Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5fe1f0f-7641-3903-8819-3514c5432ddd.roa
File: d5fe1f0f-7641-3903-8819-3514c5432ddd.roa (raw, json)
Hash identifier: ryhCj+D6N6mXx3tPcbav5ipLUsOtANnD4u1oveG4ldw=
Subject key identifier: 5B:0A:CF:44:70:93:DC:C2:92:57:09:DE:A1:4E:A7:F3:05:9C:41:58
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F432858404B913716D5D1B16490130840
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5fe1f0f-7641-3903-8819-3514c5432ddd.roa
Signing time: Mon 19 Dec 2022 16:54:08 +0000
ROA not before: Mon 19 Dec 2022 16:54:08 +0000
ROA not after: Tue 24 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 16.94.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4b:91:37:16:d5:d1:b1:64:90:13:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Dec 19 16:54:08 2022 GMT
Not After : Jan 24 05:00:00 2023 GMT
Subject: CN=5eb93c63-72f0-421e-8470-74a3139e19a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:29:a7:dc:1e:44:65:10:68:c7:21:ae:ec:
fd:7b:31:5b:c8:a8:ed:b1:8f:24:eb:62:44:19:0c:
2f:e1:64:cc:49:87:87:70:56:fb:13:98:1d:f5:50:
37:a3:c2:cc:3e:8f:ec:6c:64:7c:10:a1:d8:e6:5a:
09:a0:80:54:8a:9e:f4:d7:41:9c:06:1a:29:9a:55:
55:03:78:a4:7c:f9:af:bc:e7:eb:31:13:74:11:99:
aa:d7:20:c3:a6:77:64:06:ae:f0:39:94:d1:5b:13:
a5:75:8e:69:df:ca:57:72:ff:34:1a:01:65:99:ec:
dd:a5:d5:24:c9:51:7d:82:9b:27:38:7b:29:6d:03:
05:71:7f:3a:19:c5:d6:c7:ea:53:cf:a5:5c:e8:b7:
33:4d:d7:8d:41:34:45:5e:17:10:6e:38:b5:20:49:
8c:7e:bf:fc:f7:1d:59:ea:24:10:ca:0d:8b:1d:c5:
e7:a6:ef:09:64:4b:75:85:de:16:1c:61:09:93:c5:
9e:60:32:8b:3e:71:ca:0e:05:70:21:c9:17:f9:e7:
88:6f:a9:31:36:a9:27:e2:ea:81:58:fd:fc:38:55:
71:72:8f:11:bf:9e:a5:cc:ea:33:34:4c:8a:fd:42:
45:1f:e3:06:75:19:76:75:be:b4:43:00:dc:fd:c5:
a8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0A:CF:44:70:93:DC:C2:92:57:09:DE:A1:4E:A7:F3:05:9C:41:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/d5fe1f0f-7641-3903-8819-3514c5432ddd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.94.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:38:1e:0e:de:c6:41:4b:d0:f4:d6:5b:1e:3c:c8:27:87:2e:
ae:bf:43:6d:c8:ca:17:08:be:6c:95:c9:49:da:bd:ce:3c:fd:
5e:fc:a5:17:dc:b2:15:dc:80:32:9c:91:3f:19:a7:1f:58:27:
75:35:2c:93:bc:c3:04:50:e9:fd:3b:2c:30:82:f6:ea:e5:ce:
60:6c:a2:e2:22:82:66:82:81:9b:2e:9e:a3:5d:d3:27:e3:14:
a0:bd:43:11:77:11:81:ca:ff:ee:c8:11:52:fa:9f:a8:48:37:
9f:8b:b0:b2:f1:42:37:cb:ee:da:03:f5:7f:d2:1f:a7:65:db:
16:37:df:fc:1e:dc:88:b4:b8:fe:41:a5:67:b0:87:05:1c:11:
88:d6:e5:d2:e9:11:7c:e9:a9:1a:11:1f:e6:5f:3a:a2:c2:4e:
95:72:85:27:d0:0c:60:b6:eb:22:65:30:b5:f2:2b:eb:bc:d2:
13:54:31:22:ab:11:94:94:e6:e0:07:48:06:0c:8e:3d:83:d9:
f4:ff:08:c2:f5:35:08:15:6b:c7:7e:be:91:41:cd:36:7a:9b:
db:72:54:08:c8:da:b5:81:ca:ae:9d:55:32:fe:0f:45:1b:75:
fb:e6:03:dd:d6:7e:1b:63:39:ba:68:93:9d:57:e0:e5:c0:52:
f9:7b:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:15:09 2025 by rpki-client