Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4c6d4a7-6dbf-3213-b39e-e87c1e56d867.roa
File: d4c6d4a7-6dbf-3213-b39e-e87c1e56d867.roa (raw, json)
Hash identifier: L/v8gWhd/WKT+ubGExz/GjGfHpgSj03CeW2FLH9IXw4=
Subject key identifier: F2:97:8B:82:F6:B5:D5:E7:C1:D0:C6:5E:72:7A:77:C9:13:BE:55:F6
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858402A542D9E8C379CD9C7C00080
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4c6d4a7-6dbf-3213-b39e-e87c1e56d867.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 16.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:54:2d:9e:8c:37:9c:d9:c7:c0:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=aa22ddaf-757e-49e2-be86-cd3e69261730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cb:58:51:60:ac:b7:d9:74:83:d9:43:3d:72:
d5:d0:de:0f:73:51:54:6b:9e:f8:3e:ca:2e:2e:f1:
fa:5a:5f:e9:2c:fd:0a:d8:2e:eb:a8:64:0f:7f:a4:
60:79:a4:64:96:84:32:0b:de:60:02:be:2a:d1:11:
bf:9a:42:63:09:a3:23:9b:85:6a:d3:ef:71:12:24:
83:80:61:31:5b:c1:5d:e7:6d:12:3b:28:26:03:0c:
be:2d:57:f6:90:47:1e:d6:5f:4e:ef:62:d9:2a:59:
aa:f3:41:01:ce:c6:4d:f0:f5:2a:a1:37:51:f8:da:
a7:6b:ab:3a:28:14:33:14:4e:2a:e1:f7:96:9d:36:
dd:56:f0:09:43:c8:29:f8:b8:6e:21:ff:62:b1:6b:
51:6c:7c:49:62:5c:28:57:da:2b:2d:c2:2a:cd:14:
c6:6a:bb:0f:12:1e:cf:31:e6:9d:37:c0:8a:cd:26:
7c:95:c6:fd:ad:71:d9:31:6b:11:ca:4c:20:65:2b:
27:59:9b:29:06:ad:38:b1:2c:62:ce:7e:bd:ab:8a:
e4:61:28:e3:8d:05:50:e4:a4:b1:dc:a9:d1:25:bb:
a2:fc:03:13:18:9b:bc:2b:32:e1:bc:39:d1:3f:4f:
a2:20:39:2a:7e:0d:ac:7a:57:3b:09:00:39:a1:6f:
0a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:97:8B:82:F6:B5:D5:E7:C1:D0:C6:5E:72:7A:77:C9:13:BE:55:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4c6d4a7-6dbf-3213-b39e-e87c1e56d867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:c4:f7:45:8d:c7:8b:07:f2:53:7e:03:b5:b5:ad:d1:04:81:
4f:6e:63:84:0b:b4:2e:e9:ea:c2:c5:5f:5b:fd:8f:87:36:86:
fb:68:93:06:d4:81:b2:d5:87:06:40:0b:ff:21:bc:d9:04:7d:
89:ec:ba:93:d3:e0:fa:86:5e:94:1e:90:17:43:09:81:9a:41:
f0:7c:2b:48:85:77:ba:2c:93:f3:32:be:76:1f:34:8e:64:ff:
c2:39:b0:cc:db:61:00:cf:60:93:ef:29:a9:57:1a:b5:47:42:
d6:d5:32:40:91:1b:da:3b:37:4c:27:a5:0a:54:c3:ce:b5:b3:
d7:0c:ef:b4:ef:ee:8e:70:9d:cd:b6:81:fa:cf:16:63:14:a3:
dc:a7:52:65:d7:f7:5e:28:ae:6c:1d:ac:89:2e:39:58:87:39:
ee:b5:55:ef:6c:fc:a8:8b:69:50:93:50:72:81:8e:70:15:eb:
94:46:94:70:71:de:99:cb:a4:95:c6:db:6c:e6:ab:b1:cf:ae:
f8:40:0c:af:48:27:9c:bd:e7:b4:ca:3b:11:92:8e:52:10:96:
c5:63:00:5d:65:ec:7e:48:86:8d:89:2b:18:ce:a9:97:98:70:
a0:be:02:f8:52:e4:ee:7b:41:22:ac:77:78:10:7b:9e:24:1e:
fe:e5:67:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:59:18 2025 by rpki-client