a:
1d:87:56:45:cf:94:58:ec:5e:83:67:0e:2c:d9:03:
c4:1a:46:5c:5b:a0:c3:db:49:2f:9a:0a:1d:fc:2b:
e6:07:f6:4d:64:67:71:5b:3d:a9:2f:71:f4:31:5a:
c0:2c:de:6b:55:52:9c:4c:8e:5d:a5:2b:c6:39:91:
58:e8:ca:cf:ca:00:17:61:5d:83:6b:04:5a:be:51:
55:73:4c:f0:75:cb:89:25:34:03:46:7a:6b:0d:4a:
e3:79:48:b3:ab:d5:8f:08:50:ff:8a:05:51:3c:3c:
92:1b:7c:56:e6:f6:0c:87:0c:36:75:c9:8d:d8:0d:
52:c5:83:50:47:05:90:1f:46:96:16:5f:e6:4b:ff:
82:0f:35:7e:bb:12:6c:f1:de:e9:ac:1e:c8:04:fd:
61:76:e6:a1:a9:2c:2c:52:05:a6:e4:2f:8b:41:fb:
0a:1e:17:8b:6f:2a:ef:ed:75:8c:ae:63:1d:7f:44:
84:cf:b7:e9:3f:94:7a:01:7a:ae:b9:3d:2a:7c:83:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:34:DB:EA:AE:9E:B4:CE:34:1C:D6:65:BB:55:DA:A9:5A:89:0F:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/cf6fbc18-508d-3495-aa0d-26c7a0b6b31b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:1b:56:1e:90:b6:55:d8:62:85:7f:fa:d8:88:5a:27:ab:db:
5c:56:51:da:7a:02:0a:f3:5f:a4:a2:8e:6a:e4:3a:4f:6b:32:
92:1d:85:9b:a9:5d:be:22:b5:a7:67:e4:1e:6e:e0:80:2f:23:
1b:10:cd:2c:48:dd:d3:f5:46:27:36:4f:26:2d:6a:bc:ac:aa:
a9:ea:45:f2:71:46:77:dd:73:34:6c:71:71:9c:1a:33:ba:5e:
42:3d:07:53:bd:42:f1:a8:fa:a0:df:57:8b:cb:04:58:9d:77:
7b:24:8d:83:ff:83:cb:0a:bf:5e:74:22:83:a0:a6:00:8b:67:
1d:94:0e:2e:b9:44:8d:98:3b:93:e9:61:6f:29:00:69:d9:89:
0a:f9:79:57:35:a4:dd:c2:5d:42:f9:84:21:02:58:0b:bc:ff:
a0:b9:09:f9:35:70:f5:db:bd:8b:35:8e:26:4b:06:c4:8d:53:
50:f8:a8:be:54:8e:5f:e9:63:e8:5e:dd:d4:02:e8:5f:a5:e9:
ea:ba:85:60:20:26:fe:95:ee:54:ee:99:56:4a:bd:2e:ae:ce:
e0:da:86:42:77:16:2d:60:eb:47:63:35:91:a5:a1:36:f6:b0:
73:ff:53:aa:55:62:10:1d:0f:9b:3a:78:da:6e:cc:fc:33:56:
36:1e:20:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:39 2025 by rpki-client