Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4fe042d-f9af-3904-aa94-e542e1f6e912.roa
File: d4fe042d-f9af-3904-aa94-e542e1f6e912.roa (raw, json)
Hash identifier: eoe7RzhIGyHfsIt0d286YlA8EdH3ZagpSBYj5HhyBrk=
Subject key identifier: 49:2B:00:B2:D9:83:2E:BC:6B:D2:FF:CF:81:A8:54:C5:EE:18:3B:85
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F43285840C6DEA98CBAD62CB89E324E00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4fe042d-f9af-3904-aa94-e542e1f6e912.roa
Signing time: Wed 01 Feb 2023 12:00:00 +0000
ROA not before: Wed 01 Feb 2023 12:00:00 +0000
ROA not after: Thu 09 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.118.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c6:de:a9:8c:ba:d6:2c:b8:9e:32:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Feb 1 12:00:00 2023 GMT
Not After : Mar 9 05:00:00 2023 GMT
Subject: CN=b8d53570-0191-479b-ba91-be7d9f93421a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:02:47:e1:4c:5f:47:6a:87:0f:ad:fb:4e:
29:65:83:7c:be:62:c3:17:a7:47:ff:c2:27:46:16:
b2:e2:39:6e:de:6e:3c:59:77:32:1b:29:12:8a:10:
f0:6f:cd:e7:f5:a4:79:eb:2d:cb:88:31:ec:ee:24:
fd:05:e6:23:c6:0c:1f:92:57:c3:e4:14:17:f1:f1:
8a:f1:ed:08:a9:89:92:2d:7a:20:2b:25:cd:bf:e7:
d0:e1:26:83:65:c0:a6:31:40:d6:19:7a:fc:8c:5b:
36:dc:53:3e:fb:38:2c:f0:73:84:1e:ab:d3:34:92:
7b:40:9e:91:aa:55:c6:d4:08:ae:36:17:e8:f0:ce:
77:5c:d2:58:7c:6e:00:ee:99:8a:06:bb:02:a8:c0:
ad:47:26:95:0d:75:a5:14:26:e4:6b:2b:12:7f:de:
fa:bf:48:73:22:51:9e:9d:e5:68:07:56:84:a1:ed:
4f:78:54:3b:1b:08:05:aa:ab:22:92:5c:ef:e0:ef:
84:d5:0f:99:dd:9a:bd:86:58:85:e2:ec:28:70:c2:
7d:4d:33:47:cd:11:95:13:04:81:1e:8f:11:f9:66:
14:38:8f:c3:25:dc:cd:fd:3b:ec:20:ef:ba:c4:79:
e0:d0:d2:fe:47:4d:0c:07:50:70:3f:15:32:98:2c:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2B:00:B2:D9:83:2E:BC:6B:D2:FF:CF:81:A8:54:C5:EE:18:3B:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d4fe042d-f9af-3904-aa94-e542e1f6e912.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.118.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:6a:53:ad:9e:87:3a:60:25:8d:e7:b7:d4:c2:3a:a3:fa:33:
31:8d:ff:f2:ba:f4:f7:ae:0e:14:a0:42:30:d3:33:c3:3e:65:
7b:e3:b2:fa:20:c9:d1:69:12:76:9d:0d:20:94:e8:aa:43:8f:
95:d7:2c:66:fd:d3:31:f5:5b:fa:2e:83:30:09:4d:78:9f:92:
31:38:a0:1d:11:29:cf:cd:9c:33:10:1a:aa:37:98:25:44:40:
4a:eb:3e:a8:da:20:83:15:3f:d6:38:97:d6:9b:43:7e:57:2d:
f0:1d:a3:2d:fe:ec:66:31:94:28:b6:b6:af:18:75:30:a4:59:
46:02:52:29:f9:9b:8e:c3:5d:03:90:0b:62:c1:6d:df:f9:85:
ae:1a:41:5e:d8:3e:0c:0b:78:c9:23:af:dd:31:e3:ad:93:e7:
bf:de:0f:9e:05:1d:30:97:b3:dc:65:e8:e5:bc:19:17:0f:df:
31:31:0d:a3:04:06:94:35:2a:67:70:89:e7:8e:5f:52:e8:59:
d6:7c:68:ba:39:78:c2:b4:d5:f1:80:e1:ad:77:79:c5:91:4c:
65:38:bc:41:43:57:ef:86:d7:8e:ed:f2:c9:7f:b3:ea:81:79:
b5:15:bf:74:ed:74:23:ff:5d:70:fa:e4:a2:d7:ba:72:d6:a2:
ef:83:c7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:08:03 2025 by rpki-client