Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d285369e-a3d4-39d4-b3a1-0a183df4b0f9.roa
File: d285369e-a3d4-39d4-b3a1-0a183df4b0f9.roa (raw, json)
Hash identifier: zBZEWDfIatx/ZSxgLiNKtUV3FEwANAL8i1UvQ5H7ZAY=
Subject key identifier: C1:56:0E:54:77:46:31:42:A5:DF:F7:92:B0:55:EA:63:4E:30:92:A5
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858401A8253650C8F3359AE617A00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d285369e-a3d4-39d4-b3a1-0a183df4b0f9.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.108.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1a:82:53:65:0c:8f:33:59:ae:61:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=dbffedce-e575-4b2e-b53f-67752aed0229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:8f:2c:c5:5e:fe:81:27:21:f1:b3:a8:e3:
3a:53:26:5b:de:4a:2f:34:f1:40:52:aa:d4:e3:c2:
d5:7f:a4:b1:3d:94:e8:a8:f6:0d:6d:ae:21:99:a1:
5c:43:40:72:7f:b4:fb:9f:47:ad:24:88:0e:35:85:
94:4a:6d:97:57:76:ff:aa:b9:e7:99:d8:6e:20:60:
cc:b8:68:a2:dc:ad:11:24:90:b2:f7:d1:c0:f7:bb:
af:21:1d:f1:51:4c:3a:ef:0f:c5:28:6f:14:12:8f:
60:d0:97:18:1d:50:c8:7e:31:f5:8d:30:a4:e4:2c:
2d:67:77:36:3a:cc:0c:26:ab:0b:95:e0:8f:35:92:
c8:d8:2f:4c:78:b4:90:ec:5f:d5:77:43:26:cd:f4:
b7:c5:ef:f5:a1:df:47:a2:d6:91:30:e3:12:ad:c0:
a7:60:e5:ac:e4:16:a3:35:01:69:27:da:39:c6:90:
97:f2:92:8c:d7:13:0e:87:9c:c4:ac:bb:ba:92:06:
de:e1:d8:e2:bd:3d:24:2d:3e:bb:87:bc:5a:c4:9b:
d2:df:52:11:3c:fd:47:16:73:84:b4:81:c0:ad:82:
84:4f:5c:c4:61:94:b6:cf:09:92:14:67:db:41:e5:
7d:89:0d:d8:10:1f:be:5d:a7:30:09:a4:a6:ea:21:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:56:0E:54:77:46:31:42:A5:DF:F7:92:B0:55:EA:63:4E:30:92:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d285369e-a3d4-39d4-b3a1-0a183df4b0f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.108.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:3d:08:be:20:09:32:f8:42:9d:b3:13:37:fd:db:3f:3e:a9:
ca:7f:98:c5:32:07:82:af:1b:d7:97:44:ef:a8:d3:f0:de:c8:
a4:1f:2c:0b:42:c1:2d:a4:fd:77:0b:e3:d2:56:06:c9:00:82:
7f:ec:55:b1:66:84:e1:c7:06:38:f2:82:a7:b9:b4:ce:aa:84:
b9:f3:0c:c4:1d:e0:4a:96:f1:59:45:81:97:f0:5a:1e:79:00:
43:01:93:fe:6c:6a:e0:3c:97:44:e2:e9:26:9c:54:20:f5:c0:
75:b4:a8:68:45:c1:cd:98:5e:be:12:3f:1f:0b:24:a9:06:79:
d2:86:b7:17:f2:2d:ce:4c:84:c4:3a:67:69:bd:a0:86:41:88:
d7:41:8d:93:73:33:e1:26:6d:16:6e:f2:59:f3:c2:2f:4d:14:
d5:e4:c6:cc:63:f7:a0:32:0e:93:b6:0f:17:d3:cc:f0:c7:0e:
7f:20:bb:18:ab:ce:51:ae:47:d2:3b:49:0e:ec:7f:9e:16:8c:
6c:87:2d:95:8b:b4:13:b1:36:20:f6:e8:b2:ff:0a:f6:78:fc:
c2:e2:f3:47:70:4f:e3:50:25:ca:9b:bf:9e:30:ad:29:68:98:
37:82:86:95:22:3c:5b:71:38:53:5f:45:4d:f3:1b:c3:45:82:
64:12:d2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:52:12 2025 by rpki-client