Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d35506c7-448d-3b71-9cee-4f285c6df54d.roa
File: d35506c7-448d-3b71-9cee-4f285c6df54d.roa (raw, json)
Hash identifier: B4nMVzPwA9AgzWIhHksimf/I3HenhirxhkHJ7Vziqdw=
Subject key identifier: 84:71:20:4A:F1:70:C0:4C:83:47:96:8A:80:4F:BB:BE:36:E1:EA:E9
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840B31850C9F09A45B713A79C00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d35506c7-448d-3b71-9cee-4f285c6df54d.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.69.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b3:18:50:c9:f0:9a:45:b7:13:a7:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=3ae67c5b-1af2-4369-a3a6-4ec5ed855975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:ae:19:b3:85:83:e7:ff:b4:b4:6e:b8:af:
3d:98:db:61:78:cb:dc:08:ab:32:17:0c:95:c2:58:
cf:97:e7:6c:26:60:2f:f9:e3:8f:bb:01:3a:9c:70:
cd:a7:b4:a7:98:3d:a9:44:65:2d:62:54:7a:b8:39:
67:2f:30:23:64:54:a9:41:0a:15:86:92:de:87:31:
82:ea:be:2c:75:1c:dc:b9:80:de:f6:ea:c9:ba:41:
28:26:a3:66:70:be:4d:e8:df:01:f8:75:54:53:98:
bc:04:aa:00:50:27:7a:9c:b0:d0:ca:c3:cf:e4:f9:
9a:f9:2b:1c:b7:64:12:16:55:b8:cb:01:5a:44:eb:
04:a7:df:98:b0:dc:f4:6d:6c:bb:86:7e:78:3b:ff:
87:69:2b:3e:65:68:af:29:35:3a:cb:f5:b3:4f:43:
8b:68:33:48:6b:4b:d1:8c:a7:2e:a6:f8:6d:74:f5:
0a:f2:1a:f9:35:d8:ef:45:35:27:34:29:c1:4c:9e:
36:6f:5f:db:81:1c:54:d9:21:7a:ed:81:ea:25:12:
8a:ea:98:8f:07:e7:40:01:48:d8:12:99:d6:10:c6:
fe:cb:d1:b8:88:c5:13:d2:74:96:5e:bd:c2:7d:14:
61:ad:b9:f2:b8:bf:b7:ba:85:bd:00:33:ae:ab:7d:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:71:20:4A:F1:70:C0:4C:83:47:96:8A:80:4F:BB:BE:36:E1:EA:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d35506c7-448d-3b71-9cee-4f285c6df54d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.69.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:17:a9:4c:dc:bb:cb:3d:33:50:ba:35:52:e9:31:24:63:99:
e4:5c:87:ea:7a:84:f4:c9:c9:d5:75:7c:f0:21:ba:b2:73:4d:
6a:58:a8:f9:e4:c7:15:84:b8:b4:31:8a:fd:7e:4a:31:eb:f3:
fc:2d:5a:fb:5f:3d:fa:88:b6:ea:ea:a8:83:0a:01:93:23:4a:
f7:28:69:ed:87:6d:89:b3:7c:ff:9d:ba:8e:bd:4b:98:7e:43:
f0:cd:94:bd:fe:86:61:1d:f5:ca:45:ce:b8:5d:6a:4b:e8:61:
aa:58:95:5a:0a:60:45:1e:ae:82:80:0c:6c:20:81:b2:99:26:
33:91:75:6e:35:e0:42:87:66:6e:3a:f8:d9:a0:b0:0a:bd:01:
8a:b0:5d:be:94:40:f4:97:2a:9c:bc:85:c3:9a:79:e2:9a:95:
5f:b4:45:c4:bf:b1:35:4f:0e:a1:f7:2b:d3:9a:ce:0e:60:26:
11:77:ad:b9:f5:fb:98:55:4e:c4:04:fb:df:57:c8:70:cd:30:
13:24:2a:5a:16:2e:ac:3e:10:d3:43:e8:7f:70:0f:9f:2f:63:
da:2f:4b:e2:0f:ce:6e:9c:37:98:69:f7:b6:88:a6:8b:1c:2a:
29:2d:70:79:36:1f:cd:9d:d7:1e:57:ab:da:ca:64:6f:7b:08:
f2:d7:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:19 2025 by rpki-client